last executing test programs: 12m27.203568099s ago: executing program 1 (id=1413): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@userptr={0xc00000, 0x8, 0x4, 0x201, 0x0, {}, {0x2, 0x1, 0x0, 0xa4, 0x4, 0x2, "1b4e4466"}, 0x10001, 0x2, {0x0}, 0x4}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x75) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 12m26.72586367s ago: executing program 1 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0xd, 0x4, 0x2, 0x27, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x7800, 0x0, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x801) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x40, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) 12m26.64806385s ago: executing program 1 (id=1416): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) unshare(0x22020600) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4fa002, 0x0) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) 12m26.170010148s ago: executing program 1 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x126) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0xf, "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", 0x1, 0x4, 0x5, 0x8, 0x40, 0x2, 0x5}, r3}}, 0x128) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_DQEVENT(r10, 0x80885659, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="f3aebd6969fa0000000f01d9660f78c4020a1bf7b805008300b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f06", 0x47}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000d0400000000000000000000000090d288b4fd086086b2f3ccaa17da5a3114e798ad1daa234a6a5d2d374008f666cbdf67abda9da29b6130863381c267c73353c06ee41bfb2cc49a39f1d67eed9291fbfe95e9b255d266371c7e98ddb8419b9c968c517c550f0ac8a470316a977d09638f8f592cbb6e5f93be7708d5d6c2ccdab18e93fe684b13e8847d70d1576b387f4aaa53cd08b2018747828b3963389f65391809b42d2fce3e940d6070aa709a4d08f7bb970f8e00be1c0fa3", @ANYRES64=r3, @ANYBLOB="000000000000e40100000000000000d3916df9e206616e001403008008000300030000000800010002000000140035006d610000000000000053000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12m25.329805165s ago: executing program 1 (id=1422): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 12m25.133240266s ago: executing program 1 (id=1423): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x14) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8917}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mcast2, @random="ad63fa1c81e1", @mcast2}}, 0x38) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x81001) 12m24.608123818s ago: executing program 32 (id=1423): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x14) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8917}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mcast2, @random="ad63fa1c81e1", @mcast2}}, 0x38) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x81001) 9m11.563116055s ago: executing program 3 (id=2215): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x2, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x6, 0xb728, 0x960, 0x8, 0x5, 0x50, 0x6, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0x1000, 0x1, 0x3, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x4e, 0x1, 0x9, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0xfff, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x8, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6]}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r6 = accept(r5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r6) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x18b}, &(0x7f0000000240), &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) socket(0x11, 0x2, 0x10001) 9m10.464622929s ago: executing program 3 (id=2217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) listen(0xffffffffffffffff, 0xfffffffd) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) 9m7.638083118s ago: executing program 5 (id=2230): socket$unix(0x1, 0x1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYBLOB, @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 9m7.41750146s ago: executing program 5 (id=2231): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000280)={0x0, 0x279ad, 0x400, 0x20000007, 0x26c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 9m7.17693822s ago: executing program 5 (id=2232): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000096d5c400423220269d7010209021201000031b2cdd097a200000009040000d32b71b5b677e47573f218ea03e1507a321bda6b969929edb2c32eaf8b3359df4be58d7deaca832356e07d8986095d0f2aa727820902d8cfb5c1b4c303e9e2844faf20b9411af8fa0924c8e38392837491f7cdacbe8e52c438047f3f6baea67d864cf407be7ef4a024609fab60eb2dea"], 0x0) (async) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000096d5c400423220269d7010209021201000031b2cdd097a200000009040000d32b71b5b677e47573f218ea03e1507a321bda6b969929edb2c32eaf8b3359df4be58d7deaca832356e07d8986095d0f2aa727820902d8cfb5c1b4c303e9e2844faf20b9411af8fa0924c8e38392837491f7cdacbe8e52c438047f3f6baea67d864cf407be7ef4a024609fab60eb2dea"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004a00)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000002400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES8], 0x40}}], 0x1, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) 9m3.878534138s ago: executing program 5 (id=2240): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772ef75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) umount2(&(0x7f0000000080)='./file0\x00', 0xb) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 9m3.713816681s ago: executing program 5 (id=2242): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000280)={0x0, 0x279ad, 0x400, 0x20000007, 0x26c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 9m2.940594293s ago: executing program 5 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x4, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000004c0)={0xea00000000000000, 0xeefef000, 0x9, 0xf, 0xc}) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b0001006970766c616e00000c000280060002000000000008000500", @ANYRES32=r2, @ANYBLOB="7299d9477af5d36029ac2d7fd64c4bc2ad0205f4c58e61e5e3602c495be56786a441"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m2.446615467s ago: executing program 33 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x4, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000004c0)={0xea00000000000000, 0xeefef000, 0x9, 0xf, 0xc}) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b0001006970766c616e00000c000280060002000000000008000500", @ANYRES32=r2, @ANYBLOB="7299d9477af5d36029ac2d7fd64c4bc2ad0205f4c58e61e5e3602c495be56786a441"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m2.431547466s ago: executing program 3 (id=2249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000840)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2008, 0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETVNETLE(r5, 0x400454dc, 0xfffffffffffffffe) (async) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x3, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4080) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2fb92c54, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0xfffffffc, 'syz0\x00', 0x37}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x3, 0x0, 0x0, 0x4000000000, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x77e, 0xcf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2]}) (async) r8 = syz_open_dev$sg(&(0x7f00000005c0), 0x3, 0x204100) r9 = semget$private(0x0, 0x2, 0x100) semop(r9, &(0x7f0000000540)=[{0x3, 0x2, 0x1000}], 0x1) ioctl$SG_GET_PACK_ID(r8, 0x227c, 0x0) 9m2.118409598s ago: executing program 3 (id=2252): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772ef75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) umount2(&(0x7f0000000080)='./file0\x00', 0xb) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 9m1.750632637s ago: executing program 3 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x8003, 0x8000, 0x8, 0x0, 0xffffffffffffffff, 0x80000002}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)={@initdev, @rand_addr, @multicast1}, &(0x7f0000000040)=0xc) 9m0.0224143s ago: executing program 3 (id=2259): socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(0x0, 0x7) (async) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xa, 0xc9, @any, 0x2, 0x5, 0x3, 0x78, 0x400, 0x6}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xa, 0xc9, @any, 0x2, 0x5, 0x3, 0x78, 0x400, 0x6}}}, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8001, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x0, 0x8, 0x2, '#\t'}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x0, 0x8, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x4200, r2}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x4200, r2}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff08000000d9d7d5cc9d6f779789e406f1e4a4e7575eb157614e69314355dd42b9a1512906322ccd7cf1a43461ed4e1c6a81537f100208ba6bceeac76d0047825f6a9a61a18b29bc751982c2b4bcfeba4f3408b66526089567be02bed5099442b23e484a1c2bd9512604c3da74e5ef797d236fcff8cf4af75d63a203b6ac0cd84e1362fe8b96bd9a0883949b93d82d44b0af6602e37940250b602b38813547c867cb91e52263f0df1fa17b4135f1723960969f0f7e38a7136e5d2036841729f35adeeb987fdc42930dd603742317d6836900fda61201878628ce2517f0e0ffc3cd18"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff08000000d9d7d5cc9d6f779789e406f1e4a4e7575eb157614e69314355dd42b9a1512906322ccd7cf1a43461ed4e1c6a81537f100208ba6bceeac76d0047825f6a9a61a18b29bc751982c2b4bcfeba4f3408b66526089567be02bed5099442b23e484a1c2bd9512604c3da74e5ef797d236fcff8cf4af75d63a203b6ac0cd84e1362fe8b96bd9a0883949b93d82d44b0af6602e37940250b602b38813547c867cb91e52263f0df1fa17b4135f1723960969f0f7e38a7136e5d2036841729f35adeeb987fdc42930dd603742317d6836900fda61201878628ce2517f0e0ffc3cd18"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x1, 0xd5da, 0x8d7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x615}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4890) 8m59.400770159s ago: executing program 34 (id=2259): socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(0x0, 0x7) (async) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xa, 0xc9, @any, 0x2, 0x5, 0x3, 0x78, 0x400, 0x6}}}, 0x14) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xa, 0xc9, @any, 0x2, 0x5, 0x3, 0x78, 0x400, 0x6}}}, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8001, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x0, 0x8, 0x2, '#\t'}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x0, 0x8, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x4200, r2}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x4200, r2}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff08000000d9d7d5cc9d6f779789e406f1e4a4e7575eb157614e69314355dd42b9a1512906322ccd7cf1a43461ed4e1c6a81537f100208ba6bceeac76d0047825f6a9a61a18b29bc751982c2b4bcfeba4f3408b66526089567be02bed5099442b23e484a1c2bd9512604c3da74e5ef797d236fcff8cf4af75d63a203b6ac0cd84e1362fe8b96bd9a0883949b93d82d44b0af6602e37940250b602b38813547c867cb91e52263f0df1fa17b4135f1723960969f0f7e38a7136e5d2036841729f35adeeb987fdc42930dd603742317d6836900fda61201878628ce2517f0e0ffc3cd18"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff08000000d9d7d5cc9d6f779789e406f1e4a4e7575eb157614e69314355dd42b9a1512906322ccd7cf1a43461ed4e1c6a81537f100208ba6bceeac76d0047825f6a9a61a18b29bc751982c2b4bcfeba4f3408b66526089567be02bed5099442b23e484a1c2bd9512604c3da74e5ef797d236fcff8cf4af75d63a203b6ac0cd84e1362fe8b96bd9a0883949b93d82d44b0af6602e37940250b602b38813547c867cb91e52263f0df1fa17b4135f1723960969f0f7e38a7136e5d2036841729f35adeeb987fdc42930dd603742317d6836900fda61201878628ce2517f0e0ffc3cd18"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x1, 0xd5da, 0x8d7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x615}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4890) 48.514936901s ago: executing program 6 (id=4063): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80, 0x800) dup3(r2, r1, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket(0x25, 0x801, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r6, 0xf23, 0x0, 0xc, 0x0, 0x0) connect$vsock_stream(r5, 0x0, 0x0) shutdown(r5, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x28, 0x4c00}, 0x810) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x2, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) (rerun: 32) 47.812609444s ago: executing program 6 (id=4066): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d08", 0x14}], 0x1}, 0x6) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) (async, rerun: 32) sendmsg$inet_sctp(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000002000000000002c9"], 0x20, 0x800}, 0x20000000) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) 47.19013642s ago: executing program 6 (id=4068): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) syz_open_dev$dvb_frontend(0x0, 0x0, 0x400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff3, 0xb}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x40080c0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000880)={0x1, 0xc2, "621f41c6d6c7bcd256ef229c255597d88d1116c173025fbe02e6506a4d53ffd9fcc639fa73f73efdc2349cf1bdcc0498dbb64343457173a203552a88a804e2b8bd79f3b3629f8beca0045bfebad9f9f04d6b568b80201850b7e521120a0f1bbec5e457ca2d063fd09d2b2c9b1463a78435a59ac37d4d8b61e279fa42d433654d36d4026aa55e0de5418acd4319575b3d76588a10372de04097d3dc151907962aa374cb74a0c84d239745761fb298e7c2218a2437618a4b9529fd46cc6d1c64b4ad94"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.382385822s ago: executing program 6 (id=4077): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000380)="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", 0x1000, 0x840}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r2, 0xcc8c8000) write$binfmt_elf32(r2, 0x0, 0x4cd) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 45.346992672s ago: executing program 6 (id=4079): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000003f05000000430000000203000000000000"], 0x18}, 0x440e0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r2, 0x12, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02010002030090"], 0x18}, 0x19}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2, 0xb, 0x4, 0x9, 0x3a, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x32, 0xa0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@empty, 0x7, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_lifetime={0x4, 0x4, 0x101, 0x0, 0x4, 0x100000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x8, 0x0, 0xbe, "e5c3e20f38d7f592fe9994bf45319161e78a025e4db9a3af7bf8ed51eac8cb81045c6e02e011a949153d4835f07d6a4e8c0754284595d3397c8f086f5108b4207cbc11790c1932f49bc31552b61c32daff0b6aa9a713fa46e2b08f667e99d6d1839e56aae6ee4b83a5633321ec11c6a60da7632149dae27538b02bab40f814ab36fe8b70fb1f87dca30f2a806bef9bbc04356c2f79f5e89f65b821c17aa0bfdaa9f98f18808ee1f5b6e92f33b0d4636fd61fd38f5dca0866414e7d06ee62"}, @sadb_lifetime={0x4, 0x3, 0x7, 0x4642d98, 0x2ca, 0x6}, @sadb_address={0x3, 0x17, 0xff, 0x80, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bba, 0xfa, {0x6, 0x2b, 0x81, 0x2, 0x0, 0x5, 0x0, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x1d0}}, 0x4048004) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x118d, &(0x7f00000001c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) socket$inet6(0xa, 0x6, 0x3) landlock_restrict_self(r5, 0x6) 44.623400157s ago: executing program 6 (id=4080): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xe, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x7fe, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) r6 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xa3d, 0x4, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f00000000c0)={0x2f01, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, 0x0, 0x4040010) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x5d) 43.53915991s ago: executing program 35 (id=4080): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xe, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x7fe, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) r6 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xa3d, 0x4, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f00000000c0)={0x2f01, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, 0x0, 0x4040010) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0x5d) 27.934144156s ago: executing program 7 (id=4140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0xb2, &(0x7f0000000380)=@string={0xb2, 0x3, "19ac80544cc9cd0f045480a86de2b008f4c434b6e2b7c43f587edc6d1d7982d0e2ea4f93415d032a959642da66f5fe9a27b7c62ca9374046976b811a188ada25b0d5d56252442a83d982b99fdb78538aba22e80692e108e4243daad8cba9ceff13fe0d83fdd66ab0ac243f78eb79eaba48cf8ff8d4a250dd1456d1c32dc25ca8fdfa2c13f11096d354d36ce2e082ff1a0a70b24450ed7c1767cddfe0d29a81279e16275019dffd682447f8bbedfbe973"}}, {0x80, &(0x7f0000000480)=@string={0x80, 0x3, "899ce75806e28c06c0ea6826ccc407fbe6ee613a4d4b266692eb84d901738a3b050f12a93a5535e2113080b74a0f7949d72f59eeb53b1601edef7f9bd91982df00b534001ae8bec7a25a9e44f657e3dd839b9f685334938416475581a5f42e35ea4415c1e24daf8af83fdae82e5f6f5370686400a2ee43e546bbcbf56203"}}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4000000000000000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf2564000000080001005e000000080003007afab9a03d260e5c553d3e0eaf8fe4288306ee5e91e513ab2b2b3662c3a0b710e36c183901a2a233704df4ae8c97efb986b7338a94ff582ed2f48beb1cd84591fb9be901def6d39ae8905f640a5f99a07228f7d33eae9d4c480d513ced1a1233d9a99afa8b25d057a645a1879dfd68c3d86bafb90000000047ade09d7a47b1ddf82fe18b5d2adf3a9b3a9d8db0a0c04a706778294249258019f98565041fe093c804515f65df911648f6cbb0ce262e0ae92837c676af9620146c5c684a29e8d644f109e8157412ab1ff3", @ANYRES32=r6, @ANYBLOB="e9fc99000100000073000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4880) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r8}, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf25260000000c009900000000006600000010009d000100000003000600070003000a000600ffffffffffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x880) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = dup(r14) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) 27.675907922s ago: executing program 2 (id=4142): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000029f000/0x4000)=nil, 0x4000, 0x1000008, 0x400, 0x800) io_setup(0x9, &(0x7f0000000000)=0x0) io_uring_setup(0x10007, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xc40) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100)=0xc, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) 26.106816215s ago: executing program 4 (id=4144): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0x1f00]}}], 0xffc8) 25.566901227s ago: executing program 4 (id=4146): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d0000000000010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f0000000500)=""/43, 0x2b}], 0x2}, 0x7}], 0x1, 0x2000, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 25.543938725s ago: executing program 2 (id=4147): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 25.323899792s ago: executing program 0 (id=4148): getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$BLKGETSIZE(r1, 0x1260, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000001c0)=0x2) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001380)={0x17, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) lseek(r1, 0x1, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001500)={'erspan0\x00', 0x0, 0x8, 0x8, 0x3, 0x9, {{0x6, 0x4, 0x2, 0x1d, 0x18, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @broadcast, {[@generic={0xa, 0x2}]}}}}}) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000001640)={0x38, 0x0, 0x36, 0x4289, 0x400, 0xd9, 0x3, 0x1101, 0x6, 0x2}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001680)=0x0) sched_getattr(r4, 0x0, 0x0, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000001780)=0xfe, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0xfe, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 25.214246308s ago: executing program 0 (id=4149): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="7efded"]}]}}]}]}]}}]}, 0x74}}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}, {0xffffffffffffffff, 0x0, 0x10000, 0x100000000}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000480)={0x0, 0x1, 0x9f, r7, 0x400}, 0xc) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x1c}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) 25.114607s ago: executing program 0 (id=4150): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x81) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x9, 0x1, 0x0, 0x0, 0x2) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 24.858410373s ago: executing program 7 (id=4151): socket$inet6(0xa, 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x3, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffe, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x205, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x42bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0x11, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0xdd83, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x806d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d691, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xe]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x501, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c085}, 0x90) 24.648506592s ago: executing program 7 (id=4152): socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x3, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffe, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x205, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x42bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0x11, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0xdd83, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x806d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d691, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xe]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 3) 24.161680476s ago: executing program 7 (id=4153): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x50, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x6234, &(0x7f0000000640)={0x0, 0xe8ce, 0x2, 0x2, 0x40000336}, &(0x7f0000000140)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x28, 0x2004, @fd_index=0x4, 0xc387, &(0x7f0000000240)="15a36ed925e0a05c81784119fc08d6de665a3406b6e42d6a844dfe2fa7f9e32295b6cf0a430c3495db189a05310acbdb86134617cbaa58523287f3a76aa9d3311e99ac8f2b2f24a18c3947b27ded3d43c430e5bbf26cad8cb40ebb07a181bad9501d86c2a794", 0x66, 0x6, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000064d000/0x2000)=nil, 0x2000}, 0x7}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x6c0040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x800000) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) fcntl$dupfd(r10, 0x406, r9) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000000)) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 23.695144358s ago: executing program 2 (id=4154): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000001e65b20d039d6cda2a69ea", @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000"], 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x177) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x111b, &(0x7f0000000280)={0x0, 0xb71a, 0x400, 0x1, 0x3d7}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f00000000c0)={0x1, 0x2, 0xa}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000003c0)={0x9, @output={0x1000, 0x0, {0xc47, 0x80000000}, 0x4, 0xfffff800}}) r5 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) close_range(r5, 0xffffffffffffffff, 0x0) 23.005406006s ago: executing program 7 (id=4155): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x4d}, @rr={0x7, 0x3, 0xa3}]}}}], 0x18}}], 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6a8e82, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x6, 0x800, 0x8000000000, 0x4, 0x7, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 22.920217759s ago: executing program 4 (id=4156): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0x2000]}}], 0xffc8) 22.454362472s ago: executing program 8 (id=4157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027"], 0x124}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22.197287354s ago: executing program 7 (id=4158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x9, 0x30, 0xf3, 0x2, 0xd52, 0x722, 0x4, 0x4, 0x9, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) write$cgroup_devices(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008dfffff0700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socket$alg(0x26, 0x5, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000190c0)='./file0\x00', r4, 0x0, 0x1000) 21.902675638s ago: executing program 4 (id=4159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x100000000000000, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 21.605971578s ago: executing program 8 (id=4160): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x8, 0x5, 0xff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mmap$snddsp_status(&(0x7f0000ff2000/0xe000)=nil, 0x1000, 0x0, 0x8010, r1, 0x82000000) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x210f81, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r2, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xffffff81, 0x0, 0x6}) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x0}) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0x6, @mcast2}, {0xa, 0x4e22, 0x626, @private1, 0x7ff}, 0x1, {[0x7, 0x2, 0x7, 0x4, 0x5, 0x4, 0x7, 0x949]}}, 0x5c) write$P9_RUNLINKAT(r1, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r3, 0x2, 0x8}, 0xc) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r1, 0x10000000) semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000380)=""/31) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000003c0)={0x0, 0x7ff, 0x8, 0x4, 0x100, 0xff, 0x9, 0xedfb, 0x8, 0x6f5e, 0x8, 0x3}) read$midi(r1, &(0x7f0000000480)=""/50, 0x32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x3919, 0x8, 0x1}) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_AF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004044}, 0x200408d0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000640)=0x111040, 0x4) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0xc4, 0x3, 0x5}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000700)={0x6, 0x8001, 0x3, 0x28fd, 0x15, "4a5c5db8bd1f8ea1"}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r5 = accept$alg(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000740)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x120, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000780), {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xac5d4a16dd3648f2, 'team0\x00', 'veth0\x00', {}, {}, 0x2, 0x1, 0x11}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@mac={{0x30}, {@broadcast, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x40, 0x6, [0x36, 0x10, 0x18, 0x13, 0x34, 0x20, 0x18, 0x40, 0x5, 0x1, 0x24, 0x40, 0x15, 0x14, 0x2f, 0x1f], 0x0, 0x10000, 0x80}}}, {{@ip={@multicast1, @private=0xa010101, 0x0, 0xffffffff, 'veth0_to_team\x00', 'ipvlan1\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bond0\x00', {0x7}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0x0, 'caif0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x16, 0x2}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x0, 0xff], 0x4e21, 0x1, 0x4e24, 0x4e24, 0x0, 0x9, 0x0, 0x2, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 21.565828852s ago: executing program 4 (id=4161): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x28, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xe) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x97, 0x7ffffdbb}, {0x101, 0x0, 0x60, 0x6}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) syncfs(r0) (async, rerun: 32) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) 21.417675762s ago: executing program 8 (id=4162): socket$inet6(0xa, 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = getpgid(r1) syz_open_procfs(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x3, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0xe77, 0x243, 0x3, 0xe, 0xfffffffe, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x205, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0xa, 0x8, 0x4, 0x3, 0x8], [0x1, 0x43, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x42bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0x11, 0x314, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0xdd83, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x806d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x3, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d691, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xe]}, 0x45c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x21) getpeername$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x3e) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.201555463s ago: executing program 8 (id=4163): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088f9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000001200"}) 21.198699798s ago: executing program 0 (id=4164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) r2 = socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000480)=r4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08393e000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20008000) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x92) 20.713691425s ago: executing program 2 (id=4165): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) unshare(0x8040480) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) unshare(0x2000400) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x7ffffe}, 0x400, "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"}, 0x418}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000059c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x100, 0x800}}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80040, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syncfs(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0xc000) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x2001, 0x4c1, 0x43, 0x0, 0x0) 20.676305017s ago: executing program 4 (id=4166): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d0000000000010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f0000000500)=""/43, 0x2b}], 0x2}, 0x7}], 0x1, 0x2000, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15.204484249s ago: executing program 8 (id=4167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10001, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)="da0bb833d15f020f20e9b3d0fa6964fd3e45091a0b2527131a61e5660c3fc0423432396e312907278e181ced9cc87a34041db51e446e0694833a050fff5a88a9efd2cc204ef913", 0x47}, {&(0x7f0000000500)="d160851dbc7ad1a8d25dae6850fd8c1393bbe19495d7ce559e2526746ee29068a57cd8d9e1646558fe233bdd1a3aced92a82e97be23dc74e62983d8b91362e34", 0x40}], 0x2, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004000}], 0x1, 0x8810) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000540)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x4, @private0, 0xfffffffa}}}, 0x84) (async) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000880)={0xa, @sdr={0x55595659, 0xeef6}}) syz_io_uring_setup(0x2200, &(0x7f0000000240)={0x0, 0x9ab8, 0x200, 0x0, 0x276}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="6800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726924676500001400028005002b000200000008000400000000000a000200000000000000000005002100ff00000008001e000100000008002c619616f1d8ea106719fa140006000000"], 0x68}}, 0x24) syz_io_uring_setup(0x48b6, &(0x7f0000000340)={0x0, 0xa1b7, 0x8, 0x2, 0x81}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_CLOSE={0x13, 0x65, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) ptrace(0x10, r3) (async) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r8 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r8, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) lseek(r8, 0x0, 0x4) 15.203046387s ago: executing program 2 (id=4168): write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xfb}}, 0x18) io_setup(0x10001, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000000c0), 0x80) keyctl$search(0xa, 0x0, 0x0, 0x0, r1) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2, @ANYBLOB="ac"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000002e000000180001801400020064756d6d7930"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="e1980400419a040020000000000001007369740014000280080003"], 0x40}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 14.309868501s ago: executing program 0 (id=4169): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x21) getsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) (async) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r5, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"6b42f11cba1158182b98762e"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @addr}], 0x54) (async) write$sndseq(r5, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"6b42f11cba1158182b98762e"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @addr}], 0x54) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r5, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r5, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) (async) write$sndseq(r5, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@deltfilter={0x29c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10}, {0xffe0, 0xf}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x240, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x5b}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x9}}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffe}, @TCA_U32_ACT={0x21c, 0x7, [@m_skbedit={0xa4, 0xf, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x17a, 0x4, 0xfffffffb, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4d, 0x6, "5102d9b6f1bc4175dc989da6fcf73c4dde78ed2f21f87ac49fecdc0a5b1a40c400e9b10953cfec9926a2a85f38051166042d0a7fd3f3dc581575d0dabd79aafcd053de4ccb7dd3e185"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x120, 0xf, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0xe8, 0x6, "98e5c1541312b787b3f1bae86c409c0bdaf57aed03389aab98d4c9ecf237c92cb2f57e881d8018c991844820a961fe3ea6fd9bbd2a70ce6724c1d4448f7fa7d99f60302e9006a3b24bb80c48cc2e2b7fa8f9ad5c17f83cab77158d53f2d6fd8f7bcf7ed1038a751ec0c0269cb7447f4f52810543e89de89465a6569d0ffecb500d8eaec807ca4ac30c26e23b209488d32bbdfcc46700a7231815ddc6e5f2d0176f19727cdddf1680fea18a79ac07006b89ca46a048455fc79a4948acbddf3c8f5a06415a88768d82a1749866cf79421639b8a77a7b21bdbf38a0fd63e974cbbb7f037f5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x54, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}]}, {0x1d, 0x6, "21cfce467fdd06811b88e1b115e03f5cab69b6bfe3fddbe0b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0xdc, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x8}}]}, 0x29c}}, 0x45) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) semctl$GETZCNT(0x0, 0x1, 0x20, 0x0) (async) semctl$GETZCNT(0x0, 0x1, 0x20, 0x0) 13.405971091s ago: executing program 8 (id=4170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2102, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async, rerun: 32) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x3, 0x200, 0xfffffffe, 0xffff01c2, 0x2, 0xa05}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x1}}, 0x18) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r7 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000300)={0xc, r2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000180)=ANY=[]) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'ip_vti0\x00', {0xfff}, 0x8001}) (rerun: 64) 0s ago: executing program 36 (id=4158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x9, 0x30, 0xf3, 0x2, 0xd52, 0x722, 0x4, 0x4, 0x9, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) write$cgroup_devices(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008dfffff0700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socket$alg(0x26, 0x5, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000190c0)='./file0\x00', r4, 0x0, 0x1000) kernel console output (not intermixed with test programs): 799 code=0x0 [ 1079.091116][ T29] audit: type=1326 audit(1773815351.068:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.214127][ T29] audit: type=1326 audit(1773815351.068:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.240001][ T29] audit: type=1326 audit(1773815351.068:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.266836][ T29] audit: type=1326 audit(1773815351.068:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.303637][ T29] audit: type=1326 audit(1773815351.068:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.328354][ T29] audit: type=1326 audit(1773815351.068:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.328416][ T29] audit: type=1326 audit(1773815351.068:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.328459][ T29] audit: type=1326 audit(1773815351.068:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1079.328509][ T29] audit: type=1326 audit(1773815351.068:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20622 comm="syz.2.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1080.366663][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1080.966454][T20684] FAULT_INJECTION: forcing a failure. [ 1080.966454][T20684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.980367][T14622] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1081.005358][T20686] input: syz1 as /devices/virtual/input/input83 [ 1081.018440][T20684] CPU: 1 UID: 0 PID: 20684 Comm: syz.2.3862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.018469][T20684] Tainted: [L]=SOFTLOCKUP [ 1081.018477][T20684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.018488][T20684] Call Trace: [ 1081.018504][T20684] [ 1081.018513][T20684] dump_stack_lvl+0xe8/0x150 [ 1081.018544][T20684] should_fail_ex+0x412/0x560 [ 1081.018577][T20684] _copy_from_user+0x2d/0xb0 [ 1081.018600][T20684] snd_seq_event_dup+0x4a0/0x780 [ 1081.018641][T20684] snd_seq_client_enqueue_event+0x337/0x4e0 [ 1081.018680][T20684] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 1081.018714][T20684] snd_seq_write+0x5cb/0x820 [ 1081.018752][T20684] ? __pfx_snd_seq_write+0x10/0x10 [ 1081.018781][T20684] ? bpf_lsm_file_permission+0x9/0x20 [ 1081.018802][T20684] ? security_file_permission+0x75/0x260 [ 1081.018825][T20684] ? rw_verify_area+0x255/0x4d0 [ 1081.018845][T20684] ? __pfx_snd_seq_write+0x10/0x10 [ 1081.018871][T20684] vfs_write+0x29a/0xb90 [ 1081.018900][T20684] ? __pfx_vfs_write+0x10/0x10 [ 1081.018923][T20684] ? __fget_files+0x2a/0x420 [ 1081.018953][T20684] ? __fget_files+0x2a/0x420 [ 1081.018978][T20684] ? __fget_files+0x3a0/0x420 [ 1081.019003][T20684] ? __fget_files+0x2a/0x420 [ 1081.019039][T20684] ksys_write+0x150/0x270 [ 1081.019062][T20684] ? __pfx_ksys_write+0x10/0x10 [ 1081.019096][T20684] do_syscall_64+0x14d/0xf80 [ 1081.019116][T20684] ? trace_irq_disable+0x3b/0x150 [ 1081.019142][T20684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.019162][T20684] ? clear_bhb_loop+0x40/0x90 [ 1081.019186][T20684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.019204][T20684] RIP: 0033:0x7fc40fb9c799 [ 1081.019223][T20684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.019239][T20684] RSP: 002b:00007fc4109fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.019259][T20684] RAX: ffffffffffffffda RBX: 00007fc40fe15fa0 RCX: 00007fc40fb9c799 [ 1081.019273][T20684] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 1081.019286][T20684] RBP: 00007fc4109fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.019298][T20684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.019309][T20684] R13: 00007fc40fe16038 R14: 00007fc40fe15fa0 R15: 00007fc40ff3fa48 [ 1081.019341][T20684] [ 1081.535028][T14622] usb 5-1: Using ep0 maxpacket: 16 [ 1081.625804][T14622] usb 5-1: config 104 has an invalid interface number: 233 but max is 0 [ 1081.638555][T14622] usb 5-1: config 104 has no interface number 0 [ 1081.645350][T14622] usb 5-1: config 104 interface 233 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1081.674023][T14622] usb 5-1: config 104 interface 233 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1081.689166][T14622] usb 5-1: config 104 interface 233 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1081.710468][T14622] usb 5-1: config 104 interface 233 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1081.888271][T14622] usb 5-1: config 104 interface 233 has no altsetting 0 [ 1081.974834][T14622] usb 5-1: Dual-Role OTG device on HNP port [ 1082.107160][T14622] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a28, bcdDevice=f1.88 [ 1082.148157][T14622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.174032][T14622] usb 5-1: Product: 녍甪﫺产鳶蠋ꦺ㨍⌙ꋛ㌌ꅣ荹矗즍죕恝鷠⽿봇뉺⪪忖易鸉䭟枭讛켡ˍⷒ嗥椇洍 [ 1082.247758][T14622] usb 5-1: Manufacturer: 阮訷㍳ડ芐䈔灚ნ䈺₮ď䅗ᑟ [ 1082.271681][T14622] usb 5-1: SerialNumber: љ [ 1082.663665][ T5913] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1082.877635][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 1082.987595][ T5913] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1082.998200][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.011104][ T5913] usb 3-1: Product: syz [ 1083.022302][ T5913] usb 3-1: Manufacturer: syz [ 1083.040294][ T5913] usb 3-1: SerialNumber: syz [ 1083.082091][ T5913] usb 3-1: config 0 descriptor?? [ 1083.166613][ T5913] gspca_main: se401-2.14.0 probing 047d:5003 [ 1083.739509][ T5913] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input84 [ 1083.941609][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.960986][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.124358][ T5913] usb 3-1: USB disconnect, device number 65 [ 1084.228005][T20712] tipc: Enabled bearer , priority 0 [ 1084.251070][T20712] ip6t_srh: unknown srh invflags 4000 [ 1084.300063][T14622] usb 5-1: USB disconnect, device number 84 [ 1085.016509][T20720] program syz.4.3872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.140558][T20712] tipc: Disabling bearer [ 1085.359272][T20738] FAULT_INJECTION: forcing a failure. [ 1085.359272][T20738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.394044][T20738] CPU: 0 UID: 0 PID: 20738 Comm: syz.4.3876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.394077][T20738] Tainted: [L]=SOFTLOCKUP [ 1085.394085][T20738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.394096][T20738] Call Trace: [ 1085.394105][T20738] [ 1085.394113][T20738] dump_stack_lvl+0xe8/0x150 [ 1085.394144][T20738] should_fail_ex+0x412/0x560 [ 1085.394182][T20738] _copy_from_user+0x2d/0xb0 [ 1085.394206][T20738] snd_seq_event_dup+0x4a0/0x780 [ 1085.394249][T20738] snd_seq_client_enqueue_event+0x337/0x4e0 [ 1085.394289][T20738] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 1085.394325][T20738] snd_seq_write+0x5cb/0x820 [ 1085.394365][T20738] ? __pfx_snd_seq_write+0x10/0x10 [ 1085.394393][T20738] ? bpf_lsm_file_permission+0x9/0x20 [ 1085.394417][T20738] ? security_file_permission+0x75/0x260 [ 1085.394443][T20738] ? rw_verify_area+0x255/0x4d0 [ 1085.394464][T20738] ? __pfx_snd_seq_write+0x10/0x10 [ 1085.394493][T20738] vfs_write+0x29a/0xb90 [ 1085.394524][T20738] ? __pfx_vfs_write+0x10/0x10 [ 1085.394546][T20738] ? __fget_files+0x2a/0x420 [ 1085.394576][T20738] ? __fget_files+0x2a/0x420 [ 1085.394602][T20738] ? __fget_files+0x3a0/0x420 [ 1085.394628][T20738] ? __fget_files+0x2a/0x420 [ 1085.394664][T20738] ksys_write+0x150/0x270 [ 1085.394689][T20738] ? __pfx_ksys_write+0x10/0x10 [ 1085.394722][T20738] do_syscall_64+0x14d/0xf80 [ 1085.394743][T20738] ? trace_irq_disable+0x3b/0x150 [ 1085.394769][T20738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.394789][T20738] ? clear_bhb_loop+0x40/0x90 [ 1085.394814][T20738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.394833][T20738] RIP: 0033:0x7f399599c799 [ 1085.394853][T20738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.394869][T20738] RSP: 002b:00007f39967b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1085.394891][T20738] RAX: ffffffffffffffda RBX: 00007f3995c15fa0 RCX: 00007f399599c799 [ 1085.394906][T20738] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 1085.394918][T20738] RBP: 00007f39967b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.394931][T20738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.394943][T20738] R13: 00007f3995c16038 R14: 00007f3995c15fa0 R15: 00007f3995d3fa48 [ 1085.394975][T20738] [ 1086.086011][T20750] sch_fq: defrate 16 ignored. [ 1086.212588][T14622] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1086.431013][T14622] usb 1-1: Using ep0 maxpacket: 8 [ 1086.458674][T14622] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.512572][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.543304][T14622] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.573191][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.590978][T20761] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1086.703855][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.717481][T14622] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.726416][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.746932][T14622] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.763026][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.777166][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.818176][T14622] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.826946][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 1086.826963][ T29] audit: type=1326 audit(1773815358.808:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1086.827475][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.878337][ T29] audit: type=1326 audit(1773815358.808:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1086.903165][T14622] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.903202][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.903227][T14622] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.906493][T14622] usb 1-1: string descriptor 0 read error: -22 [ 1087.028838][T14622] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1087.067559][T14622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.091944][ T29] audit: type=1326 audit(1773815358.948:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.164091][ T29] audit: type=1326 audit(1773815358.948:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.223255][ T5826] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1087.269645][T14622] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1087.278366][ T29] audit: type=1326 audit(1773815358.948:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.341632][ T29] audit: type=1326 audit(1773815358.948:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.396109][ T5826] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 1087.406609][ T5826] usb 3-1: config 0 has no interface number 0 [ 1087.408613][ T29] audit: type=1326 audit(1773815358.948:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.437136][ T5826] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.437172][ T5826] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.437213][ T5826] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1087.437235][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.503895][ T29] audit: type=1326 audit(1773815358.948:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.504553][ T5826] usb 3-1: config 0 descriptor?? [ 1087.558235][ T29] audit: type=1326 audit(1773815358.948:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1087.587716][ T29] audit: type=1326 audit(1773815358.948:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x7ffc0000 [ 1088.180127][T20780] libceph: resolve '96' (ret=-3): failed [ 1088.214485][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3888'. [ 1088.221951][ T5826] elo 0003:04E7:0030.005A: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input22 [ 1088.249595][T20781] libceph: resolve '96' (ret=-3): failed [ 1088.445041][T14622] usb 3-1: USB disconnect, device number 66 [ 1089.158643][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.185556][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.225377][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.257887][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.279335][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.325926][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.364703][T17258] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1089.373366][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.478084][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1089.640212][T17258] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1089.671816][T17258] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1089.683746][T17258] usb 3-1: can't read configurations, error -71 [ 1089.724423][ T5929] usb 1-1: USB disconnect, device number 92 [ 1090.196618][T20831] tipc: Enabling of bearer rejected, failed to enable media [ 1090.364701][T20835] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1092.195056][T17258] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1092.394330][T17258] usb 1-1: Using ep0 maxpacket: 32 [ 1092.402338][T17258] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1092.425972][T17258] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1092.462228][T20867] __nla_validate_parse: 56 callbacks suppressed [ 1092.462249][T20867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3910'. [ 1092.464124][T17258] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1092.499316][T17258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.526549][T17258] usb 1-1: config 0 descriptor?? [ 1092.966298][ T5912] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1093.105089][ T5929] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1093.281562][T20889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1093.317593][T20889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1093.327603][ T5912] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1093.339090][T17258] hid_parser_main: 5 callbacks suppressed [ 1093.339115][T17258] corsair-cpro 0003:1B1C:0C10.005B: unknown main item tag 0x0 [ 1093.356627][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1093.369478][T17258] corsair-cpro 0003:1B1C:0C10.005B: unknown main item tag 0x0 [ 1093.381156][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1093.396962][T17258] corsair-cpro 0003:1B1C:0C10.005B: item fetching failed at offset 2/5 [ 1093.414798][ T5912] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.436896][T17258] corsair-cpro 0003:1B1C:0C10.005B: probe with driver corsair-cpro failed with error -22 [ 1093.456128][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.486469][ T5912] usb 7-1: config 0 descriptor?? [ 1093.501130][ T5912] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1093.518929][T20860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.537760][T20860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.556616][T20860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.582113][T20860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.123839][T17258] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1094.906590][T17258] usb 1-1: USB disconnect, device number 93 [ 1094.946614][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1095.260672][T17258] hid-generic 0008:0091:0009.005C: reserved main item tag 0xd [ 1095.282399][T17258] hid-generic 0008:0091:0009.005C: item fetching failed at offset 28/32 [ 1095.295361][ T5929] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1095.328864][T17258] hid-generic 0008:0091:0009.005C: probe with driver hid-generic failed with error -22 [ 1095.454442][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 1095.462301][ T5929] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1095.476314][ T5929] usb 3-1: config 179 has no interface number 0 [ 1095.531222][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1095.757876][T17258] usb 7-1: USB disconnect, device number 85 [ 1095.845914][T20930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1095.868146][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1095.964028][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1096.049973][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1096.114366][ T5929] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1096.170138][ T5929] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1096.213832][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.278492][T20915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1096.544885][ T5929] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input85 [ 1096.706406][T20915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.716069][T20915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.730713][ T5826] usb 3-1: USB disconnect, device number 69 [ 1096.730815][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1096.745767][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1097.643268][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 1097.643291][ T29] audit: type=1800 audit(1773815369.618:2649): pid=20961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3931" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1098.173175][T14622] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1098.297479][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3934'. [ 1098.332582][T14622] usb 5-1: Using ep0 maxpacket: 16 [ 1098.392046][T14622] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1098.412037][T14622] usb 5-1: config 3 has an invalid interface number: 37 but max is 1 [ 1098.428026][T14622] usb 5-1: config 3 has an invalid interface number: 18 but max is 1 [ 1098.449012][T14622] usb 5-1: config 3 has an invalid descriptor of length 199, skipping remainder of the config [ 1098.476746][T14622] usb 5-1: config 3 has no interface number 0 [ 1098.493030][T14622] usb 5-1: config 3 has no interface number 1 [ 1098.499472][T14622] usb 5-1: config 3 interface 18 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1098.523245][T14622] usb 5-1: config 3 interface 37 has no altsetting 0 [ 1098.530108][T14622] usb 5-1: config 3 interface 18 has no altsetting 0 [ 1098.571718][T14622] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=29.19 [ 1098.591689][T14622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.612022][T14622] usb 5-1: Product: ࠖ [ 1098.617563][T14622] usb 5-1: Manufacturer: ӿ [ 1098.626247][T14622] usb 5-1: SerialNumber: ဿ [ 1099.023425][T14622] usb 5-1: USB disconnect, device number 85 [ 1100.393115][ T5826] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1100.543150][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 1100.553955][ T5826] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1100.564564][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1100.683250][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1100.711521][ T5826] usb 3-1: Product: syz [ 1100.721200][ T5826] usb 3-1: Manufacturer: syz [ 1100.732441][ T5826] usb 3-1: SerialNumber: syz [ 1100.755262][ T5826] usb 3-1: config 0 descriptor?? [ 1100.778406][ T5826] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1101.421652][ T5826] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1101.430869][ T5826] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 1102.370342][T21033] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3950'. [ 1102.744365][ T5929] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1102.853079][ T5826] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1102.914403][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 1102.921752][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.948840][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.965108][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1102.976403][ T5929] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1102.989147][ T5929] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1103.007201][ T5929] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1103.019650][ T5929] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1103.030429][ T5929] usb 7-1: Manufacturer: syz [ 1103.037884][T21038] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1103.070216][ T5929] usb 7-1: config 0 descriptor?? [ 1103.378053][ T5913] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1103.384139][ T5929] rc_core: IR keymap rc-hauppauge not found [ 1103.395295][ T5929] Registered IR keymap rc-empty [ 1103.400484][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.430747][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.464967][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1103.486970][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input86 [ 1103.520194][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.545346][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.577351][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.604080][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.623816][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.644624][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.663825][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.683752][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.703713][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.724493][ T5929] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1103.746252][ T5929] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1103.756770][ T5929] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1103.839991][ T5913] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1103.941293][ T1166] usb 3-1: USB disconnect, device number 70 [ 1104.013107][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1104.021108][ T5913] usb 5-1: config 0 has an invalid interface number: 170 but max is 1 [ 1104.031818][ T5913] usb 5-1: config 0 has an invalid interface number: 242 but max is 1 [ 1104.046634][ T5913] usb 5-1: config 0 has no interface number 0 [ 1104.053330][ T5913] usb 5-1: config 0 has no interface number 1 [ 1104.060322][ T5913] usb 5-1: config 0 interface 170 has no altsetting 0 [ 1104.067673][ T5913] usb 5-1: config 0 interface 242 has no altsetting 0 [ 1104.077462][ T5913] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=51.d5 [ 1104.087366][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.098225][ T5913] usb 5-1: Product: syz [ 1104.102425][ T5913] usb 5-1: Manufacturer: syz [ 1104.107996][ T5913] usb 5-1: SerialNumber: syz [ 1104.116038][ T5913] usb 5-1: config 0 descriptor?? [ 1104.337899][ T5913] kvaser_usb 5-1:0.170: error -ENODEV: Cannot get usb endpoint(s) [ 1104.347565][ T1166] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1104.359454][ T5913] kvaser_usb 5-1:0.242: error -ENODEV: Cannot get usb endpoint(s) [ 1104.371293][ T5913] usb 5-1: USB disconnect, device number 86 [ 1104.503227][ T1166] usb 3-1: device descriptor read/64, error -71 [ 1104.743685][ T1166] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1104.893469][ T1166] usb 3-1: device descriptor read/64, error -71 [ 1105.005854][ T1166] usb usb3-port1: attempt power cycle [ 1105.293072][ T5913] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1105.353140][ T1166] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1105.393710][ T1166] usb 3-1: device descriptor read/8, error -71 [ 1105.437615][T14622] usb 7-1: USB disconnect, device number 86 [ 1105.467680][ T5913] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1105.486573][ T5913] usb 5-1: config 0 has no interface number 0 [ 1105.525034][ T5913] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 1105.548381][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.568145][ T5913] usb 5-1: Product: syz [ 1105.568183][ T5913] usb 5-1: Manufacturer: syz [ 1105.568201][ T5913] usb 5-1: SerialNumber: syz [ 1105.576723][ T5913] usb 5-1: config 0 descriptor?? [ 1105.577587][T21057] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1105.663075][ T1166] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1105.708820][T21069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3960'. [ 1105.719821][ T1166] usb 3-1: device descriptor read/8, error -71 [ 1105.731643][T21073] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3960'. [ 1105.853723][ T1166] usb usb3-port1: unable to enumerate USB device [ 1106.530067][T13168] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1107.057212][ T29] audit: type=1800 audit(1773815379.038:2650): pid=21086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3964" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=97213 res=0 errno=0 [ 1107.224305][ T5929] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1107.285754][T21092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1107.364485][ T5912] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1107.401673][ T5929] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1107.414885][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.424891][ T5929] usb 7-1: Product: syz [ 1107.429256][ T5929] usb 7-1: Manufacturer: syz [ 1107.436113][ T5929] usb 7-1: SerialNumber: syz [ 1107.449339][ T5929] usb 7-1: config 0 descriptor?? [ 1107.465337][ T5929] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1107.534140][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1107.546411][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.590335][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.624410][ T5912] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1107.646610][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.667918][ T5912] usb 1-1: config 0 descriptor?? [ 1107.681118][ T5912] hub 1-1:0.0: USB hub found [ 1107.846291][T21097] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1107.901805][ T5912] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1107.905990][T21099] netlink: 'syz.7.3970': attribute type 1 has an invalid length. [ 1107.975310][ T5929] gspca_stk1135: reg_w 0x2 err -110 [ 1108.084225][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.090951][ T5929] gspca_stk1135: Sensor write failed [ 1108.099203][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.116648][ T5929] gspca_stk1135: Sensor write failed [ 1108.122349][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.131095][ T5929] gspca_stk1135: Sensor read failed [ 1108.149026][ T5913] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1108.156830][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.156850][ T5929] gspca_stk1135: Sensor read failed [ 1108.156859][ T5929] gspca_stk1135: Detected sensor type unknown (0x0) [ 1108.156893][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.156904][ T5929] gspca_stk1135: Sensor read failed [ 1108.156933][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.156968][ T5929] gspca_stk1135: Sensor read failed [ 1108.156997][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.157009][ T5929] gspca_stk1135: Sensor write failed [ 1108.157037][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 1108.157048][ T5929] gspca_stk1135: Sensor write failed [ 1108.157155][ T5929] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 1108.365377][ T5912] hid-generic 0003:046D:C31C.005D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1108.687291][ T5913] usb 5-1: USB disconnect, device number 87 [ 1109.224551][T21087] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 1109.713084][ T5913] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1109.775608][T21123] geneve2: entered allmulticast mode [ 1109.894881][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1109.970136][T21123] kvm: pic: non byte write [ 1109.972524][ T1166] usb 1-1: USB disconnect, device number 94 [ 1109.980987][T21087] usbhid 1-1:0.0: reset_resume error -19 [ 1110.143121][ T5913] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1110.273938][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1110.401189][ T5913] usb usb5-port1: attempt power cycle [ 1110.763765][ T5879] usb 7-1: USB disconnect, device number 87 [ 1110.803051][ T5913] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1110.888767][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1110.922800][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1111.143248][ T5913] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1111.151708][ T5879] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1111.183820][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1111.204311][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1111.293503][ T5913] usb usb5-port1: unable to enumerate USB device [ 1111.323162][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1111.331150][ T5879] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 1111.342027][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.370937][ T5879] usb 3-1: config 0 has no interface number 0 [ 1111.374912][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1111.386794][ T5879] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1111.398945][ T5879] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1111.414926][ T5879] usb 3-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.429498][ T10] usb 1-1: config 0 has no interfaces? [ 1111.430230][ T5879] usb 3-1: config 0 interface 223 has no altsetting 0 [ 1111.441325][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1111.494410][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.509947][ T5879] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1111.516364][ T10] usb 1-1: config 0 descriptor?? [ 1111.533498][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.570357][ T5879] usb 3-1: Product: syz [ 1111.599724][ T5879] usb 3-1: Manufacturer: syz [ 1111.621707][ T5879] usb 3-1: SerialNumber: syz [ 1111.635632][ T5879] usb 3-1: config 0 descriptor?? [ 1111.716987][ T10] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1111.886128][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.915981][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1111.949966][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1112.001661][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1112.044606][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1112.246636][ T10] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1112.267723][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1112.277849][ T10] usb 7-1: Product: syz [ 1112.365805][ T10] usb 7-1: Manufacturer: syz [ 1112.379955][ T5879] usb 1-1: USB disconnect, device number 95 [ 1112.411280][ T10] usb 7-1: SerialNumber: syz [ 1112.459965][ T10] usb 7-1: config 0 descriptor?? [ 1112.650070][ T5912] usb 3-1: USB disconnect, device number 75 [ 1112.721816][ T10] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1112.730434][ T10] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1112.964443][ T10] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1112.972145][ T10] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1112.986652][ T10] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1113.172429][ T10] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1113.283145][T21147] tipc: Enabled bearer , priority 0 [ 1113.326010][T21147] tipc: Resetting bearer [ 1113.450398][T21146] tipc: Disabling bearer [ 1114.228625][ T10] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1114.250553][ T10] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1114.306291][ T10] usb 7-1: USB disconnect, device number 88 [ 1114.353691][T21157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1114.360259][T21157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1114.436866][T21157] vhci_hcd vhci_hcd.0: Device attached [ 1114.724316][ T5879] usb 34-1: SetAddress Request (2) to port 0 [ 1114.730549][ T5879] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1114.743887][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1114.783112][ T5826] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1114.970906][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1115.019019][T21178] tipc: Enabled bearer , priority 0 [ 1115.038614][T21178] ip6t_srh: unknown srh invflags 4000 [ 1115.125649][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 1115.181331][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1115.204227][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.215506][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.228122][ T5826] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1115.237752][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1115.238238][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.267988][ T5826] usb 5-1: config 0 descriptor?? [ 1115.280582][ T5826] hub 5-1:0.0: USB hub found [ 1115.337780][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.350705][ T10] usb 3-1: Product: syz [ 1115.360751][ T10] usb 3-1: Manufacturer: syz [ 1115.370954][ T10] usb 3-1: SerialNumber: syz [ 1115.445094][ T10] usb 3-1: config 0 descriptor?? [ 1115.488167][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1115.488399][ T5826] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1115.684377][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1115.894791][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1115.901745][ T5826] hid-generic 0003:046D:C31C.005E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1116.048580][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.056043][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.317589][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1116.349909][ T10] em28xx 3-1:0.0: board has no eeprom [ 1116.428170][T21178] tipc: Disabling bearer [ 1116.467487][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1116.487747][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 1116.498079][ T5912] em28xx 3-1:0.0: Binding DVB extension [ 1116.532048][ T10] usb 3-1: USB disconnect, device number 76 [ 1116.551720][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 1116.654820][ T5912] em28xx 3-1:0.0: Registering input extension [ 1116.661399][ T10] em28xx 3-1:0.0: Closing input extension [ 1116.768713][T21161] vhci_hcd: connection reset by peer [ 1116.872365][T17632] vhci_hcd vhci_hcd.0: stop threads [ 1116.884401][T17632] vhci_hcd vhci_hcd.0: release socket [ 1116.911189][T17632] vhci_hcd vhci_hcd.0: disconnect device [ 1116.924394][T21169] usb 5-1: reset high-speed USB device number 92 using dummy_hcd [ 1116.926375][ T10] em28xx 3-1:0.0: Freeing device [ 1117.029279][T21204] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 1117.189480][T21199] tipc: Enabled bearer , priority 0 [ 1117.236951][T21208] bond2: (slave geneve3): making interface the new active one [ 1117.260312][T21208] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1117.274782][T21202] syzkaller0: entered promiscuous mode [ 1117.280378][T21202] syzkaller0: entered allmulticast mode [ 1117.293932][T21169] usbhid 5-1:0.0: reset_resume error -71 [ 1117.301192][ T5826] usb 5-1: USB disconnect, device number 92 [ 1117.326026][T17613] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1117.364760][T17613] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1117.376541][T21199] tipc: Resetting bearer [ 1117.417471][T21202] tipc: Enabled bearer , priority 0 [ 1117.433438][T17613] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1117.475088][T21197] tipc: Disabling bearer [ 1117.494894][T21200] tipc: Resetting bearer [ 1117.534122][T21200] tipc: Disabling bearer [ 1117.566077][T17613] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1118.684165][ T10] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1118.855304][ T5929] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1118.924408][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1119.090033][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1119.112252][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1119.200487][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.236924][ T10] usb 5-1: config 0 descriptor?? [ 1119.291143][ T10] as10x_usb: device has been detected [ 1119.321586][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1119.365278][ T10] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1119.405520][ T10] as10x_usb: error during firmware upload part1 [ 1119.426926][ T10] Registered device nBox DVB-T Dongle [ 1119.686011][ T5826] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1119.723201][ T5913] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1119.804616][ T5879] usb 34-1: device descriptor read/8, error -110 [ 1119.917121][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1119.924996][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1119.947703][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1119.970321][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1119.981992][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1120.005046][ T5826] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1120.021655][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1120.031260][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.039764][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.058589][ T5826] usb 1-1: Product: syz [ 1120.063534][ T5913] usb 3-1: Product: syz [ 1120.069853][ T5826] usb 1-1: Manufacturer: syz [ 1120.076647][ T5913] usb 3-1: Manufacturer: syz [ 1120.082838][ T5826] usb 1-1: SerialNumber: syz [ 1120.091498][ T5913] usb 3-1: SerialNumber: syz [ 1120.102545][ T5826] usb 1-1: config 0 descriptor?? [ 1120.112041][ T5913] usb 3-1: config 0 descriptor?? [ 1120.122120][T21249] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1120.329400][ T5879] usb usb34-port1: attempt power cycle [ 1120.345855][ T5913] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1120.356096][ T5826] powermate: unknown product id 0240 [ 1120.363666][ T5826] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1120.681497][ T5826] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input88 [ 1120.717821][ T5913] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1120.860158][ C1] powermate: config urb returned -71 [ 1120.867145][ C1] powermate: config urb returned -71 [ 1120.874876][ C1] powermate: config urb returned -71 [ 1120.880846][ C1] powermate: config urb returned -71 [ 1120.935199][ T5879] usb usb34-port1: unable to enumerate USB device [ 1120.944886][ T5826] usb 1-1: USB disconnect, device number 96 [ 1120.950894][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1121.173888][ T5913] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1121.194335][ T5913] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1121.209877][ T5913] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1121.257357][ T5913] em28xx 3-1:0.0: No AC97 audio processor [ 1121.539606][T21265] input: syz0 as /devices/virtual/input/input89 [ 1121.617737][ T5929] usb 3-1: USB disconnect, device number 77 [ 1121.640520][ T5929] em28xx 3-1:0.0: Disconnecting em28xx [ 1121.669634][ T5929] em28xx 3-1:0.0: Freeing device [ 1121.975233][T21270] tipc: Enabled bearer , priority 0 [ 1121.988666][T21270] tipc: Resetting bearer [ 1122.200504][ T10] usb 5-1: USB disconnect, device number 93 [ 1122.218018][T21269] tipc: Disabling bearer [ 1122.270668][ T10] Unregistered device nBox DVB-T Dongle [ 1122.276244][ T10] as10x_usb: device has been disconnected [ 1122.894554][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1123.031379][T21290] xt_bpf: check failed: parse error [ 1123.066057][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1123.146958][ T10] usb 3-1: config 104 has an invalid interface number: 233 but max is 0 [ 1123.185505][ T10] usb 3-1: config 104 has no interface number 0 [ 1123.195260][ T10] usb 3-1: config 104 interface 233 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1123.335251][ T10] usb 3-1: config 104 interface 233 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1123.481862][ T10] usb 3-1: config 104 interface 233 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1123.482854][ T5826] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 1123.559579][ T5826] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1123.720438][ T29] audit: type=1326 audit(1773815395.668:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1123.736203][ T10] usb 3-1: config 104 interface 233 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1123.954821][ T10] usb 3-1: config 104 interface 233 has no altsetting 0 [ 1124.027615][ T10] usb 3-1: Dual-Role OTG device on HNP port [ 1124.046473][ T29] audit: type=1326 audit(1773815395.668:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.070641][ T10] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a28, bcdDevice=f1.88 [ 1124.099173][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.115248][ T10] usb 3-1: Product: 녍甪﫺产鳶蠋ꦺ㨍⌙ꋛ㌌ꅣ荹矗즍죕恝鷠⽿봇뉺⪪忖易鸉䭟枭讛켡ˍⷒ嗥椇洍 [ 1124.180506][ T29] audit: type=1326 audit(1773815395.668:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.205322][ T10] usb 3-1: Manufacturer: 阮訷㍳ડ芐䈔灚ნ䈺₮ď䅗ᑟ [ 1124.214774][ T10] usb 3-1: SerialNumber: љ [ 1124.253833][ T29] audit: type=1326 audit(1773815395.668:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.343037][ T29] audit: type=1326 audit(1773815395.668:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.354522][ T5929] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1124.433911][ T29] audit: type=1326 audit(1773815395.668:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.525872][T21301] netlink: 'syz.7.4021': attribute type 3 has an invalid length. [ 1124.566939][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.656467][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1124.671182][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1124.697689][ T29] audit: type=1326 audit(1773815395.668:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.821335][ T29] audit: type=1326 audit(1773815395.668:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.887611][ T29] audit: type=1326 audit(1773815395.668:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1124.938388][ T5929] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1125.001965][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1125.017877][ T5929] usb 1-1: SerialNumber: syz [ 1125.022623][ T29] audit: type=1326 audit(1773815395.668:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.7.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27e39c799 code=0x7ffc0000 [ 1125.357648][ T5929] usb 1-1: 0:2 : does not exist [ 1125.712285][T21316] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1125.768482][ T5929] usb 1-1: USB disconnect, device number 97 [ 1126.146812][ T10] usb 3-1: USB disconnect, device number 78 [ 1126.335574][T21322] syzkaller0: entered promiscuous mode [ 1126.341210][T21322] syzkaller0: entered allmulticast mode [ 1126.564332][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1126.713577][ T10] usb 3-1: device descriptor read/64, error -71 [ 1126.850982][T21334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4032'. [ 1126.954503][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1127.093960][ T10] usb 3-1: device descriptor read/64, error -71 [ 1127.204233][ T10] usb usb3-port1: attempt power cycle [ 1127.229684][T21338] netlink: 'syz.6.4033': attribute type 10 has an invalid length. [ 1127.286280][T21338] veth0_vlan: left promiscuous mode [ 1127.319924][T21338] veth0_vlan: entered promiscuous mode [ 1127.375171][T21338] team0: Device veth0_vlan failed to register rx_handler [ 1127.410089][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1127.544232][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1127.585119][ T10] usb 3-1: device descriptor read/8, error -71 [ 1127.823640][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1127.833333][ T5826] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1127.843206][T14622] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1127.855103][ T10] usb 3-1: device descriptor read/8, error -71 [ 1127.965654][ T10] usb usb3-port1: unable to enumerate USB device [ 1127.973341][ T5826] usb 7-1: device descriptor read/64, error -71 [ 1128.015658][T14622] usb 1-1: config 0 has no interfaces? [ 1128.021582][T14622] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1128.039531][T14622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.058958][T14622] usb 1-1: config 0 descriptor?? [ 1128.234018][ T5826] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1128.299631][T17257] usb 1-1: USB disconnect, device number 98 [ 1128.356694][T21365] openvswitch: netlink: Unknown key attributes 1 [ 1128.369204][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1128.378614][ T5826] usb 7-1: device descriptor read/64, error -71 [ 1128.493495][ T5826] usb usb7-port1: attempt power cycle [ 1128.524477][ T10] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1128.685757][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1128.695199][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 1128.706399][ T10] usb 5-1: config 15 has an invalid interface number: 74 but max is 1 [ 1128.715931][ T10] usb 5-1: config 15 has an invalid interface number: 150 but max is 1 [ 1128.725432][ T10] usb 5-1: config 15 has no interface number 0 [ 1128.731653][ T10] usb 5-1: config 15 has no interface number 1 [ 1128.739120][ T10] usb 5-1: config 15 interface 74 has no altsetting 0 [ 1128.747234][ T10] usb 5-1: config 15 interface 150 has no altsetting 0 [ 1128.757150][ T10] usb 5-1: New USB device found, idVendor=10b8, idProduct=2383, bcdDevice=9c.5f [ 1128.767339][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.773763][T14622] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1128.777892][ T10] usb 5-1: Product: syz [ 1128.789175][ T10] usb 5-1: Manufacturer: syz [ 1128.795569][ T10] usb 5-1: SerialNumber: syz [ 1128.853081][ T5826] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1128.873734][ T5826] usb 7-1: device descriptor read/8, error -71 [ 1128.948665][T14622] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1128.958386][T14622] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1128.969743][T14622] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1128.988706][T14622] usb 1-1: string descriptor 0 read error: -22 [ 1128.996597][T14622] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1129.013803][T14622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.037356][T21364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.053100][T21364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.107666][ T10] dvb-usb: found a 'DiBcom STK9090M reference design' in cold state, will try to load a firmware [ 1129.136039][ T5826] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1129.161453][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1129.172148][ T10] dib0700: firmware download failed at 7 with -22 [ 1129.180680][ T5826] usb 7-1: device descriptor read/8, error -71 [ 1129.188922][ T10] dvb-usb: found a 'DiBcom STK9090M reference design' in cold state, will try to load a firmware [ 1129.205031][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1129.228924][ T10] dib0700: firmware download failed at 7 with -22 [ 1129.229112][T14622] usb 1-1: Can't get UAC3 power state for id 10 [ 1129.279682][ T10] usb 5-1: USB disconnect, device number 94 [ 1129.297231][ T5826] usb usb7-port1: unable to enumerate USB device [ 1129.434739][T21373] tipc: Enabled bearer , priority 0 [ 1129.469796][T21375] vivid-004: disconnect [ 1129.708038][T21379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.954999][T14622] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1130.140927][T21373] tipc: Disabling bearer [ 1130.229565][T21374] vivid-004: reconnect [ 1132.194405][T14622] usb 1-1: USB disconnect, device number 99 [ 1133.483580][T17258] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1133.639549][T17258] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1133.680186][T17258] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.717178][T17258] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1133.744281][T17258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.781009][T17258] usb 5-1: Product: syz [ 1133.800915][T17258] usb 5-1: Manufacturer: syz [ 1133.828667][T17258] usb 5-1: SerialNumber: syz [ 1133.950061][T21416] syzkaller0: entered promiscuous mode [ 1133.966201][T21416] syzkaller0: entered allmulticast mode [ 1134.135203][T21414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4055'. [ 1134.168468][T21419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4055'. [ 1134.327215][T21414] team0 (unregistering): Port device team_slave_0 removed [ 1134.384359][T21414] team0 (unregistering): Port device team_slave_1 removed [ 1134.992404][T21435] tipc: Enabled bearer , priority 0 [ 1135.009251][T21435] ip6t_srh: unknown srh invflags 4000 [ 1135.019054][T17258] usb 5-1: reset high-speed USB device number 95 using dummy_hcd [ 1135.046647][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1135.246581][T17258] usb 5-1: device descriptor read/64, error -71 [ 1135.285697][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1135.534295][T17258] usb 5-1: reset high-speed USB device number 95 using dummy_hcd [ 1135.751021][T17258] usb 5-1: device descriptor read/64, error -71 [ 1135.993900][T17258] usb 5-1: reset high-speed USB device number 95 using dummy_hcd [ 1136.045298][T17258] usb 5-1: device descriptor read/8, error -71 [ 1136.126085][T21435] tipc: Disabling bearer [ 1136.284074][T17258] usb 5-1: reset high-speed USB device number 95 using dummy_hcd [ 1136.405154][T17258] usb 5-1: device descriptor read/8, error -71 [ 1136.524792][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1136.531254][T17258] usb 5-1: USB disconnect, device number 95 [ 1136.696040][T17258] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1136.833908][T17258] usb 5-1: device descriptor read/64, error -71 [ 1137.075113][T17258] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1137.229349][T21470] syzkaller0: entered promiscuous mode [ 1137.234268][T17258] usb 5-1: device descriptor read/64, error -71 [ 1137.239375][T21470] syzkaller0: entered allmulticast mode [ 1137.335406][T21471] syzkaller0: entered promiscuous mode [ 1137.341826][T21471] syzkaller0: entered allmulticast mode [ 1137.344226][T17258] usb usb5-port1: attempt power cycle [ 1137.716042][T17258] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1137.754119][T17258] usb 5-1: device descriptor read/8, error -71 [ 1139.109542][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1139.447782][T13726] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.599533][T13726] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.790996][T13726] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.945448][T13726] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.718663][T21539] fuse: Bad value for 'user_id' [ 1140.734081][T21539] fuse: Bad value for 'user_id' [ 1140.745407][T21539] netlink: 'syz.4.4085': attribute type 15 has an invalid length. [ 1140.823148][ T5826] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1140.983035][ T5826] usb 1-1: device descriptor read/64, error -71 [ 1141.274743][ T5826] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1141.481288][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1141.492627][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1141.500633][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1141.508825][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1141.514049][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1141.516298][ T5826] usb 1-1: device descriptor read/64, error -71 [ 1141.553667][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1141.687759][ T5826] usb usb1-port1: attempt power cycle [ 1141.714084][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1141.721071][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1141.735723][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.813697][ T10] usb 3-1: config 0 descriptor?? [ 1141.934231][ T10] as10x_usb: device has been detected [ 1141.961746][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1142.036923][ T10] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1142.044222][ T5826] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1142.074466][ T5826] usb 1-1: device descriptor read/8, error -71 [ 1142.102371][ T10] as10x_usb: error during firmware upload part1 [ 1142.115802][ T10] Registered device nBox DVB-T Dongle [ 1142.353406][ T5826] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1142.396090][ T10] usb 3-1: USB disconnect, device number 83 [ 1142.407355][ T5826] usb 1-1: device descriptor read/8, error -71 [ 1142.430218][ T10] Unregistered device nBox DVB-T Dongle [ 1142.485739][ T10] as10x_usb: device has been disconnected [ 1142.533515][ T5826] usb usb1-port1: unable to enumerate USB device [ 1142.671445][T13726] bond0 (unregistering): Released all slaves [ 1142.701085][T13726] bond1 (unregistering): Released all slaves [ 1142.728036][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4086'. [ 1142.855206][T13726] tipc: Left network mode [ 1142.913373][ T5913] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1143.072072][T21570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.084968][ T5913] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1143.108839][ T5913] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1143.120483][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1143.130439][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.146276][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.176149][ T5913] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1143.203277][ T5913] usb 5-1: no configuration chosen from 1 choice [ 1143.595656][T21554] chnl_net:caif_netlink_parms(): no params data found [ 1143.644101][T13168] Bluetooth: hci2: command tx timeout [ 1143.661357][T21584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1144.368662][T13726] hsr_slave_0: left promiscuous mode [ 1144.405046][T13726] hsr_slave_1: left promiscuous mode [ 1144.488737][T13726] veth1_macvtap: left promiscuous mode [ 1144.511540][T13726] veth0_macvtap: left promiscuous mode [ 1144.591623][T13726] veth1_vlan: left promiscuous mode [ 1145.453058][ T5826] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1145.609379][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 1145.661889][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1145.708666][ T5826] usb 3-1: config 17 has an invalid interface number: 9 but max is 1 [ 1145.735017][T13168] Bluetooth: hci2: command tx timeout [ 1145.793004][ T5826] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.811498][ T5913] usb 5-1: USB disconnect, device number 100 [ 1145.835469][ T5826] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1145.856598][T21554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.876712][ T5826] usb 3-1: config 17 has no interface number 0 [ 1145.891622][T21554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.905552][ T5826] usb 3-1: config 17 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1145.919109][T21554] bridge_slave_0: entered allmulticast mode [ 1145.931226][T21554] bridge_slave_0: entered promiscuous mode [ 1145.937774][ T5826] usb 3-1: config 17 interface 9 has no altsetting 0 [ 1145.950261][T21554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.973340][ T5826] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1145.993202][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.003422][T21554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.079027][T21554] bridge_slave_1: entered allmulticast mode [ 1146.089091][ T5826] usb 3-1: Product: syz [ 1146.099272][ T5826] usb 3-1: Manufacturer: syz [ 1146.110572][T21554] bridge_slave_1: entered promiscuous mode [ 1146.116940][ T5826] usb 3-1: SerialNumber: syz [ 1146.409083][ T5826] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1146.443065][T21554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.481995][T21554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.561894][T21632] syzkaller0: entered promiscuous mode [ 1146.573971][T21632] syzkaller0: entered allmulticast mode [ 1146.611386][ T5826] snd-usb-audio 3-1:17.9: probe with driver snd-usb-audio failed with error -2 [ 1146.638590][ T5826] usb 3-1: USB disconnect, device number 84 [ 1146.672296][T17220] udevd[17220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.9/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.886299][T21632] tipc: Enabled bearer , priority 0 [ 1146.897467][T21631] tipc: Resetting bearer [ 1146.930424][T21631] tipc: Disabling bearer [ 1146.943918][T21554] team0: Port device team_slave_0 added [ 1146.954596][T21554] team0: Port device team_slave_1 added [ 1147.035531][T13726] IPVS: stop unused estimator thread 0... [ 1147.150665][T21554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.182498][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.292332][T21554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.337705][T21554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.355594][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.401514][T21554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.630284][T21554] hsr_slave_0: entered promiscuous mode [ 1147.637336][T21554] hsr_slave_1: entered promiscuous mode [ 1147.673903][T21554] debugfs: 'hsr0' already exists in 'hsr' [ 1147.695203][T21554] Cannot create hsr debugfs directory [ 1147.803195][T13168] Bluetooth: hci2: command tx timeout [ 1148.103891][ T5886] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1148.113058][ T5826] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1148.243876][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1148.299141][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 1148.314064][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.332780][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.354758][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1148.371498][T21554] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1148.380599][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.396781][T21554] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1148.423725][ T5826] usb 3-1: config 0 descriptor?? [ 1148.447815][T21554] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1148.459513][ T5826] hub 3-1:0.0: USB hub found [ 1148.484074][ T5886] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1148.500346][T21554] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1148.624833][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1148.665244][ T5826] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1148.745605][ T5886] usb usb1-port1: attempt power cycle [ 1148.914246][T21698] libceph: resolve '0..' (ret=-3): failed [ 1149.164478][ T5886] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1149.180728][T21554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.195056][ T5886] usb 1-1: device descriptor read/8, error -71 [ 1149.195165][ T5826] hid-generic 0003:046D:C31C.0060: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1149.239519][T21554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.288486][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.295753][T13726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.424114][T17624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.431269][T17624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.611542][ T5886] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1149.668060][ T5886] usb 1-1: device descriptor read/8, error -71 [ 1149.747289][T21554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.824776][ T5886] usb usb1-port1: unable to enumerate USB device [ 1149.883824][T13168] Bluetooth: hci2: command tx timeout [ 1149.977367][T21554] veth0_vlan: entered promiscuous mode [ 1150.057081][T21554] veth1_vlan: entered promiscuous mode [ 1150.174700][T21669] usb 3-1: reset high-speed USB device number 85 using dummy_hcd [ 1150.220285][T21554] veth0_macvtap: entered promiscuous mode [ 1150.238974][T21715] syzkaller0: entered promiscuous mode [ 1150.246910][T21715] syzkaller0: entered allmulticast mode [ 1150.268608][T21554] veth1_macvtap: entered promiscuous mode [ 1150.317547][T21715] tipc: Enabled bearer , priority 0 [ 1150.347336][T21714] tipc: Resetting bearer [ 1150.398766][T21714] tipc: Disabling bearer [ 1150.428661][T21554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.461358][T21554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.522045][T17609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.563633][T17609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.593934][T17609] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.602007][ T10] usb 3-1: USB disconnect, device number 85 [ 1150.603811][T21669] usbhid 3-1:0.0: reset_resume error -19 [ 1150.619468][T17609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.801049][T17609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.818138][T17609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.891917][T17609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.929584][T17609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.143259][ T5913] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1151.332565][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 1151.374221][ T10] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1151.433558][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1151.484373][ T5913] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1151.593825][ T5886] usb 9-1: Using ep0 maxpacket: 16 [ 1151.606179][ T5886] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1151.617385][ T5886] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1151.641373][ T5886] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.653463][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 1151.654342][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.669508][ T5886] usb 9-1: Product: syz [ 1151.677070][ T5886] usb 9-1: Manufacturer: 랷㲤ԅ鋖ﵵ湚뙿議曗쀒མ섨刮줪䦂﹏㈱璪禮蔐੒ᮊڎȘ䉟ꏃ錾ڳꇈž䤪㵵镾㴆섒ཫ팚ﺚ骭㚫햧䈞⏣噱આ삧믯辍뿓ệ∇࿘턋⭀뀃㘉⧝⹪Ѩ蕲ع凑鋌ᕫᰝ쥴쩼ᕷ뎪Ԏ覵衩葇者扫쌨鶪⊻ [ 1151.706784][ T5886] usb 9-1: SerialNumber: syz [ 1151.708693][ T5913] usb usb5-port1: attempt power cycle [ 1152.006499][ T5886] cdc_ncm 9-1:1.0: bind() failure [ 1152.073363][ T5913] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1152.104560][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 1152.142231][ T5886] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1152.155665][ T5886] cdc_ncm 9-1:1.1: bind() failure [ 1152.174073][ T5886] usb 9-1: USB disconnect, device number 2 [ 1152.209032][T21758] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 1152.273983][ T5913] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 1152.313827][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 1152.321512][ T5913] usb usb5-port1: unable to enumerate USB device [ 1153.513070][T21778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1153.574791][T21778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1153.628192][T21777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1153.680728][T21777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1154.927539][T21805] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1154.953552][ T5913] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1155.126936][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 1155.137331][ T5913] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1155.156571][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.175967][ T5913] usb 9-1: Product: syz [ 1155.185789][ T5913] usb 9-1: Manufacturer: syz [ 1155.253642][ T5913] usb 9-1: SerialNumber: syz [ 1155.287952][ T5913] usb 9-1: config 0 descriptor?? [ 1155.508642][ T5913] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1155.649461][ T5913] usb write operation failed. (-71) [ 1155.681539][ T5913] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1155.730152][ T5913] dvbdev: DVB: registering new adapter (Terratec H7) [ 1155.749931][ T5913] usb 9-1: media controller created [ 1155.761694][ T5913] usb read operation failed. (-71) [ 1155.773368][ T5913] usb write operation failed. (-71) [ 1155.799841][ T5913] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1155.852080][ T5913] usb 9-1: USB disconnect, device number 3 [ 1156.623396][ T5913] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1156.779116][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1156.779131][ T29] audit: type=1326 audit(1773815428.758:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21829 comm="syz.2.4142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40fb9c799 code=0x0 [ 1156.817561][ T5913] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 1156.827095][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.856711][ T5913] usb 1-1: config 0 has no interface number 0 [ 1156.883226][ T5913] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1156.913160][ T5913] usb 1-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.992636][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1157.001721][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.063066][ T5913] usb 1-1: Product: syz [ 1157.067291][ T5913] usb 1-1: Manufacturer: syz [ 1157.071912][ T5913] usb 1-1: SerialNumber: syz [ 1157.125857][ T5913] usb 1-1: config 0 descriptor?? [ 1157.131568][T21824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1157.186360][ T5913] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 1157.220577][ T5913] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 1158.029057][T21758] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1158.213999][T21758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.243797][T21758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.255439][ T5913] usb 1-1: USB disconnect, device number 108 [ 1158.264697][T21758] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1158.305670][T21758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.337468][T21758] usb 9-1: config 0 descriptor?? [ 1158.635703][ T5913] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1158.673064][T14622] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1158.803039][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1158.817703][ T5913] usb 5-1: config 0 has no interfaces? [ 1158.833728][ T5913] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1158.843873][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.865754][ T5913] usb 5-1: config 0 descriptor?? [ 1158.888142][T14622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.909375][T14622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.922085][T14622] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1158.932106][T14622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.944137][T14622] usb 3-1: config 0 descriptor?? [ 1159.185427][ T5913] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1159.354758][T21868] FAULT_INJECTION: forcing a failure. [ 1159.354758][T21868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.380542][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 1159.398967][T21868] CPU: 1 UID: 0 PID: 21868 Comm: syz.7.4152 Tainted: G L syzkaller #0 PREEMPT(full) [ 1159.399000][T21868] Tainted: [L]=SOFTLOCKUP [ 1159.399006][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1159.399018][T21868] Call Trace: [ 1159.399026][T21868] [ 1159.399035][T21868] dump_stack_lvl+0xe8/0x150 [ 1159.399072][T21868] should_fail_ex+0x412/0x560 [ 1159.399103][T21868] _copy_from_user+0x2d/0xb0 [ 1159.399125][T21868] do_sys_poll+0x2a9/0x1120 [ 1159.399165][T21868] ? __pfx_do_sys_poll+0x10/0x10 [ 1159.399187][T21868] ? __lock_acquire+0x6b5/0x2cf0 [ 1159.399213][T21868] ? is_bpf_text_address+0x26/0x2b0 [ 1159.399322][T21868] ? set_user_sigmask+0xcd/0x1c0 [ 1159.399347][T21868] ? __pfx_set_user_sigmask+0x10/0x10 [ 1159.399381][T21868] __se_sys_ppoll+0x209/0x2b0 [ 1159.399406][T21868] ? fput+0xa0/0xd0 [ 1159.399433][T21868] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1159.399457][T21868] ? __pfx_ksys_write+0x10/0x10 [ 1159.399483][T21868] ? __x64_sys_ppoll+0x20/0xc0 [ 1159.399510][T21868] do_syscall_64+0x14d/0xf80 [ 1159.399530][T21868] ? trace_irq_disable+0x3b/0x150 [ 1159.399556][T21868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.399574][T21868] ? clear_bhb_loop+0x40/0x90 [ 1159.399596][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.399614][T21868] RIP: 0033:0x7fc27e39c799 [ 1159.399632][T21868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.399648][T21868] RSP: 002b:00007fc27f2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1159.399669][T21868] RAX: ffffffffffffffda RBX: 00007fc27e615fa0 RCX: 00007fc27e39c799 [ 1159.399682][T21868] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1159.399695][T21868] RBP: 00007fc27f2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.399706][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.399716][T21868] R13: 00007fc27e616038 R14: 00007fc27e615fa0 R15: 00007fc27e73fa48 [ 1159.399745][T21868] [ 1159.621848][T14622] usbhid 3-1:0.0: can't add hid device: -71 [ 1159.628529][T14622] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1159.641838][T14622] usb 3-1: USB disconnect, device number 86 [ 1159.651660][ T5913] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1159.662601][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.670622][ T5913] usb 1-1: Product: syz [ 1159.675285][ T5913] usb 1-1: Manufacturer: syz [ 1159.679913][ T5913] usb 1-1: SerialNumber: syz [ 1159.689829][ T5913] usb 1-1: config 0 descriptor?? [ 1159.698110][ T5879] usb 5-1: USB disconnect, device number 105 [ 1159.906767][ T5913] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1161.379919][T21758] hid-led 0003:27B8:01ED.0061: probe with driver hid-led failed with error -71 [ 1161.527792][T21758] usb 9-1: USB disconnect, device number 4 [ 1161.785153][T21893] netlink: 'syz.8.4157': attribute type 39 has an invalid length. [ 1162.020654][T21893] kvm: pic: non byte write [ 1162.122733][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1162.296793][ T5913] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1162.694926][ T5886] usb 1-1: USB disconnect, device number 109 [ 1162.895195][T21917] tipc: Started in network mode [ 1162.900080][T21917] tipc: Node identity 2e05bb5cc43e, cluster identity 4711 [ 1162.953561][T21917] tipc: Enabled bearer , priority 0 [ 1162.986825][T21917] syzkaller0: entered promiscuous mode [ 1162.992341][T21917] syzkaller0: entered allmulticast mode [ 1163.121039][T21926] netlink: 'syz.0.4164': attribute type 33 has an invalid length. [ 1163.154474][T21926] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1163.230886][T21927] tipc: Resetting bearer [ 1163.244077][T21926] `: renamed from veth0_macvtap [ 1163.257852][T21926] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1163.289805][T21929] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1163.297952][T21929] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1163.309852][T21929] veth0_to_bridge: entered allmulticast mode [ 1163.354364][T21929] veth0_to_bridge: entered promiscuous mode [ 1163.374706][T21929] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.401468][T21929] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1163.409193][T21929] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1163.421163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.433623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.446066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.458295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.470537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.483029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.495300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.507686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.519959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.733983][ T5886] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1164.222107][T21916] tipc: Resetting bearer [ 1164.405415][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1164.461288][ T5886] usb 5-1: config 0 has no interfaces? [ 1164.528955][ T5886] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1164.578910][T21916] tipc: Disabling bearer [ 1164.591879][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.622350][ T5886] usb 5-1: config 0 descriptor?? [ 1168.262783][ C1] net_ratelimit: 19429 callbacks suppressed [ 1168.262807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.281187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.293570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.307616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.319863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.332059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.344352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.356658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.368864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.381145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.554444][ T1166] tipc: Node number set to 3929783132 [ 1173.277069][ C1] net_ratelimit: 19895 callbacks suppressed [ 1173.277102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.295699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.308200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.320466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.332898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.345192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.357707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.369963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.382197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.394666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.536641][T21758] usb 5-1: USB disconnect, device number 106 [ 1174.344845][ C0] sched: DL replenish lagged too much [ 1177.495283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.501634][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.282626][ C1] net_ratelimit: 20361 callbacks suppressed [ 1178.282651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.282736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1178.288876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.301113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1178.313676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.325111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1178.337078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.348996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1178.360881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.373001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1178.657772][T21970] netlink: 'syz.0.4172': attribute type 10 has an invalid length. [ 1183.292622][ C1] net_ratelimit: 16488 callbacks suppressed [ 1183.292646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.292717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1183.298947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.311970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1183.322875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.335934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1183.347060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.359943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1183.370887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.383890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1188.302517][ C1] net_ratelimit: 15589 callbacks suppressed [ 1188.302530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1188.302541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.302951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.309812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1188.320922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.333858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1188.345014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.357982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1188.368992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.382068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1193.312539][ C1] net_ratelimit: 15184 callbacks suppressed [ 1193.312566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.313791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1193.318824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.331848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1193.342899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.355708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1193.366793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.379621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1193.390762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.403671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1198.322503][ C1] net_ratelimit: 14617 callbacks suppressed [ 1198.322527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.322672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1198.328905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.341717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1198.353917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.365552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1198.376869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.389667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1198.400892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.413563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1203.332581][ C1] net_ratelimit: 14688 callbacks suppressed [ 1203.332606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.333408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1203.339133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.351960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1203.363065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.376045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1203.387173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.399956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1203.411220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.424036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1208.342526][ C1] net_ratelimit: 14828 callbacks suppressed [ 1208.342551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.343219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1208.348965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.361610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1208.372768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.385626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1208.396824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.409602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1208.420728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.433788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.352609][ C0] net_ratelimit: 15320 callbacks suppressed [ 1213.352633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.352777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.360044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.371011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.383354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.395278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.408270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.419118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.431453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1213.443243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.362953][ C1] net_ratelimit: 15064 callbacks suppressed [ 1218.362977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.363047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1218.369387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.381923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1218.393579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.406714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1218.417574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.431445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1218.441615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.454938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.372789][ C0] net_ratelimit: 12834 callbacks suppressed [ 1223.372813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.373052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.379404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.391210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.404461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.415221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.427450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.439241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.452270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1223.463066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.382667][ C1] net_ratelimit: 13796 callbacks suppressed [ 1228.382692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.383197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1228.389112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.402314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1228.413085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.425309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1228.436870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.450200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1228.460912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.473248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1233.392741][ C1] net_ratelimit: 15707 callbacks suppressed [ 1233.392766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.392814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1233.399035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.411365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1233.423015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.436134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1233.446817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.459286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1233.470920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.485939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.402481][ C0] net_ratelimit: 15936 callbacks suppressed [ 1238.402505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.402599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.409966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.420776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.433167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.445264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.458089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.469056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.481286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1238.492917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.412618][ C1] net_ratelimit: 15875 callbacks suppressed [ 1243.412641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.412817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1243.418947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.432235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1243.442894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.455367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1243.466939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.480066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1243.490715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.503289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1243.785876][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.804665][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.422776][ C1] net_ratelimit: 15778 callbacks suppressed [ 1248.422800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.424227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1248.429204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.441687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1248.453697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.467157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1248.477555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.490017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1248.501476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.524062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1253.432551][ C1] net_ratelimit: 15955 callbacks suppressed [ 1253.432575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.434660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1253.438846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.451433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1253.463035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.476332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1253.487018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.499454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1253.511079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.524619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.442577][ C0] net_ratelimit: 16994 callbacks suppressed [ 1258.442602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.442946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.449336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.461018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.474249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.484731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.497193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.509201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.522478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1258.533135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.452731][ C1] net_ratelimit: 16889 callbacks suppressed [ 1263.452756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.452909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1263.459020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.472580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1263.483496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.495646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1263.507202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.520537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1263.531490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.543993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1268.462527][ C1] net_ratelimit: 16700 callbacks suppressed [ 1268.462559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.462616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1268.468970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.483956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1268.493056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.506580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1268.517396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.529902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1268.541617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.554808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1273.472642][ C1] net_ratelimit: 16009 callbacks suppressed [ 1273.472667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.472731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1273.478964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.492345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1273.502938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.516281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1273.526903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.540544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1273.550963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.574813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1278.482541][ C1] net_ratelimit: 16474 callbacks suppressed [ 1278.482566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.485422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1278.488852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.501341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1278.512910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.526006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1278.537037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.550563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1278.561138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.573605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1283.492475][ C1] net_ratelimit: 16572 callbacks suppressed [ 1283.492498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.494298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1283.498746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.511332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1283.522812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.535626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1283.546988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.560346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1283.570807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.583421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1288.502729][ C1] net_ratelimit: 16604 callbacks suppressed [ 1288.502753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.503217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1288.509495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.521858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1288.532947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.546361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1288.557010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.569416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1288.580855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.593957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1293.512746][ C1] net_ratelimit: 16796 callbacks suppressed [ 1293.512769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.514340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1293.519067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.532489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1293.543214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.555507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1293.567065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.579855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1293.590870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.604372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1298.522509][ C1] net_ratelimit: 16769 callbacks suppressed [ 1298.522534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.524714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1298.528824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.541677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1298.552815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.566215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1298.576789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.589285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1298.600619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.613604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1300.538062][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.561781][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.703321][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1303.532544][ C1] net_ratelimit: 15767 callbacks suppressed [ 1303.532568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.533877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1303.538894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.551244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1303.562738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.575834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1303.586853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.600053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1303.610902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.623468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1307.552389][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1307.559388][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16849/1:b..l [ 1307.568024][ C1] rcu: (detected by 1, t=10503 jiffies, g=163837, q=2487 ncpus=2) [ 1307.575984][ C1] task:syz-executor state:R running task stack:22592 pid:16849 tgid:16849 ppid:16845 task_flags:0x400140 flags:0x00080000 [ 1307.591218][ C1] Call Trace: [ 1307.594538][ C1] [ 1307.597501][ C1] __schedule+0x15dd/0x52d0 [ 1307.602065][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1307.607041][ C1] ? __pfx___schedule+0x10/0x10 [ 1307.611942][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1307.616925][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1307.621976][ C1] irqentry_exit+0x599/0x620 [ 1307.626600][ C1] ? trace_irq_disable+0x3b/0x150 [ 1307.631757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1307.637902][ C1] RIP: 0010:unwind_next_frame+0x6d8/0x23c0 [ 1307.643837][ C1] Code: 18 00 00 4d 8d 7e 34 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 1a 17 00 00 41 c6 07 01 48 c7 c2 80 0d 5c 8e 4c 8b 6c 24 48 <48> 8d 72 04 4c 8d 62 05 48 89 f0 48 c1 e8 03 48 89 44 24 40 0f b6 [ 1307.663469][ C1] RSP: 0018:ffffc9000f096fb8 EFLAGS: 00000202 [ 1307.669573][ C1] RAX: 0000000000000002 RBX: ffffffff9033abd8 RCX: ffffffff9033abdc [ 1307.677577][ C1] RDX: ffffffff90b4a552 RSI: ffffffff90b4a552 RDI: ffffffff8c27c120 [ 1307.685579][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e75e520 [ 1307.693580][ C1] R10: ffffc9000f0970d8 R11: ffffffff81b0c240 R12: 1ffff92001e12e11 [ 1307.701578][ C1] R13: ffffc9000f0970d8 R14: ffffc9000f097088 R15: ffffffff81767e95 [ 1307.709573][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1307.714731][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1307.720932][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 1307.726162][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1307.731309][ C1] ? save_stack+0x122/0x230 [ 1307.735928][ C1] ? save_stack+0x122/0x230 [ 1307.740458][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1307.746637][ C1] arch_stack_walk+0x11b/0x150 [ 1307.751440][ C1] ? save_stack+0x122/0x230 [ 1307.755970][ C1] stack_trace_save+0xa9/0x100 [ 1307.760767][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1307.766191][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1307.771214][ C1] save_stack+0x122/0x230 [ 1307.775575][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1307.780549][ C1] ? __pfx_save_stack+0x10/0x10 [ 1307.785451][ C1] __reset_page_owner+0x71/0x1f0 [ 1307.790424][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1307.795578][ C1] __slab_free+0x263/0x2b0 [ 1307.800046][ C1] qlist_free_all+0x97/0x100 [ 1307.804677][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1307.810165][ C1] __kasan_slab_alloc+0x22/0x80 [ 1307.815060][ C1] __kmalloc_noprof+0x316/0x760 [ 1307.819953][ C1] ? trace_kmalloc+0x2a/0x110 [ 1307.824655][ C1] ? tomoyo_encode+0x28b/0x550 [ 1307.829540][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1307.834605][ C1] tomoyo_encode+0x28b/0x550 [ 1307.839250][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1307.844940][ C1] tomoyo_check_open_permission+0x229/0x470 [ 1307.850884][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1307.857067][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1307.863524][ C1] security_file_open+0xa9/0x240 [ 1307.868488][ C1] do_dentry_open+0x384/0x14e0 [ 1307.873255][ C1] ? vfs_open+0x31/0x340 [ 1307.877505][ C1] vfs_open+0x3b/0x340 [ 1307.881568][ C1] ? path_openat+0x2df0/0x3860 [ 1307.886338][ C1] path_openat+0x2e08/0x3860 [ 1307.890945][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1307.896318][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1307.901783][ C1] ? __pfx_path_openat+0x10/0x10 [ 1307.906714][ C1] ? __x64_sys_openat+0x138/0x170 [ 1307.911734][ C1] ? do_syscall_64+0x14d/0xf80 [ 1307.916484][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.922629][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1307.927560][ C1] do_file_open+0x23e/0x4a0 [ 1307.932061][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1307.937092][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1307.941941][ C1] ? alloc_fd+0x64b/0x6c0 [ 1307.946276][ C1] do_sys_openat2+0x113/0x200 [ 1307.950948][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1307.956148][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1307.961860][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1307.967919][ C1] __x64_sys_openat+0x138/0x170 [ 1307.972769][ C1] do_syscall_64+0x14d/0xf80 [ 1307.977446][ C1] ? trace_irq_disable+0x3b/0x150 [ 1307.982477][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.988564][ C1] ? clear_bhb_loop+0x40/0x90 [ 1307.993233][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.999113][ C1] RIP: 0033:0x7fc40fb9babc [ 1308.003631][ C1] RSP: 002b:00007fc40ff3fd40 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1308.012034][ C1] RAX: ffffffffffffffda RBX: 0000000000000385 RCX: 00007fc40fb9babc [ 1308.020006][ C1] RDX: 0000000000090800 RSI: 00007fc40fc325db RDI: 00000000ffffff9c [ 1308.027969][ C1] RBP: 00007fc40ff3fdec R08: 0000000000000000 R09: 0000000000000000 [ 1308.035928][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000100 [ 1308.043906][ C1] R13: 0000000000000000 R14: 000000000011fe21 R15: 00007fc40ff3fe40 [ 1308.051962][ C1] [ 1308.542607][ C1] net_ratelimit: 14186 callbacks suppressed [ 1308.542630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.542983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1308.548896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.561961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1308.572941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.585226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1308.596843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.609575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1308.620821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.633990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1313.553011][ C1] net_ratelimit: 15145 callbacks suppressed [ 1313.553035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.554636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1313.559356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.572752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1313.583801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.596147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1313.607727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.620549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0) [ 1313.631751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.645060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:f0:99:9b:df:5a, vlan:0)