last executing test programs: 10m49.972100404s ago: executing program 1 (id=1586): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000480)={0x20, 0x22, 0x19, {0x19, 0x11, "06c8df7c9b0ab838b588b1952c861cd114bfa25fb939a7"}}, &(0x7f00000005c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x60, 0x12, 0x3d, "d35e56ad3c6c27af36de3a28eb7d3fc9aa744c27b256822f652ef3e02b74120b9695e644efd825f027b809d09c4a223bfc37643a88f250bc6b0511279f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x81, 0x3, "8d22c4"}, &(0x7f0000000880)={0x20, 0x82, 0x2, "7917"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "3d7f"}, &(0x7f0000000900)={0x20, 0x84, 0x2, "fbde"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "1de9dc"}}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x18, 0xc00000, "c8df28c35a6a3184ac0000000002000000000004a2508492", {0x40000203, 0x9d37}, 0x6b1e}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x0, 0x6, 0x12, {0x12, 0xf, "38f842f68ea6ef6b5e2243eb14d3af63"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "4d970a04d5b5718140d9bae04230b939ee45f458703e05b247c54030316b51f32dd05fb7e07d791e9287b970357c8d8ca0c02b5cc1411325bcf443"}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x16, 0x55, "fd2207ae7aa6a3b2c7e34909cd81a5f7e43f2eb9b2e0f7e4d05ee7465182c1db5cfbcb76409e4102330406e5257364cf9a87cadc39e60c214dd81895a0f35c962e614e7551c0cb85592e307ac2fac61ab1b73bd361"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0xc0, 0x5, 0x6, "5a7af5a84099"}, &(0x7f00000003c0)={0x40, 0x5, 0x6, "9d643295d646"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r4, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000b40)={0x24, &(0x7f00000004c0)={0x20, 0x0, 0x55, {0x55, 0x8, "ce2f533a42ab9dbbc460c1ca5f8afc6c783701c3f2f903cacc8464802522ae4beaabecbf5a2b73bc32e32f7c4a66bc51c9dfae10af054ee8b04e308bb866f88875f8277cdbbb2ebc39f3cb14041c714b7ee40c"}}, &(0x7f0000000a00)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "716b96a3ef5b675e2fc4c47bbe6252dd797bd9bae95a85ccd29a9cbfcbdd5946af4d51fc561f16a25322af842df2266d62e5d4a553571a8b9e1690d1ae00bef29cb65d5d3f6f94e6f353080000001ff9788abb1caed4dbe55bed82f535df62ec39d3ddaa6c4b4a2d25ab64fcc096236fbbc5abf7ddb491c916b9afc465ab15b9e1b0ea0c2e65da5b2a"}}, &(0x7f0000000ac0), &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x28c}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b80)={0x20, 0x3, 0x79, "f77458abf9f33f6736664e48a83b9b4b4acefa8a7b495f4703a982f8d131374d90a4c87286e75392aef729553ab8c0672ca1570d2008dd94836c27afcda07c94936ac948381e3dda80cd04e1f46c88e83eef06f8ac85d7ab59a760ac74d6e2f75f261381ee92cd7fc2536ed28f966afb893206a00f08e06324"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000c80)={0x20, 0x1, 0x42, "db20f9bac5116acccdfbe7e4c38c6dcc0a5ee763dcbd40d44ff0d694199931ae9a78c0fc8aaac5ffeac8222dbf5441be1240e06c0999d8e698bcc3449c1ceb5ceae9"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x1}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xffe0}, {0xfff3, 0xffff}, {0x6, 0xfff1}}, [{0x8, 0xb, 0x801}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) read$eventfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) 10m46.786553043s ago: executing program 1 (id=1597): r0 = socket$kcm(0x10, 0x3, 0x10) shutdown(r0, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) r6 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x22000600) r7 = inotify_init() inotify_rm_watch(r7, 0x0) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x7800, 0xc000, 0x3, 0xd1, 0x0, r4}) io_uring_enter(r5, 0x2219, 0xae02, 0x16, 0x0, 0x58) memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc20x0, @local, @private}, &(0x7f00000007c0)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pI4 \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x77c}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0xf, 0x2, 0x1, 0x100, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xfc, &(0x7f0000000680)=""/252, 0x40f00, 0x42, '\x00', r3, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x7fff, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000c80)=[r4, 0x1, r5, r6, r7], &(0x7f0000000cc0)=[{0x1, 0x4, 0x1, 0x9}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x6, 0x9}, {0x1, 0x1, 0x5, 0x5}]}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000f80)={0x0, 0x1, &(0x7f0000000e00)=""/54, &(0x7f0000000e40)=""/143, &(0x7f0000000f00)=""/109, 0x2000}) write$char_usb(0xffffffffffffffff, &(0x7f0000000fc0)="22f590080146019c7fa4330efb64f3cc1ab6ae6839f5ef4f0b007ec1fa502809fa929ee5995d2be18e68b2c609dc7b91549a86a4ad9e6c89b293cf42ecfb076b86534d261a7b5b878cb5f704605676329cd63b7d3bed5faac8f322e23cde9f990ac0f6575c1a6bd0761880478cb4f8563ac6db9b298689471a87ac1a04b4b0f33f4e3606843574519a5c0fc892b9e54615ae2664077699b709104405c704b146b9195c78e27891586eb7d8531f8a82d84a3a422d98f5b4618094fd640501410e76", 0xc1) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r10, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "8301"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_genetlink_get_family_id$fou(&(0x7f0000001280), r9) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000001280), r9) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r11, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) r12 = syz_open_dev$sg(&(0x7f0000001380), 0x6, 0x160c1) ioctl$SG_SET_DEBUG(r12, 0x227e, &(0x7f00000013c0)) (async) ioctl$SG_SET_DEBUG(r12, 0x227e, &(0x7f00000013c0)) ioctl$F2FS_IOC_COMPRESS_FILE(r12, 0xf518, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001440)={0x2d2b, 0x8, 0x4, 0x6, 0x3, 0x1000}) 10m39.674782588s ago: executing program 1 (id=1621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000032e000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(0xffffffffffffffff, 0x732) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r6 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x5, 0x0, 0x1, 0xf, 0x4}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xd7, 0x73, 0xff, 0xff, 0x80, 0x9, 0x7f, 0x5, 0x5, 0x1, 0x1, 0x89, 0xf, 0x67}, 0xe) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 10m39.223258916s ago: executing program 32 (id=1621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000032e000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(0xffffffffffffffff, 0x732) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r6 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x5, 0x0, 0x1, 0xf, 0x4}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xd7, 0x73, 0xff, 0xff, 0x80, 0x9, 0x7f, 0x5, 0x5, 0x1, 0x1, 0x89, 0xf, 0x67}, 0xe) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1m2.090776134s ago: executing program 5 (id=4202): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x5422, 0x0) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) syz_usb_connect(0x0, 0x3f, &(0x7f000001a240)=ANY=[@ANYBLOB="120100007e9f5210d11255e1aace0102030109022d00010607200909046901000e0100cf0524060000052400faff0d240f0103000014070007000204240201"], 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) sched_setparam(0x0, &(0x7f0000000280)=0x400) (async) r5 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) write$binfmt_elf32(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600"], 0x66) 58.96466184s ago: executing program 4 (id=4211): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fanotify_init(0x2, 0x1000) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 58.770217332s ago: executing program 5 (id=4212): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e27000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x48) 58.209432875s ago: executing program 5 (id=4214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_USERDATA={0x53, 0x7, 0x1, 0x0, "33e3c46226062b8c9af8f92b1f2acbaca9fab3612180fdf150c0e73d6205ca6d6783c6bc640645687af79efcd022e34b517c18116f7aa046b7f3f4486d38952b6c1947e7b78da693789aa7f1459ace"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r3 = dup(r2) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xfffffffc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0000, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8e80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xbc, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x40}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0xc4) fanotify_mark(r1, 0x1, 0x48000046, r3, 0x0) r12 = dup(r3) write$binfmt_elf64(r12, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0xd2c7, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x1b8, 0x7}], "", ['\x00']}, 0x178) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0x4, 0x48e445f6, 0xd4c, 0xb, r13}) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 57.487771568s ago: executing program 4 (id=4218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r6, 0x0, 0x2, 0x5) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffe3e) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000100)=[0x401, 0x4]) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r7, 0x3, {0x100000001, 0x407}}, 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000010000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000002e97a704f800000000323f00000000000000"], 0x50) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f00005fe000/0x1000)=nil, &(0x7f0000735000/0x2000)=nil, 0xb1f5, 0x0, 0x0, 0x10001, 0x58, 0x24, 0x0, 0x40}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x8, 0x208000) r11 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8e, 0x3, 0x1000, 0x1, @rand_addr=' \x01\x00', @remote, 0x80, 0x80, 0x0, 0x4}}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0x5, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xf2ff0000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r11) 56.667574328s ago: executing program 5 (id=4222): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="807efaa0498933df4b28869b891345f0c9bd6505cf7b052797361992955317b38cb689384974e000216774622dc68d00e0163d5df634d9a0979a9f9b1c3d8ad5725bd02293a69d81441ddfaceb91148f8492fb6a99511834f47a04e49a5df7fcf257bdbcd469ab8cf8554475a0", 0x6d}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0x5000, 0x84340}) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 56.351635313s ago: executing program 2 (id=4224): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000005c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x1, 0x9, 0x101, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x49}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = dup2(r2, r2) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000040)=0x1) (async) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000040)=0x1) unshare(0x22020400) (async) unshare(0x22020400) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000900), &(0x7f0000000000)) (async) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000900), &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x20000840) r6 = epoll_create(0x7) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70100400000004000000080009000200"], 0x34}}, 0x20) r11 = epoll_create(0x7) unshare(0x20000400) (async) unshare(0x20000400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000140)={0x60000000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f00000001c0)={0x10, 0x9, 0x6, 0x7}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r12, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x33}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 55.972236475s ago: executing program 0 (id=4225): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="77933605903e8c2ca07a3941f93e0e7808a5415636", 0x15}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4031, &(0x7f0000000180)=ANY=[@ANYBLOB="2c326052d741ec0b177237a853c74186b6abe02c"], 0x0, 0x0, 0x0) 55.799038108s ago: executing program 3 (id=4226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1', 0xa, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', "000000000000000000000200"}) 55.420602942s ago: executing program 4 (id=4227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48c, 0x0, 0x31b}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x11, 0x0, 0x9, 0x2b6, 0x3, 0xc}, {0x7, 0x1, 0x3ff, 0x1, 0x3, 0x3}, 0x2, 0x9, 0x1d4b}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='foo#dnserror=+\x00', 0xf, 0xfffffffffffffffe) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) syz_open_procfs(0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2) setsockopt(r11, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 55.354053788s ago: executing program 2 (id=4228): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fanotify_init(0x2, 0x1000) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 55.268681843s ago: executing program 0 (id=4229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3001, 0x7576, 0x1, 0x3, 0xd}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x26, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}, [@nested={0x4, 0x11c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) 54.803718052s ago: executing program 3 (id=4230): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0xc1, 0x15, 0x14, 0x10, 0x93a, 0x2629, 0xd989, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xbd, 0x10, 0x3, "", [{{0x9, 0x4, 0xf4, 0x6, 0x0, 0xa2, 0xbf, 0xcf, 0x6}}]}}]}}, 0x0) 54.000449262s ago: executing program 0 (id=4231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x0, 0x4) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) openat$cgroup_ro(r1, &(0x7f0000000d80)='blkio.bfq.sectors\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0x8c1, 0x40000}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x3, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4dd, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r7 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xff, 0xa, {0x7, 0x25, 0x1, 0xc, 0x3, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x9, 0x1c, {0x7, 0x25, 0x1, 0xc, 0x2, 0x7fff}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x48, @string={0x48, 0x3, "26a0f18501697521e93441dbc2e38b5ecc305d635e5f2858c1aeddb87b09484300a8a67243062ef365c94676a566553d33c79e4ea1d94de56e266ef9559807beecddb2dbecdd"}}, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10000}, @tail_call, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x67, &(0x7f0000000bc0)=""/103, 0x40e00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x2, 0x1, 0xe, 0x1}, 0x10, 0x1a67, r0, 0x0, &(0x7f0000000c80)=[r2, 0x1], 0x0, 0x10, 0x2}, 0x94) 53.621908611s ago: executing program 5 (id=4232): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x40) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)) r1 = add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @desc4}, &(0x7f0000000f80)={0x0, "30999ad8694f65279d9345f95f427c8e764955aa483e899530c1386badbd3c993783304c5505e48aaa0c1222859e0648f012a320f0a4dcfc91c6cb9a09f76dbd", 0x2d}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='syzkaller\x00', &(0x7f00000012c0)={'syz', 0x2}, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110016bd936402404009e2091010203010902244b9dd98d9eba00010f9100510904d80302ff02620209050c03080006070209050129a86a0b135b0e92224e4d47e57f5bcc443794b4ec"], 0x0) 53.485013031s ago: executing program 2 (id=4233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = getpid() ptrace(0x10, r1) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000040), 0x1001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x24, 0x2, 0x7}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {0x85, 0x0, 0x0, 0x27}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.342725098s ago: executing program 3 (id=4234): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) timer_create(0x0, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 53.107432775s ago: executing program 3 (id=4235): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x1, 0x2, {"ce3cfaf2dfb0c941a526e69804763191"}, 0x4, 0x2, 0x2}, @ib={0x1b, 0x7, 0x7, {"21a952e43f48f17f51295753296288e4"}, 0x800, 0x5, 0x1c3}}}, 0x118) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00db001000030428bd78000000000000000000d0e69601280fec5f0778324446fbbaeff5675af8217b7fda1838d29e5ed687046005828f9108e471bcf48398cc0f842824a86a9dd291d4329d25cf23ad979cf1670a", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r11 = fanotify_init(0x40, 0x1) fanotify_mark(r11, 0x1, 0x4800003e, r10, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0xa774) r12 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x90) vmsplice(r12, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 53.095578484s ago: executing program 2 (id=4236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005"], 0x68}}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 52.821975448s ago: executing program 4 (id=4237): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 52.706952297s ago: executing program 0 (id=4238): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x100b01) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x298, 0x8000, 0x4, 0x7, 0xf730, 0x8, "62e75a50cf20b0e80bc8fa2cd2ae82c4", 0x6, 0x9, 0x8, 0x2, 0x9, 0x1, 0x2}) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000001c0)="140000001600f963d25a80648456dc921f6b718d12", 0x15}], 0x1}, 0x804) 52.610538509s ago: executing program 4 (id=4239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x410000, 0x0) syz_usb_connect(0x0, 0x4e, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) nanosleep(&(0x7f00000004c0)={0x77359400}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r2, &(0x7f0000000b00), 0x2, 0xd000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000139000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000540)="660f388262fcf08227081b3536660fc773c1d1cbb832000f00d0b8ec000f00d0dd72070fc0320f20e06635000002000f22e0", 0x32}], 0x1, 0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080000004e21062208"], 0x5c}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x7, 0x0, {0x6, 0x1}, {0x38, 0x2002}, @cond=[{0x6, 0x3, 0x4, 0x401, 0x9, 0x5}, {0x1ff, 0x8000, 0x4, 0x5, 0x5, 0x7}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x3, 0xff, 0x0, 0xf84, 0x28, 0x0, 0xfa, 0x7, 0x40, 0x3, 0x13, 0x0, 0x10, 0x2, 0x8, 0x4, 0x1, 0x0, '\x00', 0x5, 0x7}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, &(0x7f0000000440)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x100, &(0x7f0000000080)=""/201, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x1, 0x2}, 0x10}, 0x94) 52.302214386s ago: executing program 0 (id=4240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1', 0xa, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', "000000000000000000000300"}) 52.14327888s ago: executing program 3 (id=4241): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/133, 0x85, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x1, 0x7f, 0x3, 0x7}, 0x1005}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x5ab7, {0xff}, {}, @raw32}], 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) gettid() sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x2, 0x801, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x2}, [@nested={0x8, 0x133, 0x0, 0x1, [@nested={0x4, 0x85}]}]}, 0x1c}}, 0x30000800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) capset(0x0, &(0x7f0000000140)={0x200010, 0x2000a48, 0x20, 0x2, 0x8}) fanotify_init(0x200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) 52.016063157s ago: executing program 5 (id=4242): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440) ioctl$RTC_UIE_OFF(r4, 0x7004) getsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r8, &(0x7f0000000000)=""/120, 0x78, 0x2f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="000000952ba30000000000000000", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0xa1}, 0x18) 51.851062362s ago: executing program 2 (id=4243): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fanotify_init(0x2, 0x1000) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 51.419590993s ago: executing program 0 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x19) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20044000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x110000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) 50.064927021s ago: executing program 2 (id=4245): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) timer_create(0x0, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 46.797220031s ago: executing program 4 (id=4246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newtfilter={0x6d8, 0x2c, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x3}, {0x8, 0xb}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff0, 0xfff3}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2, 0x4, 0x7, 0xffffe70c}, {0x7, 0xff, 0x5, 0xfffffffc}, {0x1, 0x5, 0x4, 0x4f1}, {0xf33, 0x6, 0x3, 0x5}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x268, 0x2, [@TCA_U32_SEL={0x234, 0x5, {0xf, 0x4, 0x5f, 0x6, 0x9, 0xc, 0x400, 0x2, [{0x1, 0x2, 0x9, 0x3}, {0x8, 0x6a1, 0x4e9, 0x3}, {0x3, 0x1, 0x7, 0x3c}, {0x7, 0xe9, 0x8f, 0xc2c}, {0x2, 0xb98a, 0xbb3, 0x7ff}, {0x3ff, 0x1ff, 0xff, 0x2}, {0x10000, 0xfeed, 0x4, 0x401}, {0x2, 0x7ff, 0x6a, 0x6}, {0x0, 0x800, 0xb18, 0x115f}, {0x10001, 0x7, 0x2, 0x7ff}, {0x5, 0x0, 0x1, 0x9}, {0xc, 0x8, 0x7}, {0x4, 0x400, 0x1, 0x8}, {0x9, 0x9, 0xffffff7f, 0xfffffffd}, {0x10000, 0x4, 0xf, 0x3bb2}, {0x5, 0x200, 0x800, 0x3f9e}, {0x9, 0x2, 0x77, 0x8}, {0xd77, 0x3, 0x5, 0x3}, {0x8, 0x9, 0x3, 0x67}, {0x5, 0xfffffffb, 0x4, 0x4}, {0x3, 0x7, 0x4, 0x10000}, {0x9, 0x7ff, 0x2}, {0x0, 0xfffffffc, 0x7, 0x9}, {0x8, 0x1ff, 0x836, 0xfffffd54}, {0x8, 0x9, 0x79, 0x5}, {0x6, 0x4, 0x4}, {0x7, 0xba, 0x6, 0x80000000}, {0x10000, 0x8, 0xf46b, 0x5}, {0x1, 0x80000001, 0x81, 0x7}, {0x9, 0x2, 0x9, 0xffffffff}, {0x7fffffff, 0x9, 0x20e3, 0x54ef}, {0x4, 0x6, 0x8001, 0x80000000}, {0x7778, 0x80000000, 0x2, 0x8}, {0x6, 0xfccef92, 0xfd, 0x3ff}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x9f}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x3d0, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff, 0x0, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x7}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x87}, @TCA_FLOWER_ACT={0x398, 0x3, [@m_ife={0x50, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0x6f, 0x3, 0x100, 0x1}, 0x1}}]}, {0xc, 0x6, "8814cef5f46737ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0xd8, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xa4, 0x6, "3fb4e5097d05efbe43af8ae2ac32b70fb666cb02452e0f73fc24021b3e6269966152a70972c95125e3e82cb51a61d9713ed3dc0319f093bcd70ca9cd9832dee4a40382f1fff319dedced23070192b0566b5fd3e8daed0110271bccd6e9a517abfc1ddc96f8c9eb6e302965c3498a257b77bb3c186bc0bcf03bc3675cdc9a3daad54ecd71bbde726c1887a5affb133228fe0f9f9578c7b18be54c3de6b5b6a44a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x13c, 0x4, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xffffffffdffffffa, 0x10001}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xbe, 0x5, 0x2, 0x1}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xdee6fc7b}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x67, 0x6, "08967c26856c991ba342c793afbeeac3f8a641c594305cddc3afb9f5f83b7a77036763206fa55607e3d8fa989535e89fbf8439a494dd508b7b308f408d066d23b236841577701723f804c0ebd880c2d4a64d11af44d7eda3e794aaef85864c272a2cb2"}, {0xc}, {0xc}}}, @m_ctinfo={0x130, 0x1a, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10000000, 0x3ff, 0x4, 0x80000000, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0xc586, 0x7, 0x101, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x5, 0xffffffffffffffff, 0x1ff, 0xd}}]}, {0xb2, 0x6, "0fa34fe433eef3eb10abe15b893231d461e89d907b476b1f0ee2c0c296502c9d7db835c3047b772ba280b1ce12dfc47c2b6babdc59fba046b1bfe4a9aaa1682aacab9420cdc31ff166585126246227e1153ed28826d948a14b1fff7386ab58e67f28aa981533989a39b3890ca821e433c666e922e9489d4907583151d8fe5930913239ed0c91a19fe807d7553dbd1b8b2fb84c4662368c35ae909b97a523b04662eb744589bfaba7f215f8ec7668"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x3f, 0x5b}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) (async) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) (async) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0xf}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000}, 0x0) r6 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r7, 0x8, 0xd1}, 0x8) (async) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000400)=""/249) shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0x7000) 46.21430712s ago: executing program 3 (id=4247): r0 = socket(0x10, 0x3, 0x0) socket$inet6(0x2d, 0x806, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x4e6080, 0x0) write(r0, &(0x7f0000000040)="240000004f0025000307f4f9002304000a04f55f08000100020100020802038005000000", 0x24) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp6(r0, &(0x7f0000000300), &(0x7f0000000340)=0x20) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000040)=0x10001, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000000)) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) r5 = epoll_create1(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_pwait(r5, 0x0, 0x0, 0x6, 0x0, 0x0) clock_gettime(0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@flag='sync'}, {@appraise_type}, {@fsname={'fsname', 0x3d, '-\'\xc3/*'}}, {@appraise_type}, {@euid_lt={'euid<', r7}}]}}, 0x0, 0x0, &(0x7f00000002c0)="8439132add723ebf5b939645668bdcce472108d1f28157fc81e5717868b1334626ae40bb2e35b666") gettid() 0s ago: executing program 33 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x19) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20044000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x110000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x8) kernel console output (not intermixed with test programs): e: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.434138][T20996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.533206][ T5621] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1021.679389][ T5621] usb 5-1: Using ep0 maxpacket: 16 [ 1021.688321][ T5621] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1021.688377][ T5621] usb 5-1: New USB device found, idVendor=1546, idProduct=1304, bcdDevice=b6.0d [ 1021.692109][ T5621] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1021.692145][ T5621] usb 5-1: can't read configurations, error -22 [ 1021.692507][ T5621] usb usb5-port1: attempt power cycle [ 1021.698654][T11449] usb 4-1: Warning! Unlikely big volume step count (=6540), linear volume or wrong cval->res? [ 1021.698678][T11449] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/6540/1 [ 1021.763167][T15842] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1021.805594][T11449] usb 4-1: USB disconnect, device number 28 [ 1021.914372][T15842] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1021.914429][T15842] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1021.916109][T15842] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 1021.916144][T15842] usb 6-1: config 114 has no interface number 0 [ 1021.916187][T15842] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1021.916220][T15842] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1021.916246][T15842] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1021.916270][T15842] usb 6-1: config 114 interface 240 altsetting 232 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1021.916296][T15842] usb 6-1: config 114 interface 240 has no altsetting 0 [ 1021.922232][T15842] usb 6-1: string descriptor 0 read error: -22 [ 1021.922370][T15842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.942725][T21026] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1021.942864][T21026] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1021.948123][T15842] ir_usb 6-1:114.240: IR Dongle converter detected [ 1022.040073][ T5621] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1022.060520][ T5621] usb 5-1: Using ep0 maxpacket: 16 [ 1022.063161][ T5621] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1022.063222][ T5621] usb 5-1: New USB device found, idVendor=1546, idProduct=1304, bcdDevice=b6.0d [ 1022.064772][ T5621] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1022.064813][ T5621] usb 5-1: can't read configurations, error -22 [ 1022.200495][ T5621] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1022.221799][ T5621] usb 5-1: Using ep0 maxpacket: 16 [ 1022.236151][ T5621] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1022.236209][ T5621] usb 5-1: New USB device found, idVendor=1546, idProduct=1304, bcdDevice=b6.0d [ 1022.238302][ T5621] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1022.238369][ T5621] usb 5-1: can't read configurations, error -22 [ 1022.241330][ T5621] usb usb5-port1: unable to enumerate USB device [ 1022.330932][T21034] __nla_validate_parse: 37 callbacks suppressed [ 1022.330956][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 1022.351464][T15842] usb 6-1: IRDA class descriptor not found, device not bound [ 1022.356689][T21034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1022.456875][T21037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.461780][T21038] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1022.493207][T21038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4035'. [ 1022.493361][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4035'. [ 1022.606255][T21042] FAULT_INJECTION: forcing a failure. [ 1022.606255][T21042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.606294][T21042] CPU: 1 UID: 0 PID: 21042 Comm: syz.0.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1022.606322][T21042] Tainted: [L]=SOFTLOCKUP [ 1022.606330][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1022.606343][T21042] Call Trace: [ 1022.606353][T21042] [ 1022.606363][T21042] dump_stack_lvl+0xe8/0x150 [ 1022.606400][T21042] should_fail_ex+0x410/0x560 [ 1022.606430][T21042] _copy_to_user+0x31/0xb0 [ 1022.606461][T21042] bpf_verifier_vlog+0x496/0x900 [ 1022.606496][T21042] bpf_verifier_log_write+0x11d/0x1a0 [ 1022.606518][T21042] ? __pfx_reg_type_str+0x10/0x10 [ 1022.606544][T21042] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1022.606581][T21042] print_reg_state+0x11ba/0x1a30 [ 1022.606613][T21042] ? __pfx_print_reg_state+0x10/0x10 [ 1022.606633][T21042] ? _copy_to_user+0x8a/0xb0 [ 1022.606699][T21042] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1022.606729][T21042] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1022.606754][T21042] print_verifier_state+0x205/0x1a40 [ 1022.606776][T21042] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1022.606806][T21042] ? __pfx_print_verifier_state+0x10/0x10 [ 1022.606827][T21042] ? bpf_vlog_reset+0x2aa/0x340 [ 1022.606851][T21042] ? print_insn_state+0x106/0x170 [ 1022.606876][T21042] do_check_insn+0xc4cc/0x18e70 [ 1022.606935][T21042] ? __pfx_do_check_insn+0x10/0x10 [ 1022.606972][T21042] ? _copy_to_user+0x8a/0xb0 [ 1022.607000][T21042] ? bpf_verifier_vlog+0x58d/0x900 [ 1022.607033][T21042] ? verbose+0x11d/0x1a0 [ 1022.607052][T21042] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1022.607076][T21042] ? __pfx_verbose+0x10/0x10 [ 1022.607097][T21042] ? bpf_vlog_reset+0x2aa/0x340 [ 1022.607120][T21042] ? print_insn_state+0x106/0x170 [ 1022.607141][T21042] do_check_common+0x3c19/0x5d30 [ 1022.607204][T21042] ? __pfx_do_check_common+0x10/0x10 [ 1022.607236][T21042] ? __pfx_verbose+0x10/0x10 [ 1022.607253][T21042] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1022.607287][T21042] bpf_check+0x2639/0x2e10 [ 1022.607321][T21042] ? ktime_get_with_offset+0x93/0x2d0 [ 1022.607348][T21042] ? __pfx_bpf_check+0x10/0x10 [ 1022.607373][T21042] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1022.607405][T21042] bpf_prog_load+0x14d6/0x1c20 [ 1022.607443][T21042] ? __pfx_bpf_prog_load+0x10/0x10 [ 1022.607493][T21042] __sys_bpf+0xd0d/0xd90 [ 1022.607525][T21042] ? __pfx___sys_bpf+0x10/0x10 [ 1022.607561][T21042] ? __fget_files+0x2a/0x420 [ 1022.607606][T21042] ? ksys_write+0x242/0x270 [ 1022.607636][T21042] ? __pfx_ksys_write+0x10/0x10 [ 1022.607669][T21042] __x64_sys_bpf+0xba/0xd0 [ 1022.607703][T21042] do_syscall_64+0x166/0x520 [ 1022.607728][T21042] ? trace_irq_disable+0x3b/0x140 [ 1022.607746][T21042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.607767][T21042] ? clear_bhb_loop+0x70/0xc0 [ 1022.607791][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.607810][T21042] RIP: 0033:0x7f2c12d9e159 [ 1022.607830][T21042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.607846][T21042] RSP: 002b:00007f2c13b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1022.607871][T21042] RAX: ffffffffffffffda RBX: 00007f2c13025fa0 RCX: 00007f2c12d9e159 [ 1022.607885][T21042] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 1022.607898][T21042] RBP: 00007f2c13b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.607910][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.607921][T21042] R13: 00007f2c13026038 R14: 00007f2c13025fa0 R15: 00007f2c1314fa48 [ 1022.607953][T21042] [ 1022.840155][T15842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1022.948406][T21048] syz_tun: entered promiscuous mode [ 1022.972164][T21048] syz_tun: left promiscuous mode [ 1023.000078][T15842] usb 3-1: Using ep0 maxpacket: 32 [ 1023.006879][T15842] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1023.011450][T15842] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1023.011477][T15842] usb 3-1: config 0 has no interface number 0 [ 1023.011516][T15842] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1023.011537][T15842] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1023.011557][T15842] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1023.011577][T15842] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1023.016999][T15842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.017023][T15842] usb 3-1: Product: syz [ 1023.017036][T15842] usb 3-1: Manufacturer: syz [ 1023.017049][T15842] usb 3-1: SerialNumber: syz [ 1023.035967][ T5621] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1023.044473][T15842] usb 3-1: config 0 descriptor?? [ 1023.046046][T21040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1023.204460][ T5621] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1023.205371][ T5621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.207255][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.207278][ T5621] usb 4-1: Product: syz [ 1023.207287][ T5621] usb 4-1: Manufacturer: syz [ 1023.207296][ T5621] usb 4-1: SerialNumber: syz [ 1023.212531][ T5621] usb 4-1: config 0 descriptor?? [ 1023.217824][ T5621] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1023.221873][ T5621] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1023.221930][ T5621] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1023.419615][T21044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.428709][ T5621] usb 4-1: USB disconnect, device number 29 [ 1023.431660][ T5621] garmin_gps 4-1:0.0: device disconnected [ 1023.655619][T15842] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1023.666045][T15842] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 1023.966329][T15838] usb 3-1: USB disconnect, device number 4 [ 1024.107453][T21068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.132923][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1024.132945][ T30] audit: type=1326 audit(1789928964.423:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.134758][ T30] audit: type=1326 audit(1789928964.423:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180161][ T30] audit: type=1326 audit(1789928964.423:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180215][ T30] audit: type=1326 audit(1789928964.433:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180264][ T30] audit: type=1326 audit(1789928964.433:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ce5d5e98e code=0x7ffc0000 [ 1024.180303][ T30] audit: type=1326 audit(1789928964.433:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180341][ T30] audit: type=1326 audit(1789928964.433:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180380][ T30] audit: type=1326 audit(1789928964.433:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180420][ T30] audit: type=1326 audit(1789928964.433:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.180459][ T30] audit: type=1326 audit(1789928964.433:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21069 comm="syz.4.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1024.221060][T15838] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1024.433239][T21075] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1024.445838][T21068] iommufd_mock iommufd_mock1: Adding to iommu group 2 [ 1024.602687][ T9147] usb 6-1: USB disconnect, device number 29 [ 1024.937742][T21100] FAULT_INJECTION: forcing a failure. [ 1024.937742][T21100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.937775][T21100] CPU: 0 UID: 0 PID: 21100 Comm: syz.3.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.937798][T21100] Tainted: [L]=SOFTLOCKUP [ 1024.937804][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.937814][T21100] Call Trace: [ 1024.937827][T21100] [ 1024.937835][T21100] dump_stack_lvl+0xe8/0x150 [ 1024.937869][T21100] should_fail_ex+0x410/0x560 [ 1024.937895][T21100] _copy_to_user+0x31/0xb0 [ 1024.937919][T21100] bpf_verifier_vlog+0x496/0x900 [ 1024.937950][T21100] bpf_verifier_log_write+0x11d/0x1a0 [ 1024.937971][T21100] ? __pfx_reg_type_str+0x10/0x10 [ 1024.937995][T21100] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1024.938029][T21100] print_reg_state+0x1471/0x1a30 [ 1024.938060][T21100] ? __pfx_print_reg_state+0x10/0x10 [ 1024.938078][T21100] ? _copy_to_user+0x8a/0xb0 [ 1024.938130][T21100] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1024.938160][T21100] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1024.938196][T21100] print_verifier_state+0x205/0x1a40 [ 1024.938217][T21100] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1024.938244][T21100] ? __pfx_print_verifier_state+0x10/0x10 [ 1024.938265][T21100] ? bpf_vlog_reset+0x2aa/0x340 [ 1024.938289][T21100] ? print_insn_state+0x106/0x170 [ 1024.938312][T21100] do_check_insn+0xc4cc/0x18e70 [ 1024.938369][T21100] ? __pfx_do_check_insn+0x10/0x10 [ 1024.938406][T21100] ? _copy_to_user+0x8a/0xb0 [ 1024.938434][T21100] ? bpf_verifier_vlog+0x58d/0x900 [ 1024.938467][T21100] ? verbose+0x11d/0x1a0 [ 1024.938486][T21100] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1024.938511][T21100] ? __pfx_verbose+0x10/0x10 [ 1024.938533][T21100] ? bpf_vlog_reset+0x2aa/0x340 [ 1024.938556][T21100] ? print_insn_state+0x106/0x170 [ 1024.938581][T21100] do_check_common+0x3c19/0x5d30 [ 1024.938648][T21100] ? __pfx_do_check_common+0x10/0x10 [ 1024.938672][T21100] ? __pfx_verbose+0x10/0x10 [ 1024.938688][T21100] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1024.938720][T21100] bpf_check+0x2639/0x2e10 [ 1024.938754][T21100] ? ktime_get_with_offset+0x93/0x2d0 [ 1024.938780][T21100] ? __pfx_bpf_check+0x10/0x10 [ 1024.938805][T21100] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1024.938837][T21100] bpf_prog_load+0x14d6/0x1c20 [ 1024.938875][T21100] ? __pfx_bpf_prog_load+0x10/0x10 [ 1024.938926][T21100] __sys_bpf+0xd0d/0xd90 [ 1024.938960][T21100] ? __pfx___sys_bpf+0x10/0x10 [ 1024.938996][T21100] ? __fget_files+0x2a/0x420 [ 1024.939045][T21100] ? ksys_write+0x242/0x270 [ 1024.939078][T21100] ? __pfx_ksys_write+0x10/0x10 [ 1024.939114][T21100] __x64_sys_bpf+0xba/0xd0 [ 1024.939139][T21100] do_syscall_64+0x166/0x520 [ 1024.939164][T21100] ? trace_irq_disable+0x3b/0x140 [ 1024.939193][T21100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.939214][T21100] ? clear_bhb_loop+0x70/0xc0 [ 1024.939237][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.939256][T21100] RIP: 0033:0x7f0a7979e159 [ 1024.939275][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.939292][T21100] RSP: 002b:00007f0a7a637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1024.939315][T21100] RAX: ffffffffffffffda RBX: 00007f0a79a25fa0 RCX: 00007f0a7979e159 [ 1024.939329][T21100] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 1024.939343][T21100] RBP: 00007f0a7a637090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.939355][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.939369][T21100] R13: 00007f0a79a26038 R14: 00007f0a79a25fa0 R15: 00007f0a79b4fa48 [ 1024.939403][T21100] [ 1025.160381][ T9147] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1025.369387][ T9147] usb 6-1: Using ep0 maxpacket: 16 [ 1025.370178][ T9147] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1025.371404][ T9147] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.371435][ T9147] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1025.373524][ T9147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.373549][ T9147] usb 6-1: Product: syz [ 1025.373564][ T9147] usb 6-1: Manufacturer: syz [ 1025.373579][ T9147] usb 6-1: SerialNumber: syz [ 1025.378779][ T9147] usb 6-1: config 0 descriptor?? [ 1025.526322][T21113] batman_adv: batadv0: Adding interface: syzkaller0 [ 1025.526343][T21113] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.537701][T21113] batman_adv: batadv0: Interface activated: syzkaller0 [ 1025.644802][ T9147] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input190 [ 1025.729511][T21121] binder: 21120:21121 ioctl 5000940a 200000000800 returned -22 [ 1025.734302][T21121] binder: 21120:21121 ioctl c0306201 2000000003c0 returned -14 [ 1025.735769][T21121] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1025.738822][T21121] binder: 21120:21121 ioctl 5000940a 200000000800 returned -22 [ 1025.758016][T21123] binder: BINDER_SET_CONTEXT_MGR already set [ 1025.758056][T21123] binder: 21120:21123 ioctl 4018620d 200000000080 returned -16 [ 1025.792516][T21122] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1025.798262][T21123] binder: 21120:21123 ioctl c0306201 2000000003c0 returned -14 [ 1025.856523][T21101] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1025.921919][T21101] batman_adv: batadv0: Removing interface: syzkaller0 [ 1025.981003][ T9147] rc_core: IR keymap rc-imon-pad not found [ 1025.981058][ T9147] Registered IR keymap rc-empty [ 1025.981146][ T9147] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1025.981165][ T9147] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1026.187763][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1026.187787][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.189168][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.207627][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 1026.207653][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.207693][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.234591][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(72) [ 1026.234619][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.234682][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.262114][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(74) [ 1026.262142][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.262184][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.266973][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(77) [ 1026.266999][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.277818][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.304970][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(79) [ 1026.304998][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.315912][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.331107][T21141] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(81) [ 1026.331133][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.331268][T21141] vhci_hcd vhci_hcd.0: Device attached [ 1026.399543][ T9129] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1026.449941][T15838] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1026.502677][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1026.502742][ T9147] imon:send_packet: packet tx failed (-71) [ 1026.524613][ T9147] imon 6-1:0.0: remote input dev register failed [ 1026.524804][ T9147] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1026.558319][ T9147] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1026.558345][ T9147] imon:imon_probe: failed to initialize context! [ 1026.558358][ T9147] imon 6-1:0.0: unable to register, err -19 [ 1026.573916][ T9129] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1026.596309][ T9129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.596341][ T9129] usb 3-1: Product: syz [ 1026.596356][ T9129] usb 3-1: Manufacturer: syz [ 1026.596371][ T9129] usb 3-1: SerialNumber: syz [ 1026.597873][ T9147] usb 6-1: USB disconnect, device number 30 [ 1026.647613][ T9129] usb 3-1: config 0 descriptor?? [ 1026.864601][ T9129] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1026.914131][ T9129] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1027.269883][T21183] qrtr: Invalid version 0 [ 1027.819421][T15842] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1027.928101][T21163] vhci_hcd: connection closed [ 1027.928575][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.928604][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.928720][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.928906][T21161] vhci_hcd: connection closed [ 1027.930310][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.930328][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.930419][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.930622][T21154] vhci_hcd: connection closed [ 1027.930981][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.930996][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.931072][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.931460][T21146] vhci_hcd: connection closed [ 1027.934325][T21144] vhci_hcd: connection closed [ 1027.937773][T21142] vhci_hcd: connection reset by peer [ 1027.949636][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.949655][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.949758][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.949983][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.949997][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.950070][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.952783][T21151] vhci_hcd: connection closed [ 1027.956384][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.956410][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.956513][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.983062][ T49] vhci_hcd vhci_hcd.4: stop threads [ 1027.983084][ T49] vhci_hcd vhci_hcd.4: release socket [ 1027.983139][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 1027.993360][T15842] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1027.994498][T15842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.994544][T15842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1027.994563][T15842] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1027.994583][T15842] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.002388][T15842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.002415][T15842] usb 6-1: Product: syz [ 1028.002429][T15842] usb 6-1: Manufacturer: syz [ 1028.002442][T15842] usb 6-1: SerialNumber: syz [ 1028.217144][T15842] usb 6-1: usb_control_msg returned -71 [ 1028.217205][T15842] usbtmc 6-1:1.0: can't read capabilities [ 1028.244341][T15842] usb 6-1: USB disconnect, device number 31 [ 1028.326085][T21200] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1028.580838][T15842] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1028.635682][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1028.635706][T21211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1028.719622][T15842] usb 6-1: device descriptor read/64, error -71 [ 1028.969503][T15842] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1029.081075][ T5621] usb 3-1: USB disconnect, device number 5 [ 1029.100160][T15842] usb 6-1: device descriptor read/64, error -71 [ 1029.198868][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 1029.198894][T21216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4068'. [ 1029.217770][T15842] usb usb6-port1: attempt power cycle [ 1029.399503][ T9147] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1029.453034][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4070'. [ 1029.522677][T21218] pimreg: entered allmulticast mode [ 1029.549368][ T9147] usb 4-1: Using ep0 maxpacket: 16 [ 1029.550113][ T9147] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1029.552546][ T9147] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.552567][ T9147] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1029.555166][ T9147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.555183][ T9147] usb 4-1: Product: syz [ 1029.555191][ T9147] usb 4-1: Manufacturer: syz [ 1029.555200][ T9147] usb 4-1: SerialNumber: syz [ 1029.557629][ T9147] usb 4-1: config 0 descriptor?? [ 1029.585788][T15842] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1029.629039][T15842] usb 6-1: device descriptor read/8, error -71 [ 1029.774769][ T9147] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input192 [ 1029.869383][T15842] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1029.890743][T15842] usb 6-1: device descriptor read/8, error -71 [ 1029.999707][T15842] usb usb6-port1: unable to enumerate USB device [ 1030.110103][ T9147] rc_core: IR keymap rc-imon-pad not found [ 1030.110118][ T9147] Registered IR keymap rc-empty [ 1030.110170][ T9147] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1030.110181][ T9147] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1030.411853][ T9144] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1030.482085][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1030.482839][ T9147] imon:send_packet: packet tx failed (-71) [ 1030.499461][ T9147] imon 4-1:0.0: remote input dev register failed [ 1030.499633][ T9147] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1030.553919][ T9147] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1030.553936][ T9147] imon:imon_probe: failed to initialize context! [ 1030.553943][ T9147] imon 4-1:0.0: unable to register, err -19 [ 1030.562962][ T9144] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1030.568359][ T9147] usb 4-1: USB disconnect, device number 30 [ 1030.570031][ T9144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.591995][ T9144] usb 3-1: config 0 descriptor?? [ 1030.807604][T21226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1030.814788][ T9147] usb 3-1: USB disconnect, device number 6 [ 1030.933449][T21241] input: syz0 as /devices/virtual/input/input194 [ 1030.969514][ T9144] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1031.120105][ T9144] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1031.121077][ T9144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.123303][ T9144] usb 5-1: config 0 descriptor?? [ 1031.279550][T15842] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1031.325476][ T9144] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1031.441788][T15842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1031.441846][T15842] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 1031.443513][T15842] usb 4-1: config 5 has an invalid interface number: 88 but max is 0 [ 1031.443536][T15842] usb 4-1: config 5 has no interface number 0 [ 1031.443562][T15842] usb 4-1: config 5 interface 88 altsetting 11 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1031.443579][T15842] usb 4-1: config 5 interface 88 altsetting 11 endpoint 0xE has invalid maxpacket 1096, setting to 64 [ 1031.443604][T15842] usb 4-1: config 5 interface 88 altsetting 11 endpoint 0xC has invalid maxpacket 72, setting to 64 [ 1031.443630][T15842] usb 4-1: config 5 interface 88 altsetting 11 endpoint 0x2 has invalid maxpacket 33032, setting to 64 [ 1031.443654][T15842] usb 4-1: config 5 interface 88 has no altsetting 0 [ 1031.447836][T15842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.447865][T15842] usb 4-1: Product: syz [ 1031.447881][T15842] usb 4-1: Manufacturer: syz [ 1031.447896][T15842] usb 4-1: SerialNumber: syz [ 1031.548178][T21231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1031.580557][T15838] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1031.617924][ T9144] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1031.625465][ T9144] [drm] Initialized udl on minor 1 [ 1031.684932][T21251] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4080'. [ 1031.876688][T15842] comedi comedi5: Endpoint has wrong direction [ 1031.876715][T15842] dt9812 4-1:5.88: driver 'dt9812' failed to auto-configure device. [ 1031.926693][ T9144] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.928315][ T9144] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1031.935556][ T9147] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.958528][T15842] usb 4-1: USB disconnect, device number 31 [ 1031.959569][ T9147] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.959784][ T9147] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1031.995334][ T9144] usb 5-1: USB disconnect, device number 65 [ 1032.087140][T21259] batadv_slave_1: entered allmulticast mode [ 1032.539616][ T9144] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1032.629842][ T5621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1032.690195][ T9144] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1032.693386][ T9144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.693415][ T9144] usb 6-1: Product: syz [ 1032.693431][ T9144] usb 6-1: Manufacturer: syz [ 1032.693440][ T9144] usb 6-1: SerialNumber: syz [ 1032.769433][ T9147] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1032.787062][ T5621] usb 3-1: Using ep0 maxpacket: 16 [ 1032.793119][ T5621] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1032.795227][ T5621] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.795259][ T5621] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1032.798236][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.798263][ T5621] usb 3-1: Product: syz [ 1032.798278][ T5621] usb 3-1: Manufacturer: syz [ 1032.798293][ T5621] usb 3-1: SerialNumber: syz [ 1032.850626][ T5621] usb 3-1: config 0 descriptor?? [ 1032.921118][ T9147] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1032.922384][ T9147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.926411][ T9147] usb 5-1: config 0 descriptor?? [ 1033.060535][ T5621] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input195 [ 1033.105742][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.106436][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.126468][ T9144] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1033.126527][ T9144] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1033.145370][T21277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1033.147458][T15842] usb 5-1: USB disconnect, device number 66 [ 1033.344999][T21282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1033.359763][ T5621] rc_core: IR keymap rc-imon-pad not found [ 1033.359785][ T5621] Registered IR keymap rc-empty [ 1033.359902][ T5621] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1033.359922][ T5621] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1033.461306][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1033.461328][ T30] audit: type=1326 audit(1789928973.753:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.3.4092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7979e159 code=0x7ffc0000 [ 1033.462234][ T30] audit: type=1326 audit(1789928973.753:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.3.4092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a7979e159 code=0x7ffc0000 [ 1033.462283][ T30] audit: type=1326 audit(1789928973.753:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.3.4092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7979e159 code=0x7ffc0000 [ 1033.464646][ T30] audit: type=1326 audit(1789928973.753:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.3.4092" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a7979e159 code=0x7ffc0000 [ 1033.718819][T21293] netlink: 'syz.3.4094': attribute type 9 has an invalid length. [ 1033.718870][T21293] netlink: 'syz.3.4094': attribute type 7 has an invalid length. [ 1033.718883][T21293] netlink: 'syz.3.4094': attribute type 8 has an invalid length. [ 1033.727824][T21290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4094'. [ 1033.755653][T21290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.784354][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1033.784689][ T5621] imon:send_packet: packet tx failed (-71) [ 1033.811116][ T5621] imon 3-1:0.0: remote input dev register failed [ 1033.811273][ T5621] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1033.849350][ T5621] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1033.849377][ T5621] imon:imon_probe: failed to initialize context! [ 1033.849388][ T5621] imon 3-1:0.0: unable to register, err -19 [ 1033.861549][ T5621] usb 3-1: USB disconnect, device number 7 [ 1033.878140][T21295] fuse: Bad value for 'fd' [ 1034.130375][ T30] audit: type=1326 audit(1789928974.403:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.0.4097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c12d9e159 code=0x0 [ 1034.206045][ T9144] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1034.206109][ T9144] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1034.207186][ T9144] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1034.246452][ T9144] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1034.377601][T21313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1034.696894][T21328] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4108'. [ 1034.749457][ T9144] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1034.759708][T15842] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1034.900226][ T9144] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1034.901507][ T9144] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1034.901543][ T9144] usb 4-1: config 1 has no interface number 0 [ 1034.903583][ T9144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.903608][ T9144] usb 4-1: Product: syz [ 1034.903622][ T9144] usb 4-1: Manufacturer: syz [ 1034.903637][ T9144] usb 4-1: SerialNumber: syz [ 1034.930448][T15842] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1034.931491][T15842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.938215][T15842] usb 3-1: config 0 descriptor?? [ 1034.981970][ T9144] usb 4-1: 3:1 : does not exist [ 1034.981997][ T9144] usb 4-1: 3:0 : does not exist [ 1035.154434][ T9144] usb 3-1: USB disconnect, device number 8 [ 1035.172412][T15838] usb 4-1: USB disconnect, device number 32 [ 1035.287316][T21334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4110'. [ 1035.332914][ T9144] usb 6-1: USB disconnect, device number 36 [ 1035.529762][T15838] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1035.601123][T21342] nvme nvme0: rdma_resolve_addr failed (-19). [ 1035.639691][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1035.639717][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.680884][T15838] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1035.681850][T15838] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1035.681875][T15838] usb 4-1: config 1 has no interface number 0 [ 1035.684037][T15838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.684062][T15838] usb 4-1: Product: syz [ 1035.684076][T15838] usb 4-1: Manufacturer: syz [ 1035.684097][T15838] usb 4-1: SerialNumber: syz [ 1035.711003][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1035.711022][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.757451][ T9147] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1035.768210][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1035.768227][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.786600][T15838] usb 4-1: 3:1 : does not exist [ 1035.786626][T15838] usb 4-1: 3:0 : does not exist [ 1035.844766][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1035.844785][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.929133][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1035.929152][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1035.929355][ T9147] usb 5-1: Using ep0 maxpacket: 16 [ 1035.940908][ T5621] usb 4-1: USB disconnect, device number 33 [ 1035.944135][ T9147] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1035.984552][ T9147] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.984589][ T9147] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1036.008961][ T9147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.008990][ T9147] usb 5-1: Product: syz [ 1036.009015][ T9147] usb 5-1: Manufacturer: syz [ 1036.009030][ T9147] usb 5-1: SerialNumber: syz [ 1036.035033][ T9147] usb 5-1: config 0 descriptor?? [ 1036.056507][T21359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1036.087657][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1036.087744][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1036.099209][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.184502][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1036.184520][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1036.245728][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1036.245749][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1036.262599][ T9147] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input197 [ 1036.314165][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1036.314184][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1036.379271][T21342] nvme_fabrics: missing parameter 'transport=%s' [ 1036.379291][T21342] nvme_fabrics: missing parameter 'nqn=%s' [ 1036.386031][T21368] loop0: detected capacity change from 0 to 3904 [ 1036.443374][T21368] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1036.443397][T21368] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1036.443406][T21368] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1036.443467][T21368] loop0: [ 1036.709464][ T9147] rc_core: IR keymap rc-imon-pad not found [ 1036.709485][ T9147] Registered IR keymap rc-empty [ 1036.709610][ T9147] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1036.709630][ T9147] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1036.819424][T15838] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1036.912430][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1036.912522][ T9147] imon:send_packet: packet tx failed (-71) [ 1036.932491][ T9129] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1036.932675][ T9147] imon 5-1:0.0: remote input dev register failed [ 1036.932931][ T9147] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1036.939117][ T9147] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1036.939134][ T9147] imon:imon_probe: failed to initialize context! [ 1036.939142][ T9147] imon 5-1:0.0: unable to register, err -19 [ 1036.952553][ T9147] usb 5-1: USB disconnect, device number 67 [ 1036.970456][T15838] usb 3-1: Using ep0 maxpacket: 8 [ 1036.972585][T15838] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1036.975824][T15838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.984580][T15838] usb 3-1: config 0 descriptor?? [ 1037.059631][ T9129] usb 4-1: device descriptor read/64, error -71 [ 1037.109453][T15837] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1037.188581][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.191421][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.193226][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.193890][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.197040][T15838] usb 3-1: string descriptor 0 read error: -71 [ 1037.197091][T15838] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 1037.197196][T15838] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 1037.197332][T15838] uvcvideo 3-1:0.0: No valid video chain found. [ 1037.201086][T15838] usb 3-1: USB disconnect, device number 9 [ 1037.259779][T15837] usb 6-1: Using ep0 maxpacket: 8 [ 1037.260548][T15837] usb 6-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1037.261603][T15837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.261629][T15837] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1037.263703][T15837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.263729][T15837] usb 6-1: Product: syz [ 1037.263743][T15837] usb 6-1: Manufacturer: syz [ 1037.263757][T15837] usb 6-1: SerialNumber: syz [ 1037.299525][ T9129] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1037.430062][ T9129] usb 4-1: device descriptor read/64, error -71 [ 1037.539831][ T9129] usb usb4-port1: attempt power cycle [ 1037.583652][T15837] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1037.588007][ T30] audit: type=1326 audit(1789928977.873:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.4.4124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1037.588254][ T30] audit: type=1326 audit(1789928977.873:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.4.4124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1037.588681][ T30] audit: type=1326 audit(1789928977.873:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.4.4124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1037.589100][ T30] audit: type=1326 audit(1789928977.873:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.4.4124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1037.594302][T15837] usb 6-1: USB disconnect, device number 37 [ 1037.623899][ T30] audit: type=1326 audit(1789928977.913:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.4.4124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1037.638317][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.879429][ T9129] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1037.902183][ T9129] usb 4-1: device descriptor read/8, error -71 [ 1037.965955][T21392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1038.069414][T11449] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1038.124268][T21402] loop0: detected capacity change from 0 to 3904 [ 1038.139588][ T9129] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1038.158539][T21402] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1038.158573][T21402] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1038.158585][T21402] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1038.158647][T21402] loop0: [ 1038.160214][ T9129] usb 4-1: device descriptor read/8, error -71 [ 1038.241469][T11449] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1038.242488][T11449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.248653][T11449] usb 3-1: config 0 descriptor?? [ 1038.269641][ T9129] usb usb4-port1: unable to enumerate USB device [ 1038.478884][T11449] usb 3-1: USB disconnect, device number 10 [ 1038.549991][ T9129] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1038.599474][ T9147] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1038.700162][ T9129] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1038.703332][ T9129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.703364][ T9129] usb 6-1: Product: syz [ 1038.703378][ T9129] usb 6-1: Manufacturer: syz [ 1038.703393][ T9129] usb 6-1: SerialNumber: syz [ 1038.729358][ T9147] usb 5-1: device descriptor read/64, error -71 [ 1038.969440][ T9147] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1039.099400][ T9147] usb 5-1: device descriptor read/64, error -71 [ 1039.209754][ T9147] usb usb5-port1: attempt power cycle [ 1039.279387][ T5621] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1039.429448][ T5621] usb 3-1: Using ep0 maxpacket: 16 [ 1039.430328][ T5621] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1039.431449][ T5621] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.431481][ T5621] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1039.433506][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.433529][ T5621] usb 3-1: Product: syz [ 1039.433544][ T5621] usb 3-1: Manufacturer: syz [ 1039.433557][ T5621] usb 3-1: SerialNumber: syz [ 1039.436854][ T5621] usb 3-1: config 0 descriptor?? [ 1039.439782][ T9129] (unnamed net_device) (uninitialized): Assigned a random MAC address: 62:95:7b:a3:8b:88 [ 1039.452536][ T9129] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 1039.463160][ T9129] usb 6-1: USB disconnect, device number 38 [ 1039.549493][ T9147] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1039.570090][ T9147] usb 5-1: device descriptor read/8, error -71 [ 1039.644291][ T5621] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input199 [ 1039.809348][ T9147] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1039.831072][ T9147] usb 5-1: device descriptor read/8, error -71 [ 1039.911669][ T5621] rc_core: IR keymap rc-imon-pad not found [ 1039.911693][ T5621] Registered IR keymap rc-empty [ 1039.911809][ T5621] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1039.911828][ T5621] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1039.940266][ T9147] usb usb5-port1: unable to enumerate USB device [ 1039.953115][T21420] Cannot find set identified by id 1 to match [ 1040.189733][ T9147] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1040.312813][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1040.312860][ T5621] imon:send_packet: packet tx failed (-71) [ 1040.332968][ T5621] imon 3-1:0.0: remote input dev register failed [ 1040.333082][ T5621] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1040.339431][ T9147] usb 4-1: Using ep0 maxpacket: 16 [ 1040.341427][ T9147] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1040.342639][ T9147] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1040.342661][ T9147] usb 4-1: config 0 has no interface number 0 [ 1040.344626][ T9147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.344647][ T9147] usb 4-1: Product: syz [ 1040.344661][ T9147] usb 4-1: Manufacturer: syz [ 1040.344674][ T9147] usb 4-1: SerialNumber: syz [ 1040.361207][ T9147] usb 4-1: config 0 descriptor?? [ 1040.365130][ T9147] hub 4-1:0.132: bad descriptor, ignoring hub [ 1040.365155][ T9147] hub 4-1:0.132: probe with driver hub failed with error -5 [ 1040.375289][ T9147] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input201 [ 1040.434196][ T5621] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1040.434220][ T5621] imon:imon_probe: failed to initialize context! [ 1040.434234][ T5621] imon 3-1:0.0: unable to register, err -19 [ 1040.437718][ T5621] usb 3-1: USB disconnect, device number 11 [ 1040.574846][T21417] netlink: 'syz.3.4136': attribute type 4 has an invalid length. [ 1040.574873][T21417] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1040.587127][T21417] .`: renamed from bond0 (while UP) [ 1040.912393][ T4985] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1040.912424][ T4985] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1040.912437][ T4985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1040.912525][ T4985] loop0: [ 1041.056266][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1041.056287][ T30] audit: type=1326 audit(1789928981.343:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.056545][ T30] audit: type=1326 audit(1789928981.343:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.057971][ T30] audit: type=1326 audit(1789928981.343:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.058047][ T30] audit: type=1326 audit(1789928981.343:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.058094][ T30] audit: type=1326 audit(1789928981.343:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.058437][ T30] audit: type=1326 audit(1789928981.353:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.058489][ T30] audit: type=1326 audit(1789928981.353:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.059074][ T30] audit: type=1326 audit(1789928981.353:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300659e159 code=0x7ffc0000 [ 1041.064559][ T30] audit: type=1326 audit(1789928981.353:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f300655e98e code=0x7ffc0000 [ 1041.067662][ T30] audit: type=1326 audit(1789928981.353:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21440 comm="syz.5.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f300659ddeb code=0x7ffc0000 [ 1041.318685][ T9129] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1041.411824][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1041.411868][T21445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1041.488300][ T9129] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1041.497891][ T9129] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.497918][ T9129] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1041.497960][ T9129] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1041.526080][ T9129] usb 6-1: string descriptor 0 read error: -22 [ 1041.526175][ T9129] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1041.564908][ T9129] usb 6-1: 0:2 : does not exist [ 1041.663428][ T4970] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 1041.671623][ T9129] usb-storage 6-1:1.1: USB Mass Storage device detected [ 1041.842849][ T4970] usb 4-1: device descriptor read/64, error -71 [ 1041.992492][ T9129] usb 6-1: us122l: couldn't allocate write buffer [ 1041.992977][ T9129] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1041.994640][ T9129] usb 6-1: USB disconnect, device number 39 [ 1042.129954][ T4970] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 1042.289456][ T4970] usb 4-1: device descriptor read/64, error -71 [ 1042.329494][ T5690] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1042.382950][T21470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1042.489705][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 1042.496613][ T5690] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1042.507196][ T5690] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.507239][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1042.538990][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.539018][ T5690] usb 3-1: Product: syz [ 1042.539035][ T5690] usb 3-1: Manufacturer: syz [ 1042.539049][ T5690] usb 3-1: SerialNumber: syz [ 1042.559989][ T4970] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 1042.572874][ T5690] usb 3-1: config 0 descriptor?? [ 1042.573930][T21475] loop0: detected capacity change from 0 to 3904 [ 1042.581069][ T4970] usb 4-1: device descriptor read/8, error -71 [ 1042.621364][T21475] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1042.621398][T21475] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1042.621411][T21475] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1042.621505][T21475] loop0: [ 1042.792095][ T5690] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input202 [ 1042.819869][ T4970] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 1042.846002][ T4970] usb 4-1: device descriptor read/8, error -71 [ 1042.950655][T15837] usb 4-1: USB disconnect, device number 38 [ 1043.320261][ T5690] rc_core: IR keymap rc-imon-pad not found [ 1043.320278][ T5690] Registered IR keymap rc-empty [ 1043.320350][ T5690] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1043.320362][ T5690] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1043.359341][T15837] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1043.490234][T15837] usb 4-1: device descriptor read/64, error -71 [ 1043.505821][ T5621] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1043.525262][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1043.525369][ T5690] imon:send_packet: packet tx failed (-71) [ 1043.542655][ T5690] imon 3-1:0.0: remote input dev register failed [ 1043.542770][ T5690] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1043.572740][ T5690] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1043.572764][ T5690] imon:imon_probe: failed to initialize context! [ 1043.572779][ T5690] imon 3-1:0.0: unable to register, err -19 [ 1043.608863][ T5690] usb 3-1: USB disconnect, device number 12 [ 1043.689354][ T5621] usb 6-1: Using ep0 maxpacket: 32 [ 1043.691599][ T5621] usb 6-1: New USB device found, idVendor=2001, idProduct=3317, bcdDevice=a7.55 [ 1043.692816][ T5621] usb 6-1: config 129 has an invalid interface number: 97 but max is 1 [ 1043.692841][ T5621] usb 6-1: config 129 has an invalid interface number: 57 but max is 1 [ 1043.692858][ T5621] usb 6-1: config 129 has an invalid interface number: 83 but max is 1 [ 1043.692869][ T5621] usb 6-1: config 129 has 3 interfaces, different from the descriptor's value: 2 [ 1043.692882][ T5621] usb 6-1: config 129 has no interface number 0 [ 1043.692891][ T5621] usb 6-1: config 129 has no interface number 1 [ 1043.692900][ T5621] usb 6-1: config 129 has no interface number 2 [ 1043.692935][ T5621] usb 6-1: config 129 interface 97 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1043.692955][ T5621] usb 6-1: too many endpoints for config 129 interface 57 altsetting 5: 169, using maximum allowed: 30 [ 1043.692980][ T5621] usb 6-1: config 129 interface 57 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1043.692997][ T5621] usb 6-1: config 129 interface 57 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1043.693013][ T5621] usb 6-1: config 129 interface 57 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1043.693027][ T5621] usb 6-1: config 129 interface 57 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 1043.693041][ T5621] usb 6-1: config 129 interface 57 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 169 [ 1043.693062][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1043.693074][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1043.693088][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has a duplicate endpoint with address 0x86, skipping [ 1043.693102][ T5621] usb 6-1: config 129 interface 83 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1043.693117][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1043.693129][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1043.693141][ T5621] usb 6-1: config 129 interface 83 altsetting 6 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1043.693181][ T5621] usb 6-1: config 129 interface 97 has no altsetting 0 [ 1043.693192][ T5621] usb 6-1: config 129 interface 57 has no altsetting 0 [ 1043.693202][ T5621] usb 6-1: config 129 interface 83 has no altsetting 0 [ 1043.699369][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.699396][ T5621] usb 6-1: Product: á‚ [ 1043.699412][ T5621] usb 6-1: Manufacturer: ਄鋬âºã„¯ì£­îŒ°ì¦¢á¹»é»°âˆ­ã¦«ï¦ƒæ ‹áŸ’è­ê²…劆틳è½èŽá½¨îˆ„᜙㖖媽薨⥫ॡ辈ퟕ䶛㼺 [ 1043.699431][ T5621] usb 6-1: SerialNumber: ц [ 1043.732623][T15837] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1043.861365][T15837] usb 4-1: device descriptor read/64, error -71 [ 1043.969790][T15837] usb usb4-port1: attempt power cycle [ 1044.207370][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.211664][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.314774][T15837] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1044.333106][T15837] usb 4-1: device descriptor read/8, error -71 [ 1044.448336][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.448723][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.614450][T21503] xt_hashlimit: max too large, truncated to 1048576 [ 1045.209565][ T5690] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1045.319065][T21509] FAULT_INJECTION: forcing a failure. [ 1045.319065][T21509] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.319094][T21509] CPU: 1 UID: 0 PID: 21509 Comm: syz.2.4166 Tainted: G L syzkaller #0 PREEMPT(full) [ 1045.319122][T21509] Tainted: [L]=SOFTLOCKUP [ 1045.319130][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1045.319141][T21509] Call Trace: [ 1045.319150][T21509] [ 1045.319159][T21509] dump_stack_lvl+0xe8/0x150 [ 1045.319194][T21509] should_fail_ex+0x410/0x560 [ 1045.319225][T21509] should_failslab+0xa8/0x100 [ 1045.319254][T21509] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1045.319279][T21509] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1045.319302][T21509] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1045.319327][T21509] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1045.319347][T21509] krealloc_node_align_noprof+0x19a/0x390 [ 1045.319364][T21509] bpf_push_jmp_history+0x26c/0x6d0 [ 1045.319382][T21509] do_check_common+0x2a0a/0x5d30 [ 1045.319440][T21509] ? __pfx_do_check_common+0x10/0x10 [ 1045.319464][T21509] ? __pfx_verbose+0x10/0x10 [ 1045.319481][T21509] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1045.319506][T21509] bpf_check+0x2639/0x2e10 [ 1045.319525][T21509] ? ktime_get_with_offset+0x93/0x2d0 [ 1045.319541][T21509] ? __pfx_bpf_check+0x10/0x10 [ 1045.319561][T21509] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1045.319594][T21509] bpf_prog_load+0x14d6/0x1c20 [ 1045.319630][T21509] ? __pfx_bpf_prog_load+0x10/0x10 [ 1045.319666][T21509] __sys_bpf+0xd0d/0xd90 [ 1045.319684][T21509] ? __pfx___sys_bpf+0x10/0x10 [ 1045.319704][T21509] ? __fget_files+0x2a/0x420 [ 1045.319748][T21509] ? ksys_write+0x242/0x270 [ 1045.319780][T21509] ? __pfx_ksys_write+0x10/0x10 [ 1045.319810][T21509] __x64_sys_bpf+0xba/0xd0 [ 1045.319824][T21509] do_syscall_64+0x166/0x520 [ 1045.319841][T21509] ? trace_irq_disable+0x3b/0x140 [ 1045.319853][T21509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.319868][T21509] ? clear_bhb_loop+0x70/0xc0 [ 1045.319893][T21509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.319913][T21509] RIP: 0033:0x7f110739e159 [ 1045.319932][T21509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.319949][T21509] RSP: 002b:00007f1108282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1045.319969][T21509] RAX: ffffffffffffffda RBX: 00007f1107625fa0 RCX: 00007f110739e159 [ 1045.319979][T21509] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 1045.319994][T21509] RBP: 00007f1108282090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.320002][T21509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.320009][T21509] R13: 00007f1107626038 R14: 00007f1107625fa0 R15: 00007f110774fa48 [ 1045.320037][T21509] [ 1045.428383][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 1045.433846][ T5690] usb 5-1: New USB device found, idVendor=07c9, idProduct=000f, bcdDevice=e1.a3 [ 1045.522096][ T5690] usb 5-1: config 5 has an invalid interface number: 149 but max is 0 [ 1045.522129][ T5690] usb 5-1: config 5 has no interface number 0 [ 1045.522193][ T5690] usb 5-1: config 5 interface 149 has no altsetting 0 [ 1045.603119][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.603183][ T5690] usb 5-1: Product: syz [ 1045.603199][ T5690] usb 5-1: Manufacturer: syz [ 1045.603214][ T5690] usb 5-1: SerialNumber: syz [ 1045.691490][ T9129] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1045.826888][T21515] loop0: detected capacity change from 0 to 3904 [ 1045.839808][ T9129] usb 3-1: Using ep0 maxpacket: 16 [ 1045.842717][ T9129] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1045.843711][ T9129] usb 3-1: config 0 has no interfaces? [ 1045.843951][T21513] input: syz1 as /devices/virtual/input/input204 [ 1045.848867][ T9129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.848894][ T9129] usb 3-1: Product: syz [ 1045.848909][ T9129] usb 3-1: Manufacturer: syz [ 1045.848924][ T9129] usb 3-1: SerialNumber: syz [ 1045.881403][T21515] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1045.881438][T21515] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1045.881449][T21515] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1045.881530][T21515] loop0: [ 1045.886953][ T9129] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1045.886977][ T9129] r8152-cfgselector 3-1: config 0 descriptor?? [ 1045.993989][ T5690] ax88179_178a 5-1:5.149: probe with driver ax88179_178a failed with error -22 [ 1046.006522][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1046.022016][ T5690] usb 5-1: USB disconnect, device number 73 [ 1046.113857][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 1046.113878][ T30] audit: type=1326 audit(1789928986.403:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.113926][ T30] audit: type=1326 audit(1789928986.403:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.117575][T21513] netlink: 820 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1046.131346][ T30] audit: type=1326 audit(1789928986.423:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f110735e98e code=0x7ffc0000 [ 1046.131397][ T30] audit: type=1326 audit(1789928986.423:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.131444][ T30] audit: type=1326 audit(1789928986.423:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.132848][ T30] audit: type=1326 audit(1789928986.423:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.137109][ T30] audit: type=1326 audit(1789928986.423:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.137158][ T30] audit: type=1326 audit(1789928986.423:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.145832][ T30] audit: type=1326 audit(1789928986.433:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.145883][ T30] audit: type=1326 audit(1789928986.433:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21510 comm="syz.2.4167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110739e159 code=0x7ffc0000 [ 1046.249494][ T9129] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1046.457134][ T5621] usb 6-1: USB disconnect, device number 40 [ 1046.726975][T15837] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 1046.969352][ T9129] usb 4-1: device descriptor read/64, error -71 [ 1047.120706][ T5621] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1047.210581][ T9129] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1047.239440][T15837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1047.279800][ T9144] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1047.363794][ T9129] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1047.366520][ T9129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.391311][ T9129] usb 4-1: config 0 descriptor?? [ 1047.392101][T15837] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1047.395530][T15837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.395561][T15837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1047.395574][T15837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1047.395593][T15837] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.395635][T15837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.430555][ T9144] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1047.432373][ T9144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1047.432418][ T9144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.447245][ T9144] usb 6-1: config 0 descriptor?? [ 1047.475384][ T9144] smsusb:smsusb_probe: board id=8, interface number 0 [ 1047.485613][ T9144] smsusb:smsusb_probe: Device initialized with return code -19 [ 1047.635173][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4173'. [ 1047.644563][T15838] usb 4-1: USB disconnect, device number 44 [ 1047.734887][T21542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.735361][T21542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.019954][ T5690] usb 6-1: USB disconnect, device number 41 [ 1048.321596][T21549] loop0: detected capacity change from 0 to 3904 [ 1048.373237][T21549] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1048.373261][T21549] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1048.373273][T21549] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1048.373335][T21549] loop0: [ 1048.896331][T21555] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4182'. [ 1049.769135][T21567] loop4: detected capacity change from 0 to 4103 [ 1050.243400][T21580] fuse: Bad value for 'user_id' [ 1050.243425][T21580] fuse: Bad value for 'user_id' [ 1050.284254][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4184'. [ 1050.689769][ T5690] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1050.835548][T21588] ip6erspan0: entered allmulticast mode [ 1050.853493][ T5690] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1050.854577][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.882742][ T5690] usb 6-1: config 0 descriptor?? [ 1051.275693][ T5690] usb 6-1: USB disconnect, device number 42 [ 1051.620598][T15837] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1051.661258][ T5690] usb 3-1: USB disconnect, device number 14 [ 1051.769428][T15837] usb 5-1: Using ep0 maxpacket: 32 [ 1051.770440][T15837] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1051.772615][T15837] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 1051.772642][T15837] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1051.772662][T15837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1051.772680][T15837] usb 5-1: config 1 has no interface number 0 [ 1051.772706][T15837] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1051.772720][T15837] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.772733][T15837] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1051.772757][T15837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.790640][T15837] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1051.988146][T21599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.001396][T21599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.003315][T15837] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 1052.003477][T15837] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1052.003803][T15837] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 1052.053206][T21611] loop0: detected capacity change from 0 to 3904 [ 1052.093467][T21611] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1052.093498][T21611] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1052.093511][T21611] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1052.093553][T21611] loop0: [ 1052.235074][T15837] usb 5-1: USB disconnect, device number 75 [ 1053.085129][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1053.622188][T21621] loop5: detected capacity change from 0 to 7 [ 1053.623496][T21621] Dev loop5: unable to read RDB block 7 [ 1053.623566][T21621] loop5: unable to read partition table [ 1053.623796][T21621] loop5: partition table beyond EOD, truncated [ 1053.623815][T21621] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1053.879504][ T5690] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1054.030159][ T5690] usb 6-1: Using ep0 maxpacket: 16 [ 1054.031822][ T5690] usb 6-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 1054.032906][ T5690] usb 6-1: config 6 has an invalid interface number: 105 but max is 0 [ 1054.032935][ T5690] usb 6-1: config 6 has no interface number 0 [ 1054.032965][ T5690] usb 6-1: config 6 interface 105 has no altsetting 0 [ 1054.035083][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.035107][ T5690] usb 6-1: Product: syz [ 1054.035122][ T5690] usb 6-1: Manufacturer: syz [ 1054.035136][ T5690] usb 6-1: SerialNumber: syz [ 1054.039665][ T9144] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1054.194978][ T9144] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1054.195037][ T9144] usb 3-1: New USB device found, idVendor=191d, idProduct=641e, bcdDevice=f7.5b [ 1054.195072][ T9144] usb 3-1: too many configurations: 99, using maximum allowed: 8 [ 1054.196990][ T9144] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1054.197028][ T9144] usb 3-1: can't read configurations, error -61 [ 1054.265117][ T5690] uvcvideo 6-1:6.105: Found Unit with invalid ID 0 [ 1054.266238][ T5690] uvcvideo 6-1:6.105: probe with driver uvcvideo failed with error -22 [ 1054.287427][ T5690] usb 6-1: USB disconnect, device number 43 [ 1054.321258][ T9144] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1054.472144][ T9144] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1054.472203][ T9144] usb 3-1: New USB device found, idVendor=191d, idProduct=641e, bcdDevice=f7.5b [ 1054.472238][ T9144] usb 3-1: too many configurations: 99, using maximum allowed: 8 [ 1054.474201][ T9144] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1054.474238][ T9144] usb 3-1: can't read configurations, error -61 [ 1054.474787][ T9144] usb usb3-port1: attempt power cycle [ 1054.609180][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1054.609202][ T30] audit: type=1326 audit(1789928994.893:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21658 comm="syz.3.4210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a7979e159 code=0x0 [ 1054.631965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.634501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.634921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.635310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.635599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.636009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.636313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.636725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.637015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.637393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.748109][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.758673][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.102314][ T9144] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1055.331971][ T9144] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.332008][ T9144] usb 3-1: New USB device found, idVendor=191d, idProduct=641e, bcdDevice=f7.5b [ 1055.332032][ T9144] usb 3-1: too many configurations: 99, using maximum allowed: 8 [ 1055.448887][ T9144] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1055.448926][ T9144] usb 3-1: can't read configurations, error -61 [ 1055.648260][ T9144] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1055.652025][ T5690] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1055.772758][T21666] loop0: detected capacity change from 0 to 3904 [ 1055.820344][ T5690] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1055.822025][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.828674][ T5690] usb 5-1: config 0 descriptor?? [ 1055.871642][T21666] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1055.871672][T21666] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1055.871686][T21666] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1055.871750][T21666] loop0: [ 1055.886184][ T9144] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.886237][ T9144] usb 3-1: New USB device found, idVendor=191d, idProduct=641e, bcdDevice=f7.5b [ 1055.886270][ T9144] usb 3-1: too many configurations: 99, using maximum allowed: 8 [ 1056.105296][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1056.119768][ T9144] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1056.119813][ T9144] usb 3-1: can't read configurations, error -61 [ 1056.124845][ T5690] usb 5-1: USB disconnect, device number 76 [ 1056.131525][ T9144] usb usb3-port1: unable to enumerate USB device [ 1056.739409][ T5690] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1056.892142][ T5690] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1056.898438][ T5690] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1056.936988][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.937019][ T5690] usb 4-1: Product: syz [ 1056.937034][ T5690] usb 4-1: Manufacturer: syz [ 1056.937048][ T5690] usb 4-1: SerialNumber: syz [ 1057.234200][ T5690] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 1057.377268][ T5690] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1057.399688][ T5690] usb 4-1: USB disconnect, device number 45 [ 1057.455671][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.802361][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4218'. [ 1058.247030][T21696] kvm: pic: non byte write [ 1058.734163][T21704] tmpfs: Unknown parameter ',2`R×Aì r7¨SÇA†¶«à' [ 1059.296617][T21707] loop0: detected capacity change from 0 to 3904 [ 1059.363714][T21712] Option 'dnserror' to dns_resolver key: bad/missing value [ 1059.424279][T21707] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1059.424312][T21707] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1059.424326][T21707] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1059.424399][T21707] loop0: [ 1059.631668][T15842] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1059.639628][ C1] net_ratelimit: 14441 callbacks suppressed [ 1059.639649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.640044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.640420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.640778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.641139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.641420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.641787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.642064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.642422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.642726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.803398][ T5690] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1059.830640][T15842] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1059.831903][T15842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.837436][T15842] usb 3-1: config 0 descriptor?? [ 1060.043818][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 1060.046476][ T5690] usb 4-1: New USB device found, idVendor=093a, idProduct=2629, bcdDevice=d9.89 [ 1060.047979][ T5690] usb 4-1: config 1 has an invalid interface number: 244 but max is 0 [ 1060.048004][ T5690] usb 4-1: config 1 has no interface number 0 [ 1060.048035][ T5690] usb 4-1: config 1 interface 244 has no altsetting 0 [ 1060.066016][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.066045][ T5690] usb 4-1: Product: syz [ 1060.066060][ T5690] usb 4-1: Manufacturer: syz [ 1060.066074][ T5690] usb 4-1: SerialNumber: syz [ 1060.166294][T11449] usb 3-1: USB disconnect, device number 19 [ 1060.344131][ T5690] gspca_main: gspca_pac7302-2.14.0 probing 093a:2629 [ 1060.346207][ T5690] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1060.346303][ T5690] gspca_pac7302 4-1:1.244: probe with driver gspca_pac7302 failed with error -71 [ 1060.383025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 1060.394459][ T5690] usb 4-1: USB disconnect, device number 46 [ 1061.049476][T11449] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1061.212513][T11449] usb 6-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice=91.20 [ 1061.214093][T11449] usb 6-1: config index 0 descriptor too short (expected 19236, got 36) [ 1061.214121][T11449] usb 6-1: config 217 has too many interfaces: 157, using maximum allowed: 32 [ 1061.214141][T11449] usb 6-1: config 217 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.214162][T11449] usb 6-1: config 217 has 0 interfaces, different from the descriptor's value: 157 [ 1061.253458][T11449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.253487][T11449] usb 6-1: Product: syz [ 1061.253503][T11449] usb 6-1: Manufacturer: syz [ 1061.253517][T11449] usb 6-1: SerialNumber: syz [ 1061.635458][T21741] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 1061.903504][T21741] bond0: entered promiscuous mode [ 1061.930858][T21741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.119957][ T5690] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1062.145255][T11449] usb 6-1: USB disconnect, device number 44 [ 1062.252119][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1062.424773][T21757] loop0: detected capacity change from 0 to 3904 [ 1062.512341][ T5690] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1062.576724][T21757] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1062.576750][T21757] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1062.576808][T21757] loop0: [ 1062.619571][T15842] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1062.664666][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1062.769398][ T5621] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1062.769966][ T5690] usb usb5-port1: attempt power cycle [ 1062.776519][T15842] usb 4-1: device descriptor read/all, error -61 [ 1062.915188][T15842] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1062.930331][ T5621] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1062.932170][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.039466][T15842] usb 4-1: device descriptor read/64, error -71 [ 1063.109791][ T5690] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1063.130302][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1063.133565][ T5621] usb 3-1: config 0 descriptor?? [ 1063.177651][T15842] usb usb4-port1: attempt power cycle [ 1063.428382][ T5690] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1063.452490][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1063.560254][ T5690] usb usb5-port1: unable to enumerate USB device [ 1063.613311][ T5690] usb 3-1: USB disconnect, device number 20 [ 1063.619459][T15842] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1063.652764][T15842] usb 4-1: device descriptor read/8, error -71 [ 1063.889365][T15842] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1063.910477][T15842] usb 4-1: device descriptor read/8, error -71 [ 1064.030013][T15842] usb usb4-port1: unable to enumerate USB device [ 1064.075580][T21771] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.075598][T21771] binder: 21769:21771 ioctl 4018620d 200000004a80 returned -16 [ 1064.649648][ C1] net_ratelimit: 14322 callbacks suppressed [ 1064.649677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.650071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.650638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.650944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.651215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.651437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.651700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.651968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.652240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.652465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.109761][ T30] audit: type=1326 audit(1789929008.383:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.109831][ T30] audit: type=1326 audit(1789929008.383:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128660][ T30] audit: type=1326 audit(1789929008.403:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128720][ T30] audit: type=1326 audit(1789929008.413:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128766][ T30] audit: type=1326 audit(1789929008.413:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128823][ T30] audit: type=1326 audit(1789929008.413:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128868][ T30] audit: type=1326 audit(1789929008.413:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128913][ T30] audit: type=1326 audit(1789929008.413:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.128958][ T30] audit: type=1326 audit(1789929008.413:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1068.129002][ T30] audit: type=1326 audit(1789929008.413:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000 [ 1069.659323][ C1] net_ratelimit: 20511 callbacks suppressed [ 1069.659343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.659611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.659788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.660022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.660195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.660437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.660642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.660876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.661072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.661305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.669534][ C1] net_ratelimit: 23183 callbacks suppressed [ 1074.669562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.669636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.670090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.670092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.670473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.670553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.671012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.671046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.671409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.671617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.679560][ C0] net_ratelimit: 23464 callbacks suppressed [ 1079.679575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.679587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.679929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.680064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.680410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.680572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.680760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.681047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.681240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.681512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.689391][ C1] net_ratelimit: 17481 callbacks suppressed [ 1084.689420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.689673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1084.689936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.690367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.690882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.691149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.691260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.691660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1084.691824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.692207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.049242][ C0] sched: DL replenish lagged too much [ 1089.699535][ C1] net_ratelimit: 16909 callbacks suppressed [ 1089.699562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.700057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.700217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.700412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.700712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1089.700902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.701329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.701812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.702052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.702161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.709496][ C0] net_ratelimit: 16025 callbacks suppressed [ 1094.709515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.709752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1094.710490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.710728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1094.711453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.711695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1094.712339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.712570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1094.713269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.713500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1099.719716][ C1] net_ratelimit: 16212 callbacks suppressed [ 1099.719746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.719902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.720138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.720407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1099.720657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.721040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.721558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.721757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.721947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.722226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1104.729557][ C1] net_ratelimit: 16798 callbacks suppressed [ 1104.729584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.729761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.729980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.730269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1104.730560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.730958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.731712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.731913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.732138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.732419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1109.739462][ C1] net_ratelimit: 16480 callbacks suppressed [ 1109.739491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.739883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.740040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.740395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.740513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1109.740781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.741343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.741732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.741843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.742251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.982260][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1114.749306][ C1] net_ratelimit: 16533 callbacks suppressed [ 1114.749334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.749634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.749893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.750140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1114.750353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.750891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.751362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.751593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.751878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.752079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1116.468594][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.481108][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.759636][ C1] net_ratelimit: 16700 callbacks suppressed [ 1119.759664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.760087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.760186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.760555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1119.760618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.761132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.761542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.761845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.762115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.762316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1124.769309][ C1] net_ratelimit: 17420 callbacks suppressed [ 1124.769337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.769588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1124.769689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.770159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.770523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.770970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.771006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.771351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.771507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1124.771826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.779603][ C1] net_ratelimit: 17829 callbacks suppressed [ 1129.779630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.780007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.780176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.780496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.780648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1129.780839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.781303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.781651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.782047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.782111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.789455][ C1] net_ratelimit: 17933 callbacks suppressed [ 1134.789468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1134.789481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.789851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.790355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.790712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.791079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.791205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.791613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.791634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1134.792108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.799219][ C1] net_ratelimit: 16151 callbacks suppressed [ 1139.799247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.799606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.800088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.800442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.800572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.800912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.801075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1139.801351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.801824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.802191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.809381][ C1] net_ratelimit: 16158 callbacks suppressed [ 1144.809408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.809473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1144.809910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.810267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.810750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.810960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.811114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.811481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1144.811596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.812024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.819523][ C1] net_ratelimit: 16675 callbacks suppressed [ 1149.819552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.819557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1149.819906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.820400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.820751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.821042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.821231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.821636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.821661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1149.822128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.829209][ C1] net_ratelimit: 16524 callbacks suppressed [ 1154.829238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.829777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.830164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.830307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.830676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.830820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1154.831090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.831608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.831999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.832318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.839346][ C1] net_ratelimit: 17095 callbacks suppressed [ 1159.839374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.839738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.840103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.840283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.840624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1159.840642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.841124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.841527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.842006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.842089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.849338][ C0] net_ratelimit: 16896 callbacks suppressed [ 1164.849347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.849365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1164.849826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.850184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.850659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.850766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.851058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.851233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1164.851528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1164.851882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.859346][ C1] net_ratelimit: 16614 callbacks suppressed [ 1169.859375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.859654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1169.859936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.860342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.860850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.861073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.861240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.861562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1169.861754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.862141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.869459][ C1] net_ratelimit: 16631 callbacks suppressed [ 1174.869486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.869985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.870230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.870354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.870761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1174.870841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.871211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.871721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.872082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.872212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.500682][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.513204][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.879281][ C0] net_ratelimit: 16320 callbacks suppressed [ 1179.879291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.879307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1179.879822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.879836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1179.880244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.880769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.881156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.881291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1179.881685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.881814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1184.889463][ C1] net_ratelimit: 15964 callbacks suppressed [ 1184.889490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.889654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.890014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.890139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1184.890405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.890938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.891364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.891541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.891897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.892011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1188.529163][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1188.536169][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21785/1:b..l P21788/1:b..l [ 1188.545432][ C0] rcu: (detected by 0, t=10503 jiffies, g=203921, q=1348 ncpus=2) [ 1188.553438][ C0] task:syz.4.4246 state:R running task stack:28808 pid:21788 tgid:21781 ppid:17158 task_flags:0x40044c flags:0x00080802 [ 1188.566986][ C0] Call Trace: [ 1188.570379][ C0] [ 1188.573339][ C0] __schedule+0x17db/0x58f0 [ 1188.577925][ C0] ? __lock_acquire+0x747/0x2de0 [ 1188.582982][ C0] ? __pfx___schedule+0x10/0x10 [ 1188.587871][ C0] ? __lock_acquire+0x747/0x2de0 [ 1188.592859][ C0] preempt_schedule_irq+0x4b/0x90 [ 1188.597922][ C0] irqentry_exit+0x14f/0x910 [ 1188.602648][ C0] ? trace_irq_disable+0x3b/0x140 [ 1188.607722][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1188.613829][ C0] RIP: 0010:lock_is_held_type+0x4d/0x150 [ 1188.619586][ C0] Code: a1 9d af 07 85 c0 0f 85 d5 00 00 00 65 4c 8b 2d e1 58 af 07 41 83 bd a4 0b 00 00 00 0f 85 bf 00 00 00 89 f5 49 89 fe 9c 41 5c 48 c7 c7 dc f3 42 8e e8 e6 1b 00 00 65 ff 05 67 9d af 07 41 83 [ 1188.639220][ C0] RSP: 0018:ffffc90008f4f6e8 EFLAGS: 00000246 [ 1188.645411][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 8000000000000001 [ 1188.653409][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ed5c8e0 [ 1188.661492][ C0] RBP: 00000000ffffffff R08: ffffffff8243ad02 R09: 0000000000000000 [ 1188.669588][ C0] R10: dffffc0000000000 R11: fffff94000195117 R12: 0000000000000246 [ 1188.677626][ C0] R13: ffff888032643e80 R14: ffffffff8ed5c8e0 R15: ffff88801bd00000 [ 1188.685646][ C0] ? page_ext_get+0x22/0x2e0 [ 1188.690294][ C0] ? page_ext_get+0x22/0x2e0 [ 1188.695277][ C0] page_ext_get+0x1b0/0x2e0 [ 1188.699813][ C0] __reset_page_owner+0x28/0x1f0 [ 1188.704877][ C0] __free_frozen_pages+0xc93/0xd90 [ 1188.710042][ C0] __slab_free+0x274/0x2c0 [ 1188.714552][ C0] ? qlist_free_all+0x8e/0x100 [ 1188.719353][ C0] qlist_free_all+0x99/0x100 [ 1188.724140][ C0] ? taskstats_exit+0x19e/0xe10 [ 1188.729034][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1188.734706][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1188.740208][ C0] __kasan_slab_alloc+0x22/0x80 [ 1188.745196][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1188.750698][ C0] ? taskstats_exit+0x19e/0xe10 [ 1188.755583][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1188.761269][ C0] ? taskstats_exit+0x19e/0xe10 [ 1188.766169][ C0] taskstats_exit+0x19e/0xe10 [ 1188.770970][ C0] ? acct_update_integrals+0x342/0x410 [ 1188.776476][ C0] ? acct_update_integrals+0x38a/0x410 [ 1188.781967][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 1188.787217][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 1188.792809][ C0] do_exit+0x6ad/0x2360 [ 1188.797034][ C0] ? __pfx_do_exit+0x10/0x10 [ 1188.801672][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1188.806751][ C0] do_group_exit+0x22d/0x2f0 [ 1188.811371][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1188.816622][ C0] get_signal+0x121b/0x12c0 [ 1188.821195][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1188.826885][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1188.833112][ C0] ? __fget_files+0x3a2/0x420 [ 1188.837861][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1188.843456][ C0] ? rcu_is_watching+0x16/0xb0 [ 1188.848264][ C0] do_syscall_64+0x328/0x520 [ 1188.852912][ C0] ? trace_irq_disable+0x3b/0x140 [ 1188.858401][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.864587][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1188.869313][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.875791][ C0] RIP: 0033:0x7f4ce5d9e159 [ 1188.880287][ C0] RSP: 002b:00007f4ce6c4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1188.888732][ C0] RAX: fffffffffffffe00 RBX: 00007f4ce6026278 RCX: 00007f4ce5d9e159 [ 1188.896737][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ce6026278 [ 1188.905181][ C0] RBP: 00007f4ce6026270 R08: 0000000000000000 R09: 0000000000000000 [ 1188.913179][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.921175][ C0] R13: 00007f4ce6026308 R14: 00007f4ce614f960 R15: 00007f4ce614fa48 [ 1188.929195][ C0] [ 1188.932502][ C0] task:syz.4.4246 state:R running task stack:26328 pid:21785 tgid:21781 ppid:17158 task_flags:0x400140 flags:0x00080002 [ 1188.946556][ C0] Call Trace: [ 1188.949872][ C0] [ 1188.952834][ C0] __schedule+0x17db/0x58f0 [ 1188.957401][ C0] ? __lock_acquire+0x747/0x2de0 [ 1188.962475][ C0] ? __pfx___schedule+0x10/0x10 [ 1188.967925][ C0] preempt_schedule_irq+0x4b/0x90 [ 1188.973015][ C0] irqentry_exit+0x14f/0x910 [ 1188.977671][ C0] ? trace_irq_disable+0x3b/0x140 [ 1188.983011][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1188.989070][ C0] RIP: 0010:unwind_next_frame+0xcd7/0x2550 [ 1188.994921][ C0] Code: 00 00 fc ff df 48 8b 44 24 20 42 80 3c 20 00 4d 8d 7e 48 74 08 4c 89 ff e8 36 dd bf 00 49 89 1f 48 8b 44 24 38 42 80 3c 20 00 <49> 8d 5e 38 4c 8b 6c 24 18 74 08 48 89 df e8 16 dd bf 00 48 8b 04 [ 1189.014651][ C0] RSP: 0018:ffffc90009f5f580 EFLAGS: 00000246 [ 1189.020771][ C0] RAX: 1ffff920013ebecc RBX: ffffffff81c47162 RCX: 1ffff920013ebe01 [ 1189.028770][ C0] RDX: ffffc90009f5fb40 RSI: 0000000000000002 RDI: ffffc90009f5fb40 [ 1189.036777][ C0] RBP: 1ffffffff2230f8b R08: ffffc90009f5fb48 R09: 0000000000000000 [ 1189.044781][ C0] R10: ffffc90009f5f678 R11: ffffffff81b28ab0 R12: dffffc0000000000 [ 1189.052785][ C0] R13: ffffc90009f60000 R14: ffffc90009f5f628 R15: ffffc90009f5f670 [ 1189.060793][ C0] ? audit_log_d_path_exe+0x42/0x70 [ 1189.066041][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1189.072252][ C0] ? audit_log_d_path+0xb8/0x1a0 [ 1189.077236][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1189.082451][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1189.088822][ C0] arch_stack_walk+0x11b/0x150 [ 1189.093712][ C0] ? audit_log_d_path_exe+0x42/0x70 [ 1189.098959][ C0] stack_trace_save+0xa9/0x100 [ 1189.103752][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1189.109166][ C0] save_stack+0x122/0x230 [ 1189.113538][ C0] ? __pfx_save_stack+0x10/0x10 [ 1189.118771][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1189.124451][ C0] ? __slab_free+0x274/0x2c0 [ 1189.129078][ C0] ? qlist_free_all+0x99/0x100 [ 1189.134479][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1189.140159][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 1189.145131][ C0] ? __kmalloc_cache_noprof+0x321/0x600 [ 1189.150705][ C0] ? audit_log_d_path+0xb8/0x1a0 [ 1189.155689][ C0] ? page_ext_put+0x97/0xc0 [ 1189.160316][ C0] __reset_page_owner+0x71/0x1f0 [ 1189.165292][ C0] __free_frozen_pages+0xc93/0xd90 [ 1189.170454][ C0] __slab_free+0x274/0x2c0 [ 1189.174915][ C0] ? qlist_free_all+0x8e/0x100 [ 1189.179713][ C0] qlist_free_all+0x99/0x100 [ 1189.184338][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1189.190267][ C0] __kasan_kmalloc+0x22/0xb0 [ 1189.194898][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 1189.200478][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1189.206057][ C0] ? audit_log_d_path+0xb8/0x1a0 [ 1189.211125][ C0] ? audit_log_d_path+0xb8/0x1a0 [ 1189.216106][ C0] audit_log_d_path+0xb8/0x1a0 [ 1189.220911][ C0] audit_log_d_path_exe+0x42/0x70 [ 1189.226153][ C0] audit_log_task+0x2c3/0x3d0 [ 1189.230862][ C0] ? __pfx_audit_log_task+0x10/0x10 [ 1189.236185][ C0] ? futex_wait+0x2a2/0x390 [ 1189.240728][ C0] audit_seccomp+0x85/0x190 [ 1189.245274][ C0] __seccomp_filter+0xd14/0x1de0 [ 1189.250259][ C0] ? call_rcu+0x64d/0x8b0 [ 1189.254721][ C0] ? do_futex+0x3e7/0x4e0 [ 1189.259088][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 1189.264757][ C0] ? __pfx_do_futex+0x10/0x10 [ 1189.269469][ C0] ? blkcg_maybe_throttle_current+0x1b0/0xb90 [ 1189.275687][ C0] ? __se_sys_futex+0x3a8/0x450 [ 1189.280627][ C0] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1189.286387][ C0] do_syscall_64+0x11f/0x520 [ 1189.291026][ C0] ? trace_irq_disable+0x3b/0x140 [ 1189.296263][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.302360][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1189.307084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.313040][ C0] RIP: 0033:0x7f4ce5d9e159 [ 1189.317504][ C0] RSP: 002b:00007f4ce6c6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1189.325966][ C0] RAX: ffffffffffffffda RBX: 00007f4ce6026180 RCX: 00007f4ce5d9e159 [ 1189.334027][ C0] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 1189.342123][ C0] RBP: 00007f4ce5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.350215][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.358216][ C0] R13: 00007f4ce6026218 R14: 00007f4ce6026180 R15: 00007f4ce614fa48 [ 1189.366238][ C0] [ 1189.369370][ C0] rcu: rcu_preempt kthread starved for 617 jiffies! g203921 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1189.380428][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1189.390528][ C0] rcu: RCU grace-period kthread stack dump: [ 1189.396477][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1189.410277][ C0] Call Trace: [ 1189.413587][ C0] [ 1189.416733][ C0] __schedule+0x17db/0x58f0 [ 1189.421312][ C0] ? __pfx___schedule+0x10/0x10 [ 1189.426192][ C0] ? lock_acquire+0x115/0x350 [ 1189.430908][ C0] ? schedule+0x90/0x2b0 [ 1189.435189][ C0] schedule+0x164/0x2b0 [ 1189.439396][ C0] schedule_timeout+0x152/0x2c0 [ 1189.444513][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1189.450090][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1189.455525][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1189.461449][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1189.467189][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1189.472089][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1189.478341][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1189.483842][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1189.489259][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1189.495340][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1189.500227][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1189.505487][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1189.510481][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1189.515554][ C0] kthread+0x38b/0x480 [ 1189.519662][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1189.524891][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.529521][ C0] ret_from_fork+0x514/0xb70 [ 1189.534141][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1189.539286][ C0] ? __switch_to+0xc89/0x1420 [ 1189.544001][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.548614][ C0] ret_from_fork_asm+0x1a/0x30 [ 1189.553434][ C0] [ 1189.556478][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1189.562830][ C0] CPU: 0 UID: 0 PID: 5356 Comm: crond Tainted: G L syzkaller #0 PREEMPT(full) [ 1189.573617][ C0] Tainted: [L]=SOFTLOCKUP [ 1189.578062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1189.588142][ C0] RIP: 0010:stack_trace_consume_entry+0x5/0x280 [ 1189.594419][ C0] Code: e9 d0 3e 36 0a cc e8 fa 38 33 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff [ 1189.614153][ C0] RSP: 0018:ffffc9000361f538 EFLAGS: 00000286 [ 1189.620270][ C0] RAX: ffffffff8237a842 RBX: ffffc9000361f600 RCX: 0000000000000000 [ 1189.628286][ C0] RDX: ffffffff91209301 RSI: ffffffff8237a842 RDI: ffffc9000361f600 [ 1189.636301][ C0] RBP: ffffc9000361f5d0 R08: ffffc9000361f990 R09: 0000000000000000 [ 1189.644315][ C0] R10: ffffc9000361f598 R11: ffffffff81b28ab0 R12: ffff88803067ddc0 [ 1189.652410][ C0] R13: 1ffff110060cfc77 R14: ffffffff81b28ab0 R15: ffffc9000361f548 [ 1189.660419][ C0] FS: 00007f7b1be37c80(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 1189.669376][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1189.676166][ C0] CR2: 0000200000404030 CR3: 000000001208a000 CR4: 00000000003526f0 [ 1189.684168][ C0] Call Trace: [ 1189.687479][ C0] [ 1189.690432][ C0] arch_stack_walk+0x10f/0x150 [ 1189.695258][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1189.700498][ C0] stack_trace_save+0xa9/0x100 [ 1189.705383][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1189.711062][ C0] ? __lock_acquire+0x747/0x2de0 [ 1189.716239][ C0] save_stack+0x122/0x230 [ 1189.720620][ C0] ? __pfx_save_stack+0x10/0x10 [ 1189.725507][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1189.730839][ C0] ? __slab_free+0x274/0x2c0 [ 1189.735457][ C0] ? qlist_free_all+0x99/0x100 [ 1189.740331][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1189.746010][ C0] ? page_ext_put+0x97/0xc0 [ 1189.750644][ C0] __reset_page_owner+0x71/0x1f0 [ 1189.755705][ C0] __free_frozen_pages+0xc93/0xd90 [ 1189.760867][ C0] __slab_free+0x274/0x2c0 [ 1189.765327][ C0] qlist_free_all+0x99/0x100 [ 1189.769956][ C0] ? security_file_alloc+0x34/0x310 [ 1189.775183][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1189.780881][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1189.786373][ C0] __kasan_slab_alloc+0x22/0x80 [ 1189.791259][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1189.796755][ C0] ? security_file_alloc+0x34/0x310 [ 1189.801984][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1189.807654][ C0] ? security_file_alloc+0x34/0x310 [ 1189.812886][ C0] security_file_alloc+0x34/0x310 [ 1189.817941][ C0] init_file+0x90/0x2b0 [ 1189.822134][ C0] alloc_empty_file+0x74/0x1d0 [ 1189.826937][ C0] path_openat+0xa2/0x1d60 [ 1189.831389][ C0] ? __lock_acquire+0x747/0x2de0 [ 1189.836367][ C0] do_file_open+0x23e/0x4a0 [ 1189.840906][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1189.845982][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1189.850864][ C0] ? alloc_fd+0x651/0x6c0 [ 1189.855256][ C0] do_sys_openat2+0x115/0x200 [ 1189.860068][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1189.865305][ C0] ? rcu_is_watching+0x16/0xb0 [ 1189.870122][ C0] __x64_sys_openat+0x138/0x170 [ 1189.875021][ C0] do_syscall_64+0x166/0x520 [ 1189.879666][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.885763][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1189.890471][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.896446][ C0] RIP: 0033:0x7f7b1bf87407 [ 1189.899320][ C1] net_ratelimit: 15747 callbacks suppressed [ 1189.899340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.899664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.900101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.900420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.900845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.901182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.901642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.901963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.902433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.902758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.026782][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1190.046771][ C0] RSP: 002b:00007ffe67e77c70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1190.055843][ C0] RAX: ffffffffffffffda RBX: 00007f7b1be37c80 RCX: 00007f7b1bf87407 [ 1190.063929][ C0] RDX: 0000000000000000 RSI: 00007f7b1c17a764 RDI: ffffffffffffff9c [ 1190.072107][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1190.080110][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f7b1c186492 [ 1190.088119][ C0] R13: 00007f7b1c186492 R14: 0000000000000001 R15: 000000000000002b [ 1190.096317][ C0] [ 1194.909324][ C0] net_ratelimit: 16266 callbacks suppressed [ 1194.909353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.909380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.909753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.909889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1194.910342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.910708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.911216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.911401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.911582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.911931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:f0:c4:c7:b3:86, vlan:0) [ 1197.685150][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1197.685183][ T30] audit: type=1326 audit(1789929012.433:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.4.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ce5d9e159 code=0x7ffc0000