last executing test programs: 14m50.063046418s ago: executing program 1 (id=78): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x2000000, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x5963, 0x40, 0x0, 0x10000051}, &(0x7f0000000140), &(0x7f0000000000), &(0x7f00000000c0)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_settime(r3, 0x1, &(0x7f0000000140), 0x0) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = io_uring_setup(0x7, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 14m7.410554972s ago: executing program 1 (id=82): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000000)={r2, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@ll={0x11, 0xd, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x80, 0x0, 0x58, &(0x7f0000000280)=ANY=[], 0x18, 0x68000000}, 0x80fe) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x700, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x7e) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000bc0)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{r7, r8, 0x6, [0x1, 0x8]}, {0x80000000, 0x0, 0x2, [0xffffffff, 0x4]}, 0x1, [0x9890, 0x6]}) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet6(0xa, 0x1, 0x2) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x9}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000540)=[{0x6, 0x8, 0x8, 0x7fff0000}]}) r11 = fanotify_init(0x2, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000240)={@local}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xac5) io_setup(0x484, &(0x7f0000000580)=0x0) io_submit(r13, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, 0x0}]) fanotify_mark(r11, 0x80, 0x800, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="189386ae42caa322c10d0000000000000084000000000000000400080003003f2c2000006e0d9a6900000000008400000002000000ffff05c000000055ef0218d1004b0000008f9d54ad74aa27f6e340a4fb21d4df1c4f0422f75f477dff7e84ebe66812d6911767a3eb5ba4184b608670c3bb5fcfac8b625665cda95b8ff53e85a7ab373f795f04ef2cab2de0f8931aa127bc3d94e766f67e7ba26df05d41244c937cd347bccaf5c4039a6b5d76912f8d607f72", @ANYRES32=0x0], 0x38, 0x20004081}, 0x8000) 14m7.408076887s ago: executing program 1 (id=86): r0 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000002300)) (async) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) (async) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x10, 0xd, 0x1002, 0x2, 0x8, 0x7, 0xfc}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 14m7.403038537s ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1861400, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x3e8) 14m6.816352356s ago: executing program 1 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}, {0x14, 0x1, {0x1, 0x57b, 0x9, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x10c) getdents(r3, &(0x7f0000000080)=""/168, 0xa8) setsockopt$inet6_udp_int(r2, 0x11, 0x66, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="8427e4a181b40e04000000a6146dfd1fe234605fbe5100aca102223614d32e53f48acfd118288646f92f6dfba214cd7fe8acdb6c2fd0c99caf52f4abc6510c13183bd8741851d8"], 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0x4, 0x7}, {0x9, 0x5, 0xf, 0x2, 0x20, 0xed, 0x9, 0x7}, {0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0x10, 0xbc}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c813}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "fe7f7f92688bf014", "98c0861090e7e41a72bea778870c20b42e80e14a2d621c565f691ec474618200", "bef600", "793c8b185eafbc22"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304, 0x34}, "d52cd5a18683c68e", "d0ceaa324ac64c1f586fa7dea6c74faf", "937884f8", "6fde0dab3035a5d1"}, 0x28) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) acct(0xfffffffffffffffe) 14m6.35820315s ago: executing program 1 (id=95): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 14m4.973551969s ago: executing program 32 (id=95): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m19.000412323s ago: executing program 0 (id=3557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private=0xa010102, 0x0, 0xffff, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x600, 0x2dd}, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in6=@private1, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x40000, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 1m18.766149902s ago: executing program 0 (id=3558): openat$sndseq(0xffffffffffffff9c, 0x0, 0x8800) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x20000000000000}) 1m18.641519905s ago: executing program 0 (id=3559): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000f18000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f000089f000/0x4000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r1, @ANYBLOB="010025bd7000000000001000000018000180140002006e657464657673696d3000000000000005000b00020000000800110009000000"], 0x3c}}, 0x4000000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59080600010000000000010000aaaaaa14ac1414bbaaaaaaaaaa1cac1414bb"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = dup(r4) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) syz_io_uring_setup(0x6488, &(0x7f0000000400)={0x0, 0x4e99, 0x800, 0x3, 0x4b}, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xa2) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1m18.270207494s ago: executing program 0 (id=3561): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef00"], 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x3, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x59, 0x3}, @datasec={0x9, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x7, 0x9}, {0x3, 0x1, 0x29}, {0x1, 0x3, 0x7fffffff}, {0x4, 0x9d, 0x2}, {0x4, 0x878e, 0x4}], "ef1a"}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x2}, @fwd={0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000a40)=""/4096, 0xab, 0x1000, 0x1, 0x7fffffff}, 0x28) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xf, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x56, {{0x8, 0x24, 0x6, 0x0, 0x0, 'Twn'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xc, 0x8, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2d, 0x80, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0xd3, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0xa7, 0x37}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x5, 0x29, 0x0, 0x20, 0x8}, 0x8f, &(0x7f0000001b40)=ANY=[@ANYBLOB="050f8f00050710021c26010003100b03100303100b7a100b305742a9799f792b57a928b6c7310f967af9dc27144e15cdfd029e3c5dfcda9d973ecd95e1096409f6104a2c7bee3736ebd5795b87a5d72ffa6caae9abd22ac402903d8f62c6bc49e4f3b4515a104259185bbef25f25361ca6d330f84d86b0935164a18a088dc63dcc03b383ac8f3b78d30c427e186a8de502aaa1e5b1da36c07caf24cc5644d2a38754"], 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2809}}, {0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="24039d39670eacdb0706be538a005fe6569f42748bc6b88fe12c9c87"]}, {0xa2, &(0x7f0000000580)=@string={0xa2, 0x3, "859393bf99cfbcc20ff0cf04a26878fd80fd678577c1722c14f3a173dcb129fa25b7566810de61c6508bc167c46b0ad5cd6c34c8507cd17fb30ed434737fd2963fda3e74e5ba96b76d26025e4c7e54e5fee4f03dc3e31cdfe78fe9229ee14539d8ec9046854287b003db0a5c2df518e529fa53a0f3b54cae7af94dc53b0ce68a70a041953eb2aee466ec7fb244aa6fd92a90940814f7139f93242b1d74846db4"}}, {0x2e, &(0x7f0000000640)=@string={0x2e, 0x3, "e0281f7eb49e435f00f32ce5d15400d10e76bb7efa4bceaadc8dbecfeaaf5a078e8e93c0944bd5826c654ef6"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7d, &(0x7f00000006c0)=@string={0x7d, 0x3, "216a1c51722cf8ea6ecac10d91f89e0d5aa8599b467a6963611e724410122eb3beef5231d8a520d6ac99dbe39ecff0fee6d875cc3e501f1cf633a948c9f50f2a022a6be7e15d9e7417bc76185d3b8df5e736f7a28ec6a49c66a3471381cef3afc67e04f3734628bd11018fb38a79673d2fd1e7c968933ecb756e81"}}, {0xe1, &(0x7f0000000740)=@string={0xe1, 0x3, "6967109cc47ed9b00c262c7272b9d3c17cfdb51c812a305b74c69c0d87e6ec6f9b5e8f0a000c89ce2a776c62f5e3ce08adb81591e3da7769d62cf99211b5b66d1e7b82da7be38877697ce7c0b6d630d378ad277bf54beb1ca4b7376bc9f853186eb6a91be3ad0264974b0753e29248609ca8df2cfb2ce789f79ecc5b29a19dafde797cb07a72d8eb07fc8d4bf732dbd08f7e23c73a1dff22ae715bfe9cf4be5b563f9c0deca08babbd7a7a30376f3764d065c38229252bd06afdfd7d6ea65db63cb3db2950eae05a95ca40ebc6e2609c3dabd3e58e1bb1d3340aa15cb596a3"}}, {0xad, &(0x7f0000000840)=@string={0xad, 0x3, "61e250a5fb4dfae755f659b9685e337dedf938885fa1e3bc4f11f0a4156cc46c5cfb52d89a323191bfe6dba868e16590992b0450717f534066132caf72a5f8dad3d8924139d68ced99484eb0daa6345c7734d4da4bfbf61f70c91741877f4e546b224f5d246ce466b8141302ec726080be6c204b5a865cce4fa0f9ceb5bee600678591705f2b683b46d354810e879cd316364df519e4f9824c3058836d833250cc3cc2253ca6833248a953"}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x22, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140200006c070100"], 0x340a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, &(0x7f0000001a80)="19af5efda50653ca8523eff7d836a0bf80787f3e78abb6d3387dba6d60f54ea1a742a6db78dfa8c720b06a50c4f7557a9677ecdf69d715228130f3b5daf2f6ffd7d55ce72e124be84bc925a89167299d8c41eee2d43b7993230b085de8b7ca61c54b3ffe30b244ddc43190561711c2b9bd24771228428ad9d36cb5e379e214f9415e38250e4a2b35585e", 0x8a) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) 1m17.750315435s ago: executing program 5 (id=3567): r0 = socket(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'ipvlan1\x00', {0x2}, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x800) 1m17.316025297s ago: executing program 5 (id=3569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020080ffffff000000000000000001fff1ffff0000000000000000000000006c010000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m17.159939509s ago: executing program 5 (id=3570): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) unshare(0x64000600) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aac", 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000005244534b0000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002480)={[0x114, 0x9, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x10045c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x80000004000000, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80000) r9 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x8, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1m16.423944881s ago: executing program 5 (id=3573): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdfb, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x4, 0xf4241, 0x0, 0x0, 0x1}]}) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/38, 0x26}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/107, 0x6b}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000c80)=""/55, 0x37}, {&(0x7f0000000cc0)=""/8, 0x8}, {&(0x7f0000000d00)=""/107, 0x6b}], 0x8, &(0x7f0000000e00)=""/35, 0x23}, 0xfffffffb}, {{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f0000000ec0)=""/120, 0x78}, {&(0x7f0000000f40)=""/36, 0x24}, {&(0x7f0000000f80)=""/193, 0xc1}, {&(0x7f0000001080)=""/159, 0x9f}, {&(0x7f0000001140)=""/111, 0x6f}, {&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/7, 0x7}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002380)=""/99, 0x63}], 0x9, &(0x7f00000024c0)=""/103, 0x67}, 0x93}, {{&(0x7f0000002540)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/182, 0xb6}], 0x1, &(0x7f00000026c0)=""/115, 0x73}, 0x72}, {{&(0x7f0000002740)=@can, 0x80, &(0x7f0000003a40)=[{&(0x7f00000027c0)=""/5, 0x5}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/97, 0x61}, {&(0x7f0000003880)=""/226, 0xe2}, {&(0x7f0000003980)=""/57, 0x39}, {&(0x7f00000039c0)=""/91, 0x5b}], 0x6, &(0x7f0000003ac0)=""/218, 0xda}, 0xb}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c80)=""/162, 0xa2}, 0x16e7}, {{&(0x7f0000003d40)=@tipc, 0x80, &(0x7f0000005100), 0x0, &(0x7f0000005180)=""/162, 0xa2}, 0xfffffe00}, {{&(0x7f0000005240)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000054c0)=[{0x0}, {&(0x7f00000053c0)=""/86, 0x56}, {&(0x7f0000005440)=""/114, 0x72}], 0x3, &(0x7f0000005500)=""/165, 0xa5}, 0x7ff}], 0x8, 0x163, &(0x7f00000057c0)={0x0, 0x3938700}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000005800)=""/254, &(0x7f0000005900)=0xfe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m16.19584169s ago: executing program 4 (id=3575): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae", 0x48}) 1m16.096529779s ago: executing program 4 (id=3576): memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8442, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) unshare(0x6020400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2d0f80, 0x0) unshare(0x22020600) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00') r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) r4 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) sched_getscheduler(0xffffffffffffffff) ppoll(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x122) tkill(r1, 0x13) 1m16.096151777s ago: executing program 3 (id=3577): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48ee4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040884}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x180}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x984d, 0x10000, 0x100020, 0x273}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in=@rand_addr=0x64010100, 0x404d3, 0x2b}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) (async) r11 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) syz_fuse_handle_req(r11, &(0x7f0000000a80)="67fee15c151b58cbbe8eb800b49c17f5f23a16ac0850467d81b19f76b6e101899811be877e9b93a7aa9bb4657d581f7ff818be818f4b9395b0cb54ed9188a6c179889e5b940ebba4d0a922e975d3c576b70b11974fc87daa31b6780b04e5516d56b49918b149b20bc6ac8a49d27570f04dba10107bf2fb99f141aa5b70f46ee7118250fe41eb1d78187845189c4ea7ee7f6801e0160724aaae68fb5596082368b61ee712e7e339e8fa36b8c49cc677c218cbf9d972121f3fe3400cc7f3b1469b753b7bffedbb81ef38a57b57cefa78271c9a0c05c17cabbbd1f68845bd187cd0e0422d5ce839d0da4d6ecf84c9ebe7ff45a98b4439ac7c97cb547f08bdd08f631c3399d53d3912cf4262efb3d035af1a87dd836a94948e58b4f7e22761841f335b01948df061347a75b61f701b1155b1007f7bb7d9f937574baf215e983acbb7b8cc76c30fdfbece8f16b06e428f25da2942288fca19068efd6e4943021703494bfe9765bd53f105e56c75f48a0e4190bd1d69929e615f8cd5de8709a66b82dc94dfded7fb77ac430afef51a673dd5edff74cef2dad2780e7e8bb4b056f91a3be2dc7cee42aec8ae086464f31f3b31166de959f0bd98f27a89f57d55afe4003d62abcbaf0f10e95ccaad6988a2c9927909c5c2f9ca2ba96eea4d33b402bf9f763ebd1c4b98bf0362f470d48b70f4e08bc3be665641db9ce4f11819ed843ba5ae9f64ebd6d53a683b696ed609342ddca5f6bf00ee553d99184d966848361da84376215a6fd229f99eb7dfd381d0cba37da018f14d3b5f0e19aedb7c90543c1a29411d4870c4b7767c3606d75784299afaa115d0c86339bf4c9528958c8240258cd80b9f3dab22e5c51cb66ffee0190df58462aba0b503d173b784e22bd58c97d9a27ba5e72e32090a278a430562c5ea7bf453606e238e0c5d0f5eeb86a30efe4f769dcf6301957648b7a17429831b70d247f474ccb7c059f965807069d871a988cb06010b3970a3b926143f50cb20d54df772bc46a10ba9da9e7509d97d10b1a3fb59c304e4e7a4c2e73065cf03a9ae1ede3f9d3353bc6ab2caf0c56a93935c96a9abd14e397ac3961aaadcb6b4fcfdbd79993d5ee9f4794c7c7535caba7bc951e172beedaad62dd1bdc9ee3642af45c4dd83261ceb7ee5cb94402591994c9c84c0ce74da860c395c887d5f457c3b3b5fd3cd62811d414f41d0b60e9528138db62e3aea0d02760802ae84db66c1315aac6a5c7533d1397b99bdffded083ff4d68f719ef9b01e97e462ad6f5fd3d2b3d97591e327ee0658955ba49e8dc402d7ca2486b166f4ee15d9b74bfcd2e15c8e828919e2d9a7c072374b701e577418665bbd1df59311fa9c63e66da75fa77190166a53499a06d99fc7897ae1ee5bb4efc692dd64ab7be4e4fb4d8938f711752feb018c94c9ed65df6234d9be0bcc91de590fb5b2ddfe21c6b72162fe4e5a6c5aaca7f039b8fe72cf54d8c97ff8c9ab439606845484d6ed25144f9e5fed8944cf4d216a36b89195445181ef17df0f6e1258381facfbedceee0d93b68cc958679d75f422624b5b622f02b74a16ae48121eadac3bfa437bc857cb8b0a7bf43c304b983762e293f4b9c8e559816cc11846975d1cec4cb475dcbd733789180ae9c277cee80e8662bfb10032c22a6674a3a57557eb5a18ef73656e1c05b92a06c06db281eb718347aa90d2df2c3094c4f6e3a54c03331dcd9bd61cd402a2600c5904e7ce91d7c7f0f35f01d7dc348064a870ef3a4e24a1cc7d276a42402dbb480aba6c9f1bd8d446d46cbab5e13c419327f16a1754ee82c4d334ca5aec4c2c564d739ef2c846f27e5a03b15d0f38798bc564f4d76d1810fd5ff8ae51c62cbe8cbac700230d3248cea5918adefb902bf7be945f0f02bdaa85071be172c4884c1809aa40004c21e2e227b46a1abc900d36029e210810a14755d307ab90bd551571ee07fde6474011d8d2c35d1f92ee5727abf8c569af6341cd416786d4c1f864d0fc0c92e5355f4e0b6c642966b739e231afb39ab3cbcf5c3ec37356c8baa81ece38675b6284b1723ac388698b2776a27c98093915659a22636f0b110dc779e700d81c9e7bf1da865ae1238fa8b4008f683c4ddb773030c1880f8b3374753b9464376c4a64cc315c9fc2d5ccb5e6deab7f4ad2849115dd3fd934fa3671f1ee0f22efa673e33137c82a95557c05cb0a93906eb3df4c00bdea0468e667a7baa68820fd658b6f2ab6a227c6ffc037dcb81b1a319a9da2f061ddc4a38a8cc85834973d6cee7f508b978787eae68e165c729408a9e7f34fb5ff0fe103ee6b9b8daaee67925d4ac9085a6a35c8926c846a3d4def2d319df47a9bd4f8c5f7d7acbde2dbd06c7b45e6d3e62be36295c918c3d9d7743f1e64caf4d24b2bca5a61cd1d43f34a993d299ee63e0ab790f2760e12c15656d0570507ae8f04edf31b53f485a36aeeace3a17078483e171d37f07a8f244b0f477f69ab583e8f0c279e96c731cc0b793ab41cc385c69381391fce059eebb03809acb435bee520cff520e1c27f00e57bdcfd546012a914da6a17d962b296a2f60694f277264f055400a2398eb83b06fca556727113c8aedd537abe33ec4b0b3091ecafc983dc731f4f2132005587f015c4ae29b97bc4b8b2216e306df4a9c7cf2ed6f5c43f0e6c6accb5316a6278c8d18c48dabb96b86d59e4c54b6ac3f736b3cc9734a7d12947ca2e76f422a118b9f8a62d54ab26c36a7a8a40c6d34ce9da9a64bb7a48a47e6b22ff44088d911fe1e11e7f1ea0fcd7c472e034752e6d2a7a05d8ca454a402d93edbf3c9323533833445ece3d5c47c057d7b1503ae6d2dccb06d7624d50d3ca157f8ea40cc262f405371bda649efaa649fb6050f54df123fdab2cc577e882d1f566f48fe878bdbda9e89f651f48f7211fe4585ebc1939117d8d751612ca0a350c83e58b1590dca9978b129510e441bc99e677905aed8f47a3434a80cdb2a1e540be6896ff337f70af429cdc416c0ad06c35e51be718ef01073af8493f4f86bbadedbc67d0325bf3ccb765a2ca270bf73901c038cb0c75061937856b94eb7970ccd6404c6d06115c18342957f66f6e83410ec9eeaec0dabc32fb9343c0451d04881e0507092f07d4174778e40c05e02bf656097d5a550025289bc901ced49ffcc8d8514bcff2d94b821c5313934d94aa536c702bb0fd50a1175075fcb2b7e81cb91ddf98fcf8d9bebd27821d591136ffbd780547bcd09c3a78344570a5597145d21445d21e1281f46e96e856545e269d8986596a9e0b3a04148a4fa46cbdc7fc1f12ffac4331cca4002a6126869b12384c29bbe5f594c527a8df0a8c406922d0b8c1751e579cb99ab0de0757444379356689ce26ac9e1f2fb8b8ef4111f0412ba06166d6de5629c48ce4384cb941e8ab9607f585ca82c8fef9d35c6829e076015b39b3f9b773378bf2ce9e07dcb8b4185e20510e8059412c8caa10c9218a3be192903ffbff0448dad1f799bcfd4c19c5b6b97c4574fdc8df93461e7ea84b045c96b30b4ae7ccddd906a4d4a3cd659d0d56ad9dacb693fa0fff5ea387cb7466ec7481d3745e62060aa9cd8ddaa7e97b5297336e966c39d2a44911d2fc65fd9fa222acbc1dd55de08e1b86b36421923135b8b248caf08b4d0bfa37512d90948bba7b48b2ec9de1337d5863587cf0b47e1fc3c0633a93260e87bae79cbe776a6527a7dacdc8a86898ca6ec4b96f1b4b1f7ccc29127a5c48b0b735eda37f3fc7256eac6b19b69f5a4bc918481e0e8a0921610ff8c012f01777974201fa5b06b376e52f8b931b26a72c608a0c786d5c6b9d1ff7c2ca0ed746baeadf3d4f5bba8eae04d6b6b740320fc9f06f298662352c5aa81777ac1714de155015ca40d90c83f7b7b373115c77c0f1958708e8e8a5b4323d5e56fbc6576cc2f7108c10798f36e659d396fa0aa2d7e0023418a6a9e729f7b7eb3e708235391e38f63d114e1fb4edf3609c4a67c5741df9fbb1f5eef2462985f83c2a1672d5730929e4988248b18efa0e1a0e18bdc9c6cf185d5ae47b254eef16fb6473e9ee925addce601b24e8d1273d936960236cd4cbbf3d04e5cfae5a12afbd128a9944a3010ea4455ec89c90e181120b308cee4d1f4e2e3407dd5654aef505c5a7b1d96e504357fc8abc420530740fa51344bccb77c1b32880e628ebc31eeb6198affbced53f8488b8d68f4c55d16cd111ab90d17bb8d69493af33c4148ea4dd63de513f82b95e6aa85286480b098e5e8a7d3ea292344e16fa1ae52f8dcfb908dbdf30cfeb68d37102c91bc59d770240b3399ee8c5b5ae93fd22335f347a34958a53f3f47cbc54d1c824230b8a481b3a6f868e03f0309ffa1e8a398aa4bcecd1bf659e53b1401a20ae2a0692b049037711e350ae89be0e8855e7d5cee5a7abb6b4aca7d9b62dcbe51658d201c360fa6fb2d5eff93c285ba907f4a03b686a9c39c59a06112ddd92396ae36f508ccf6bdae7d879d2ce97b21866e0f9c24993d9dcfbbbc9fa47569f5bc4ac5910dff7b7f26398f556b6c39bd4ed3f3a61c900e73a48495344866f5e619feb5b40939ddca41a0148b62da9f8f3a403e60c088ee3e73d6a5c4817596c45c45ac4a2607fa85b6cce2a1a57dad75cf4a183e75803d9a14ea1e4d5f4a43ea92dad91da5f0962c42f830b9149f7d140dd7e562bbd50311127f9f479c7f3050a5e7bc04825eb3174d78a2df4639642b706f48ecb2301f4324f4dabde19ba7168f69281e14e17ce3949805723daca38f2c6626c43e10734c9de8ea647cf05ce78179cde3f927c91a6698c9cba1dded465cc405099fcf1e17c94ebf428ff6939a9b8bcd2a3ac04a5040f49b7f00cdfd3713ba10ce558b8f9724dcd5b82fcb3204461287ff3d05391e29ac572990294a183c6f9eb4827cb5c2bdc522b40248523a709c61061af6c6a476da52e1f03c36444314e456de050b0674d5ea459b4d1ff47bc3094c79d2a8a24742ba77b86359d64132abf73a76645501d463c7a6dbfc7521946a6c46b57a8ecf60b6d6c97a7dcbf8f469964e93a7afb741b41e0d0de809a175ccabc0d2a3142bcb8cb70329e8798a9823fd4c6dac8a55328c9a0adc1f0eb198d3c89d4b1607eaf7de04e1267d17b83ebc21fb0f7109a188a40329cbe3b3bbbe227f9baf357f8036d776c0d6da9cb9a5aec02a9d7122bfa5d81097662b09c99ff5bdad2182c40f322ffe4699f534833e247775088e654699d9d69302700719b4233bd3e5c301b659e7bd540fb3b862c46e755ab7c0a569f429f38c6de79c7ec990baeb9222b1ef1cc4b5778802e3babba0178cc4ba63fe163b64bfc95fccf2790aed23d4c2ba83fc72172e176fa5628b602ee6b670785d03e15eec2258162007c4b9f6b5f58a8f9029ce33df984a49143a87fc54291e136594ff3cbf6196caada972d02c5ee84fcccd17f9ac9c224adfd58d33af1117ebd18f0d2c99ee45bf37e3490547f3635637d43117b852ef59c9d74848dae52af209453d4e24100ff2915c6111913cb401d242b9a3a6dff18ba121de559ec047fe207d73f6f1267f8376a9311fdeb5bf9a62851e49fb919c79118ba8eecd65a7b8eaef109aedaf859dab5d3858f1eb23fe4b0c178236919d6d3f78624c473260e9a0be63aeb0f6353130a7689c23d1263d32bfcbd179b4446083d3308a09a9ec00ae5e54ac0a229e6f87e5dad8d714fa5899963c32bc00738602485f78b26ce69659b4a1e2611bb5b8e98a9e3320d59925b52d7288373a9485bfbb4635ac77b24fb1452c17861a09e6aa1b557ec3f89ff96546843b7303a5abaf048877db32d2be3911696518a117e6542c4e5fdb51585aa5494871867030786b2f1dc0699cf437b9ff7a0c132d7383c4351dfec369b48aa9e00fb8cbf009035b28aaf4b940f4f6b6f050c68bb08067584ce1b1f9b3ec138ad7819cdf6bb017a674f69ecb680af227fc8ffb690a43354cda28f305d54f9f97eed036170567c359cd5948cafb8caba24f35e366ea4d5b90bf131181c6b296c0177e39884cb0dadff0d2050e4691cc16435731fc837de3564180510dcdb91e2fada5eda23ea6dd93fe5be2663d5a94316f2a3fa2c41a27aa3e1b453cb322407d1608b196197e79265ee455f4c53e8e4fa9b9df6fd3b85e167aa7d9585e67ce1467bcb41a6ad4c487c2a8193826f6b635c9064e9a3ff61eb69c275c3a95b6ce30514081d4be04a347821205d054ae5c3b04366aca9c90373c2426d2b5f32b856088325aa55e7788be4b327227e27c191fa81dce1a62bab7adcef8d753a190c0c3ceeafd63aefa603ce58090c2119ebea398041a8b242ae8fbf0793d912ebe42c65814474d59630d0c952302d92fc759e4d53cf54726f7f91fbbdeeb857efd5eee5bf2dcc25876ef7d6f14b2d2c9c4d314330d6f5f07d026841110b0bacee1f351358d52c398fc8f6fff304eb6b586a30e4047929d28dc523bcc574ccd893ba6a049f261d140325a9f0c8b63779c9dc3fee0c4b9a7cb4aae218ffb08271b03714e1a7a3294b4333b314605b082455e162d6814c7d7b9da5caa619a7f2e337e904d72fbc34f0ec6f8671514dac9212c0f83d233a19d8a76ee2ee5b533db69796489ae8c6da55e2250f3835ad24a6843ddca8ca0b975af4521a414caf56bc7dbe160a4e390d2bf0e69bb3546d309255fcad22d33029e7b954e8d8b455ce11a6b4408eb098a8abb9d961818b0e2d98666784141652875c1dc27422a93e76b8eba7039f48d08e5502a5221cab0982c7974b44f3f227e8c43bfce3c5e210d66bedd4faa95d0ecda101f779a7ab0dc18c5c008f0e130f65d06cd496a97f2352306541d91df775e9704eb361f941422485a35def5d52c594c1e9cc319b31e0c292a335dda7d1a4d0658a62a9ff3940a4eb9e819b4a54b76b512978a7db298127e3b648ec3d256b6057d966d5b054301bc89c7b00078b19e876a357037835b518dec61a9258c83c9bb1b049d4d133baaf81af8c80d438efc405ebd38ca9a5cb330b23757448741ba244a73cce34c2d021c617e11aa67f37ed0c9ddc406e2928069bff4901b13ae08c1a21edcd09f9115b09077a7483e56d3261bf3dabb3eeb66d6050bc700749b0b86ec4a9b73759cbbc9e7a8da1857c3a76ba007d72119a20339bc3a38823a3c852c86a4fcb3bceee41e057d80e7afb05b1105f91a6714b7420bd707876105297e50c013dade8d9acc64ea5f39f2ced4be858ffe0bf2fe8099a045b92339e8b1efb1c30d19322e66f0d6eefd4891e7ed7954d77e2a3cb0a34fd82fad394f41f80e0fb2a10689ad004ec804df72ce0b65f3dee2d0d23ab351108af82f67faf2d982deb9c4d47dc2e6d2ed2bb0608aea452b9506ca252c481b62c5fc8b46e2877622b0749aef7fcf4bdff88fc865bf594e1874fea61e2d7ecb5c359af2cb83a62a428c96c244da1bbd5ba196ce78634fb44b9237904cc286d36c7f29f40055d5abfb32486be65e161036cf19e2d654a02e11bacb0eeeaf3d6a0782a5c8087ffce79666790ac30c67edab2999860d65b63cdb00c1d53188f918cffe8a49856cf0393a17af9c113318f791c8714f49c8c62d9f3f2ce756057275055a1f5a992d80d7ba0fb0e21fd6a296ac1315f909625c663d3371914a77543bccaeb33da8dd61d4c889744e19a4ec8cbc1499389d1b7f385515ddfb0c9e7ce224551c2271514669fdf7ca19ef674ed59a6bbfd6253d264c26a17a7dde889bcf10fc20888adda4374c833b306a19c1536a1cad1640eb2dfe2c3448fe17a217e2c91b5c1e8c37161054960a6c0223707f88e5fd4bf2433444b1acc107f9c8356c4a48033ff404e718706797d5dd5ffd31cb8677f20244e3d1eb59f0813681bac941e80670275d955b525b2e97f23add3f866900b6736f727ab75f443e10a69ee8576b1e2aa22013befd7e1f9ea6d1190ec960763192c3c3c460560a89584f1f7fcd96d4384fbe63d2b48b89c85acca12d3fed02fa73f0f028425a1687033878a5d0684d4d7c439fe293c4d76d450665385ad12c3425578ebde5ce838fb62d5b2e97931c2099a344fe881529b7da9a3848470eb55515402604ef8cf5d60bede7e875df24e3100dee16fee9ae93b00cef8ba6fefa691972ca1e8c2302656c1abd102c9ac9e76582e33c0eded64f88c4a366abcefacfed979d09ef3766dda6b575810a80146445e51db7226b719684bcae085975f963cade4a12ae7632bd01267b60f6c812bdd489ba068160f3df0006cc9ac2d0b16b3080abaecf50024cc470053975215bcc3a199ab4074e2189192c63fa8aed3a968ef1d55f51350e6b602ca4868df2547787676ebff6a9c1f0e76e60564ee778aa8cf0ec758d7f9977789837a9b0e5b60b796fd8868ebc64d9946b2624cf6aef5bb2327f7ae3559908f53e1f3537e41bb1a11691c8d4946a94c3ce24edf709e366e860d1e33db5fd80bd4c0f3ea366694f839517e0139f6e15acad8493fc8ad92d466c742c496f7bf80a0448bb3a593ca2467b4693a700711b0a59a77925c6d26702e5ba3952ebd9e2ed04a6c7bbc7f16b2033019b01b9505644f58a0fecc95639a16c3243589ce94f1f1f8bbf047afe83416e169696e9a69cd6c27ae57ca4de52a80288e63aca5e0b8117e996b51eee3da34690ff44dabc047035f08d1e726d4e106f5d4b61c8551a514e98ad438d2d2f9a750945c6e80aeccb5e5e700d04e557bb6b385a19e62bf771a237a23e5458a007224c3fd0bc178bb255d7be13b19c2a7bebe990e5d3fa757f33537e8fed94917bc6f17df802f440da0f4de895ad16ad7564daf21fde1ec2e4e24ef283cb4233244c32856fc77d584c5f7a4e2ba660dc3f73bd5a3a2a27724e245354fc4ad85570e54e07f120ddc0ff703ca38d668e61f9d5392c612b90274966873f0d41e66b0a47e3434e7ca3b37c264dedd5711d06ab4638f128f7905c442cdeffee10ad66479082302c072f995c0eab31befee318f60c8ca3ba984f13b793d3a780458b43d58c3f96c51019e6cf247d9464afeddbd541508036abb763b9e5b6fa0e33d7b2332d267fb7d25fdad60057f2233cf1f70ee488b8bbf8a50c1346be54381fc1b9e17671baba0dc62bfe3e3cf972f0c08820b2d01b8fd208dcfcb88e4ddf6f7dd643159ff1de065c13a1e22ede6bca832382502542b3076e556d7e95dadaea249d14e424d19ce0cf053144389cd9fc75ce2311c1c004093ff6f083082a33e2b2da4b18fa4c169f03bbdd744923beeca58a88f05f325d8b29d2ff1ea67388a91830778b9d0dc1ccbf53f66e537e48f0a8cfccdb2b20f84cfc60008c64f1543fc0a19cc3274b90970c3c0ac8bfda8ac83ef3d2bbbccba0a7003a9da4cae68bfaa12a943d9f34a42bb45a6c5e0df86d53ad8e288fc592819ff307eb75eb395b561b0e0fd7dc51398702fc5843f4a2c4646c781f65717e1ca0217efa62bf5b6c22c03266247b1ea262957cce8e2c3bf916726abc695dab8419184743e7d4f118612e63cfb1b215f54cd67911ed45adc04cbd8e45a16100b93421ae623990716b98f91d988c95eb2bbdf439b3cbefa2dec042df094d3e3db8c7d840a869e777f1319c7cf06f50927c1c95f14bc8411cdccf0c2dc535a8e01f101483ef31f2d810537d2051796e583451cb04e14c063c209e568d95527dbcecdf8fa4364461d7498a23cc1cfe609be876a549bf7ada9097b51b00145a1d6176b7095a615d1dbc24621daed921c3aeec7e68ffabd947574d1a5c9bffcd6a005f3453fec0f49d1b3a53bfb7d60bd3140e25536f2d3863c1aa795cc75547c80548cae346283642e3b372cab309a1969e854c3a7e8ca5947d5a503ab73ef2c735b7f1754c10a235ac81855a47f6fcff22bc9e00e76cc17b39a1063d03a52031e9c0adaf8f5ec7e754e098fff1bc6c2119d2190ef8aeba2bb4ae5d900702214451e4d1c9077f722027c2a07a23567a07f94a7ef2d67fe4635968b1babc2fc18be06485f892a9da16218c59a65043642687e67c24b6661d105ea39376007176bc215fa2a638827727e127453c6a72b923199dbbe5c0e96fe13ad3be5947dddebe65a4276c96cdc8a50e724a8f67180fa733007a73e7cfaa81dca8c9eda59f395420391650681e514dd000654ad3269ddb2bcc1f874a6c1473e60be2238b93022ccc610a8553fb912ab8016a1af98a7c93589c5506ed0fe810cdabf1659d6fc66d37468686d722568b1f78fc7acff4de276c616c4ce2ab1d9aa3ff2e1482d7bc8e81c1afa5eb5d58fad78fbd154dda81716b70c2a908d2536aacb84d111e562dea3dbaf498085a6e1598d66e90f62c7d40e6b3794e9896acae193e350b368cb3268c1262c635bd53d67bbb96158a6ee2d6802d3bfe097fef88d76e4ae8ebf1a465e0bc082a87f0f68e7cf79db10f8c0762e8df53db5903721a06a1692545b7b0f6dbe076fc8d29d0e6d26c6f3b4ab62e703b813919b85f0fe581de7e77559dc1efc64415fd6219c283913026ea3e1e0d918871041a32b5248e6e6e57f3df25a45ac70b5bc3bd8fceebbc702faf3f8af39d1443065445ced621c16e1c6a2f53a8de0910a6af684b2da4352fc9a03fbf327459b5ae8532b16aaed839d4977a9c5fde87a0b56a0cd74939d4f7bfe6ea8daad09ca6141fd324c11aa550ec846b94a387ba355309d13e15371e1e83011ac0edcc708af47224aeeeec70e91125cee9f4b2f7d829c65e3acc582f9e987d01338cd5e22b134a33f6398d7882f99abaaa9fcb972edcca5dd16743686f6e3ba45712be38faca01d9411cab3dd987a4b331d15847baa95b5bcc2399dca71b8c7bc0bfaa405ad34c7b728c2a4e83272c6b0b420ed4c07acbc392753071db84cebbbac349d64369cc638029202625a7265bb5db2ff02b173c9daadc06b5b3abc1659849bdf882f01cac2d7009be7bc9768d1d4959413bb09d210d74e4940cfd83833ffadcdf83848e7f13cc094dfe1d6e3f781352ad700617a384fe3aaf3e84a8be17778aaba628ffd7204a2f44b71a4a79ecba7731a72c681b644e791b106be60fe827fb230f3c4119b94fe2e310842070e02d2412f610cb957b390e646d63e01aad10601363240c717cd56f585eb21a55bdc10e9792d0fea88bf1101c359746753c1c0a3b5ad7e59db03b13fcb5808c92d24250782d92d25b4757b481ab697dd13071b80cc00842f2077a3cd712b252182ee64cbda320090acf4908e5e599b19a4de1c23b0fbe834bb21b4d9fbbc370c0601fa405de6ef1bc5a0fa518c3d7b7b26218c30e440771400fc4e3a71fd8f179168f249e6e7e7e457c1342752eb7132dbb8d84db7b5568fc30f3f6c313845321442ec120f581e6a742965e3973e85c8d4c099cc4b28a38ccc8126ca9063264ce62723f95076ae68ea50b079f746659d46d8aceba38fc7136f18610e8387b9b39b7c6300ccabfa58d465e8412acb0c3e0a35487d9c17c437c002a12483804de7d798b9801c8cd31e3bab5aa6617449da8008e5eb5acb2a32369a6976109ba02db18c3d6408f63a924b3e859327fb69a4d7f9eb2da6ca0b7804a33c89d93d13866c5e368903586667dbe60a9db", 0x2000, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2e, 0x400, 0x23456}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x40, 0x2, 0x4, 0x0, 0x32}) (async) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 1m15.981694314s ago: executing program 3 (id=3579): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0x0, 0x3, 0x8e, 0x5, 0xc50}, {0x3, 0x1, 0x1, 0x45, 0xff, 0x6, 0x0, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 1m15.114180386s ago: executing program 0 (id=3580): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) rename(&(0x7f0000000480)='./bus\x00', &(0x7f0000000040)='./sys_mount\x00') r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES8=0x0, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES32=r3, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000181100000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b70500000800000046000000760000003f98000000000000b508f0ff000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m14.457599117s ago: executing program 3 (id=3581): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r3, &(0x7f000000ad80)=[{&(0x7f0000009c80)=""/4096, 0x1000}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80080001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000540)=0x7b1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) syz_emit_ethernet(0xa6, &(0x7f0000000080)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x12, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x32, 0x2, [{0x2, 0xe, "5b00cadf77b188318c006fbf"}, {0x1, 0x3, "06"}, {0x5, 0x3, "03"}, {0x6, 0xa, "a0aea9351e40ae78"}, {0x0, 0x7, "f4a510a9a2"}, {0x5, 0x7, "f1a7cd0625"}]}]}}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x5bf9, 0x0, 0x0, 0xff, 0x2f, 0x4, @broadcast=0xac14140a, @multicast1, {[@generic={0x82, 0x11, "ba0eaddba4c79e995a136d772e7097"}, @timestamp={0x44, 0x10, 0x94, 0x0, 0xf, [0x8, 0x1, 0xc]}]}}, "040022eb0000ffff"}}}}}, 0x0) 1m14.208157969s ago: executing program 3 (id=3583): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xa, 0x9, 0x6, 0x40, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xe}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000696000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x27, &(0x7f0000000300)={0x0, 0xc8a4, 0x4000, 0x8, 0xc1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2218, 0x7725, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x400000000000005) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x73, 0x400000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000380)='memory.numa_stat\x00', 0x275a, 0x0) 1m14.114445945s ago: executing program 2 (id=3584): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d5304960) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070002000000000000000002000300060000000903"], 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000002380)={0x8, "c16ce6efe6d82d68ecdfbfb98fdfe26fc177380a4e229709a79f041df8616443", 0x2, 0x80, 0x0, 0x1, 0xc, 0x2, 0x0, 0x10000}) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) close(r0) (async) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m13.997382737s ago: executing program 3 (id=3585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x18, {0x2, 0x4e20, @broadcast}, 'veth0_to_team\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c", 0x4}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x40883) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x40000002, 0x0, 0x44}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto(r8, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000380)=0x7, 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000800070000007f0016000000456f002014124e204e20000c907801ff0001"], 0x2e) 1m13.990538806s ago: executing program 2 (id=3586): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae", 0x48}) 1m13.810760851s ago: executing program 2 (id=3587): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@svm={0x0, 0x1, 0xffffff4d, {0x200000}, {"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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000001180)={0xffffffffffffffff}, 0x4800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000003940)=[&(0x7f0000003380)={0x0, 0x0, 0x0, 0x8, 0xde, r5, 0x0, 0x0, 0x6}]) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000001c0)=0xeb8e, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000a60000000060a0b16000000000000000002000008400004800c000180080001006f73660030000180080001006f736600240002"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) preadv(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m13.450079182s ago: executing program 2 (id=3588): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "78a71294e5707040"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000000180)=""/58, 0x3a) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0xc4) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x8, 0x40000000000800, 0xffffffffffffffff, 0x3}, 0x0, &(0x7f0000000240)={0xb, 0xfffffffffffffff9, 0x6, 0x0, 0x0, 0x2, 0x2000000000006a9}, 0x0, 0x0) r6 = openat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) write(r6, &(0x7f0000000600)="02000000fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677f0000000000c2342b8c150f59dc51f5cb0000000000200000f8bf54f533000000800000f9ff0000", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x58800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r8 = dup3(r3, r2, 0x0) fchdir(r8) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m12.881417869s ago: executing program 4 (id=3589): timer_create(0x1, &(0x7f0000000300)={0x0, 0x13, 0x0, @thr={&(0x7f00000001c0)="f4ff8dacc868d2a648f9479104a647ebffd952708b725f549605f15bf52bc460f389ae58d7480aa1c2d18e0da2077b31bdae409832925c2307c3bbfbcee442e92bdd05ababbff78d01c2ede300ec20e705fe2cbacad3266fb7688e7dc57d27ab04fb27a3213c5b082defddbdcfafae4299c80cbc672f685e", 0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x46}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)="06000000", 0x4}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.406653061s ago: executing program 2 (id=3590): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef00"], 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x3, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x59, 0x3}, @datasec={0x9, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x7, 0x9}, {0x3, 0x1, 0x29}, {0x1, 0x3, 0x7fffffff}, {0x4, 0x9d, 0x2}, {0x4, 0x878e, 0x4}], "ef1a"}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x2}, @fwd={0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000a40)=""/4096, 0xab, 0x1000, 0x1, 0x7fffffff}, 0x28) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xf, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x56, {{0x8, 0x24, 0x6, 0x0, 0x0, 'Twn'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xc, 0x8, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2d, 0x80, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0xd3, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0xa7, 0x37}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x5, 0x29, 0x0, 0x20, 0x8}, 0x8f, &(0x7f0000001b40)=ANY=[@ANYBLOB="050f8f00050710021c26010003100b03100303100b7a100b305742a9799f792b57a928b6c7310f967af9dc27144e15cdfd029e3c5dfcda9d973ecd95e1096409f6104a2c7bee3736ebd5795b87a5d72ffa6caae9abd22ac402903d8f62c6bc49e4f3b4515a104259185bbef25f25361ca6d330f84d86b0935164a18a088dc63dcc03b383ac8f3b78d30c427e186a8de502aaa1e5b1da36c07caf24cc5644d2a38754"], 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2809}}, {0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="24039d39670eacdb0706be538a005fe6569f42748bc6b88fe12c9c87"]}, {0xa2, &(0x7f0000000580)=@string={0xa2, 0x3, "859393bf99cfbcc20ff0cf04a26878fd80fd678577c1722c14f3a173dcb129fa25b7566810de61c6508bc167c46b0ad5cd6c34c8507cd17fb30ed434737fd2963fda3e74e5ba96b76d26025e4c7e54e5fee4f03dc3e31cdfe78fe9229ee14539d8ec9046854287b003db0a5c2df518e529fa53a0f3b54cae7af94dc53b0ce68a70a041953eb2aee466ec7fb244aa6fd92a90940814f7139f93242b1d74846db4"}}, {0x2e, &(0x7f0000000640)=@string={0x2e, 0x3, "e0281f7eb49e435f00f32ce5d15400d10e76bb7efa4bceaadc8dbecfeaaf5a078e8e93c0944bd5826c654ef6"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7d, &(0x7f00000006c0)=@string={0x7d, 0x3, "216a1c51722cf8ea6ecac10d91f89e0d5aa8599b467a6963611e724410122eb3beef5231d8a520d6ac99dbe39ecff0fee6d875cc3e501f1cf633a948c9f50f2a022a6be7e15d9e7417bc76185d3b8df5e736f7a28ec6a49c66a3471381cef3afc67e04f3734628bd11018fb38a79673d2fd1e7c968933ecb756e81"}}, {0xe1, &(0x7f0000000740)=@string={0xe1, 0x3, "6967109cc47ed9b00c262c7272b9d3c17cfdb51c812a305b74c69c0d87e6ec6f9b5e8f0a000c89ce2a776c62f5e3ce08adb81591e3da7769d62cf99211b5b66d1e7b82da7be38877697ce7c0b6d630d378ad277bf54beb1ca4b7376bc9f853186eb6a91be3ad0264974b0753e29248609ca8df2cfb2ce789f79ecc5b29a19dafde797cb07a72d8eb07fc8d4bf732dbd08f7e23c73a1dff22ae715bfe9cf4be5b563f9c0deca08babbd7a7a30376f3764d065c38229252bd06afdfd7d6ea65db63cb3db2950eae05a95ca40ebc6e2609c3dabd3e58e1bb1d3340aa15cb596a3"}}, {0xad, &(0x7f0000000840)=@string={0xad, 0x3, "61e250a5fb4dfae755f659b9685e337dedf938885fa1e3bc4f11f0a4156cc46c5cfb52d89a323191bfe6dba868e16590992b0450717f534066132caf72a5f8dad3d8924139d68ced99484eb0daa6345c7734d4da4bfbf61f70c91741877f4e546b224f5d246ce466b8141302ec726080be6c204b5a865cce4fa0f9ceb5bee600678591705f2b683b46d354810e879cd316364df519e4f9824c3058836d833250cc3cc2253ca6833248a953"}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x22, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140200006c070100"], 0x340a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, &(0x7f0000001a80)="19af5efda50653ca8523eff7d836a0bf80787f3e78abb6d3387dba6d60f54ea1a742a6db78dfa8c720b06a50c4f7557a9677ecdf69d715228130f3b5daf2f6ffd7d55ce72e124be84bc925a89167299d8c41eee2d43b7993230b085de8b7ca61c54b3ffe30b244ddc43190561711c2b9bd24771228428ad9d36cb5e379e214f9415e38250e4a2b35585e", 0x8a) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) 1m11.699686927s ago: executing program 5 (id=3591): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0xfff2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000000c0), 0x4) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200000000000800030000000000080004"], 0x7c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast2, 0x4}, 0x1c) r15 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x4a54}]}) r16 = socket(0xa, 0x5, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000140)) r17 = epoll_create(0x18) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r16, &(0x7f0000004940)={0x10000004}) write$binfmt_script(r11, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) r20 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r20, 0x0, 0x0, 0x20000, &(0x7f0000000040)={0x11, 0xc, r19, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1m10.925163264s ago: executing program 0 (id=3592): socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x19, &(0x7f000001f700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb880e00"/25], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0x10, 0x80002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m10.41083335s ago: executing program 4 (id=3593): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x255fdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000080)={0x1000, 0x5, 0x9, 0x5fb}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x100}) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x170bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff1}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xc}}, @TCA_FW_MASK={0x8, 0x5, 0x856}, @TCA_FW_INDEV={0x14, 0x3, 'vcan0\x00'}, @TCA_FW_MASK={0xfffffffffffffc62, 0x5, 0x10000}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m8.647142771s ago: executing program 2 (id=3594): socket(0x11, 0x3, 0x300) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x2, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e000024000280080002400000080008000140000000080800034000000000080004400000ff460900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x4044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7, 0xfffffffe}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000000)='Q') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0xa, 0xff, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000380)) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x40, 0x2, 0x0, 0x0, 0x3}) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r7, @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r8, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004940)=""/255, 0xff}, {&(0x7f00000019c0)=""/4097, 0x1001}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x3}}], 0x1, 0x0, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) epoll_create1(0x0) 1m8.045366629s ago: executing program 3 (id=3595): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x222440, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, 0x0, 0x22000054) (async, rerun: 32) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (async, rerun: 32) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) (async) mq_open(&(0x7f00000004c0)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DvF\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b\x95\xcdq\xcc\xe6\x91X\xd6\xcc\xea$\xfd\xc4\n\x01&\x8d\xd2\x02\x83\x18(+\'4xq\xfebM\x84\x16+4\xc6Wf\xba\xb9\xaf\xac\xfe\x99\x95\x97[\x9bb\xd2\xfdr\x84&\x94\x7fcV\xa8m\\\x9bP\xfbFf\x0f \xd8R\xc9X+N\x9d\xbfx\xd0EZY\xea\\\xc1\x86{?jm\xec\x1b\x16\x83\xdeR~\x92\x8cg(@\xb3\xb2\x97\xdf\x1b\x9b\xcdtJw~\x99jd(\x034\xaa\x967\xd6OW# \xc3\xbf\xf2z\xf4\x8f\x91\xe3', 0x40, 0x80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xfffe) (async) semget$private(0x0, 0x3, 0x4) (async) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async, rerun: 32) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x1, 0x5}}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}]}, &(0x7f0000000040)=0x10) 1m7.550146154s ago: executing program 4 (id=3596): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r3, 0x0, 0x714f, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@s={0x5, @generic=0xa8, 0x3, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf25020000cdfe0000010200010008000600fe7f00000500150002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r5 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x288800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m6.79198305s ago: executing program 5 (id=3597): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d", 0x6c}) 1m4.889954426s ago: executing program 4 (id=3598): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) unshare(0x64000600) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aac", 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000003f0000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002480)={[0x114, 0x9, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x10045c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x80000004000000, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80000) r9 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x8, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 33 (id=3592): socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x19, &(0x7f000001f700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb880e00"/25], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0x10, 0x80002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0B00:00: Alarms can be up to one day in the future [ 870.776042][T15219] rtc rtc0: __rtc_set_alarm: err=-22 [ 871.027594][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 871.029323][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 871.029350][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 871.029437][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 871.294068][T15212] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 871.314414][T15205] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 871.426398][T15219] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 871.459409][T15212] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 871.464296][T15205] usb 3-1: Using ep0 maxpacket: 16 [ 871.480120][T15212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.480150][T15212] usb 6-1: Product: syz [ 871.480167][T15212] usb 6-1: Manufacturer: syz [ 871.480184][T15212] usb 6-1: SerialNumber: syz [ 871.487932][T15205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 871.488071][T15205] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 871.499297][T15205] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.499368][T15205] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 871.533419][T15205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.533493][T15205] usb 3-1: Product: syz [ 871.533541][T15205] usb 3-1: Manufacturer: syz [ 871.533583][T15205] usb 3-1: SerialNumber: syz [ 871.579828][T15212] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 871.613644][T15212] scsi host1: usb-storage 6-1:1.0 [ 871.635858][T15219] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 871.637299][T15219] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 871.637327][T15219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.637350][T15219] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 871.637403][T15219] usb 4-1: config 0 has no interface number 0 [ 871.637423][T15219] usb 4-1: config 0 has no interface number 1 [ 871.637482][T15219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.641585][T15219] usb 4-1: config 0 descriptor?? [ 871.739117][T15219] usb 4-1: unknown number of interfaces: 2 [ 871.801937][T18176] FAULT_INJECTION: forcing a failure. [ 871.801937][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 871.801980][T18176] CPU: 1 UID: 0 PID: 18176 Comm: syz.0.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.802016][T18176] Tainted: [L]=SOFTLOCKUP [ 871.802025][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.802040][T18176] Call Trace: [ 871.802049][T18176] [ 871.802060][T18176] dump_stack_lvl+0xe8/0x150 [ 871.802113][T18176] should_fail_ex+0x410/0x560 [ 871.802164][T18176] should_failslab+0xa8/0x100 [ 871.802196][T18176] __kmalloc_noprof+0xfe/0x720 [ 871.802220][T18176] ? iovec_from_user+0x87/0x250 [ 871.802247][T18176] ? iovec_from_user+0x87/0x250 [ 871.802281][T18176] iovec_from_user+0x87/0x250 [ 871.802315][T18176] __import_iovec+0x15e/0x7e0 [ 871.802362][T18176] import_iovec+0x73/0xa0 [ 871.802395][T18176] ___sys_recvmsg+0x4c9/0x5a0 [ 871.802435][T18176] ? __pfx____sys_recvmsg+0x10/0x10 [ 871.802473][T18176] ? lock_acquire+0x115/0x350 [ 871.802514][T18176] ? __fget_files+0x3a2/0x420 [ 871.802557][T18176] __x64_sys_recvmsg+0x1ae/0x290 [ 871.802594][T18176] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 871.802648][T18176] do_syscall_64+0x166/0x520 [ 871.802675][T18176] ? trace_irq_disable+0x3b/0x140 [ 871.802699][T18176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.802725][T18176] ? clear_bhb_loop+0x70/0xc0 [ 871.802754][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.802779][T18176] RIP: 0033:0x7f63aa19e159 [ 871.802801][T18176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.802857][T18176] RSP: 002b:00007f63aaf7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 871.802884][T18176] RAX: ffffffffffffffda RBX: 00007f63aa426180 RCX: 00007f63aa19e159 [ 871.802902][T18176] RDX: 0000000000000123 RSI: 0000200000001480 RDI: 0000000000000006 [ 871.802918][T18176] RBP: 00007f63aaf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 871.802934][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.802948][T18176] R13: 00007f63aa426218 R14: 00007f63aa426180 R15: 00007f63aa54fa48 [ 871.802984][T18176] [ 871.864794][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 872.034165][ T10] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 872.053545][ T10] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 872.053589][ T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 872.053612][ T10] usb 5-1: config 0 has no interface number 0 [ 872.053628][ T10] usb 5-1: config 0 has no interface number 1 [ 872.053695][ T10] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 872.053740][ T10] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 872.053772][ T10] usb 5-1: config 0 interface 3 has no altsetting 0 [ 872.053835][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.114860][ T10] usb 5-1: config 0 descriptor?? [ 872.202544][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.213125][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.327923][T15212] ums_eneub6250 6-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 872.331281][T15212] usb 6-1: USB disconnect, device number 42 [ 872.972577][T18192] FAULT_INJECTION: forcing a failure. [ 872.972577][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 872.972628][T18192] CPU: 1 UID: 0 PID: 18192 Comm: syz.5.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.972659][T18192] Tainted: [L]=SOFTLOCKUP [ 872.972668][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.972681][T18192] Call Trace: [ 872.972691][T18192] [ 872.972707][T18192] dump_stack_lvl+0xe8/0x150 [ 872.972737][T18192] should_fail_ex+0x410/0x560 [ 872.972781][T18192] should_failslab+0xa8/0x100 [ 872.972811][T18192] ? vm_area_dup+0x28/0x760 [ 872.972845][T18192] kmem_cache_alloc_noprof+0xa1/0x600 [ 872.972881][T18192] ? vm_area_dup+0x28/0x760 [ 872.972924][T18192] vm_area_dup+0x28/0x760 [ 872.972959][T18192] ? dup_mmap+0x6b5/0x1dc0 [ 872.972994][T18192] dup_mmap+0x87d/0x1dc0 [ 872.973046][T18192] ? __pfx_dup_mmap+0x10/0x10 [ 872.973087][T18192] ? do_raw_spin_lock+0x12b/0x2f0 [ 872.973135][T18192] ? lock_acquire+0x115/0x350 [ 872.973185][T18192] copy_mm+0x11a/0x480 [ 872.973210][T18192] ? copy_process+0xd3c/0x43e0 [ 872.973248][T18192] copy_process+0x1e75/0x43e0 [ 872.973288][T18192] ? copy_process+0xd3c/0x43e0 [ 872.973340][T18192] ? __pfx_copy_process+0x10/0x10 [ 872.973372][T18192] kernel_clone+0x2d7/0x940 [ 872.973421][T18192] ? __pfx_kernel_clone+0x10/0x10 [ 872.973474][T18192] __se_sys_clone3+0x33c/0x360 [ 872.973507][T18192] ? ksys_write+0x1e6/0x270 [ 872.973532][T18192] ? __pfx___se_sys_clone3+0x10/0x10 [ 872.973592][T18192] ? __fget_files+0x3a2/0x420 [ 872.973658][T18192] do_syscall_64+0x166/0x520 [ 872.973679][T18192] ? trace_irq_disable+0x3b/0x140 [ 872.973709][T18192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.973734][T18192] ? clear_bhb_loop+0x70/0xc0 [ 872.973763][T18192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.973786][T18192] RIP: 0033:0x7fa6acf9e159 [ 872.973811][T18192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.973825][T18192] RSP: 002b:00007fa6ade5aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 872.973843][T18192] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa6acf9e159 [ 872.973870][T18192] RDX: 00007fa6ade5af10 RSI: 0000000000000058 RDI: 00007fa6ade5af10 [ 872.973887][T18192] RBP: 00007fa6ade5b090 R08: 0000000000000000 R09: 0000000000000058 [ 872.973902][T18192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.973916][T18192] R13: 00007fa6ad226038 R14: 00007fa6ad225fa0 R15: 00007fa6ad34fa48 [ 872.973953][T18192] [ 873.774093][T16617] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 873.928195][T16617] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 873.932986][T16617] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 873.970614][T16617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 873.970648][T16617] usb 6-1: Product: syz [ 873.970664][T16617] usb 6-1: Manufacturer: syz [ 873.970680][T16617] usb 6-1: SerialNumber: syz [ 874.091105][T15205] usb 3-1: 0:2 : does not exist [ 874.091728][T15205] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 874.123865][T15205] usb 3-1: cannot find UAC_HEADER [ 874.292473][T16617] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 874.345500][ T5693] usb 4-1: USB disconnect, device number 113 [ 874.489581][T15205] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 874.512793][T15205] usb 3-1: USB disconnect, device number 30 [ 874.554649][ T10] usb 5-1: Could not set interface, error -71 [ 874.602171][ T10] usb 5-1: selecting invalid altsetting 0 [ 874.602190][ T10] usb 5-1: Could not set interface, error -22 [ 874.660172][ T6450] udevd[6450]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.661527][ T10] usb 5-1: USB disconnect, device number 19 [ 874.908222][T18209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.908416][T18209] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.911006][T18209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.911196][T18209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.911282][T18209] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 875.000656][T18209] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 875.017567][T18209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 875.017836][T18209] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 875.024487][T18209] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 875.593319][T18224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3392'. [ 875.886269][T18226] FAULT_INJECTION: forcing a failure. [ 875.886269][T18226] name failslab, interval 1, probability 0, space 0, times 0 [ 875.886311][T18226] CPU: 1 UID: 0 PID: 18226 Comm: syz.2.3394 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.886344][T18226] Tainted: [L]=SOFTLOCKUP [ 875.886353][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.886368][T18226] Call Trace: [ 875.886377][T18226] [ 875.886388][T18226] dump_stack_lvl+0xe8/0x150 [ 875.886427][T18226] should_fail_ex+0x410/0x560 [ 875.886460][T18226] should_failslab+0xa8/0x100 [ 875.886495][T18226] ? vm_area_dup+0x28/0x760 [ 875.886531][T18226] kmem_cache_alloc_noprof+0xa1/0x600 [ 875.886570][T18226] ? vm_area_dup+0x28/0x760 [ 875.886613][T18226] vm_area_dup+0x28/0x760 [ 875.886648][T18226] ? dup_mmap+0x875/0x1dc0 [ 875.886685][T18226] dup_mmap+0x87d/0x1dc0 [ 875.886739][T18226] ? __pfx_dup_mmap+0x10/0x10 [ 875.886778][T18226] ? do_raw_spin_lock+0x12b/0x2f0 [ 875.886812][T18226] ? lock_acquire+0x115/0x350 [ 875.886842][T18226] copy_mm+0x11a/0x480 [ 875.886866][T18226] ? copy_process+0xd3c/0x43e0 [ 875.886885][T18226] copy_process+0x1e75/0x43e0 [ 875.886913][T18226] ? copy_process+0xd3c/0x43e0 [ 875.886980][T18226] ? __pfx_copy_process+0x10/0x10 [ 875.887026][T18226] kernel_clone+0x2d7/0x940 [ 875.887066][T18226] ? __pfx_kernel_clone+0x10/0x10 [ 875.887120][T18226] __se_sys_clone3+0x33c/0x360 [ 875.887153][T18226] ? ksys_write+0x1e6/0x270 [ 875.887190][T18226] ? __pfx___se_sys_clone3+0x10/0x10 [ 875.887229][T18226] ? __fget_files+0x3a2/0x420 [ 875.887266][T18226] ? __pfx_ksys_write+0x10/0x10 [ 875.887299][T18226] do_syscall_64+0x166/0x520 [ 875.887317][T18226] ? trace_irq_disable+0x3b/0x140 [ 875.887337][T18226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.887354][T18226] ? clear_bhb_loop+0x70/0xc0 [ 875.887374][T18226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.887391][T18226] RIP: 0033:0x7ffbdb19e159 [ 875.887406][T18226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.887420][T18226] RSP: 002b:00007ffbdc143ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 875.887438][T18226] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ffbdb19e159 [ 875.887450][T18226] RDX: 00007ffbdc143f10 RSI: 0000000000000058 RDI: 00007ffbdc143f10 [ 875.887467][T18226] RBP: 00007ffbdc144090 R08: 0000000000000000 R09: 0000000000000058 [ 875.887478][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 875.887488][T18226] R13: 00007ffbdb426038 R14: 00007ffbdb425fa0 R15: 00007ffbdb54fa48 [ 875.887513][T18226] [ 876.813055][ T10] usb 6-1: USB disconnect, device number 43 [ 876.824469][T15212] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 876.848982][ T10] usblp0: removed [ 876.974513][T15212] usb 1-1: Using ep0 maxpacket: 32 [ 876.975571][T15212] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 876.977391][T15212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.977430][T15212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.977454][T15212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 876.977499][T15212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.984592][T13413] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.984641][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 876.984653][T13413] Bluetooth: hci1: command 0x0c1a tx timeout [ 876.984736][T13332] Bluetooth: hci2: command 0x0c1a tx timeout [ 877.043665][T15212] usb 1-1: config 0 descriptor?? [ 877.068817][T13332] Bluetooth: hci4: command 0x0c1a tx timeout [ 877.947585][T15212] usbhid 1-1:0.0: can't add hid device: -71 [ 877.947706][T15212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 877.974461][T15212] usb 1-1: USB disconnect, device number 16 [ 878.016982][T18264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3403'. [ 878.740773][T18279] FAULT_INJECTION: forcing a failure. [ 878.740773][T18279] name failslab, interval 1, probability 0, space 0, times 0 [ 878.740816][T18279] CPU: 0 UID: 0 PID: 18279 Comm: syz.4.3406 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.740849][T18279] Tainted: [L]=SOFTLOCKUP [ 878.740859][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.740874][T18279] Call Trace: [ 878.740883][T18279] [ 878.740894][T18279] dump_stack_lvl+0xe8/0x150 [ 878.740934][T18279] should_fail_ex+0x410/0x560 [ 878.740967][T18279] should_failslab+0xa8/0x100 [ 878.740997][T18279] ? anon_vma_fork+0x88/0x540 [ 878.741031][T18279] kmem_cache_alloc_noprof+0xa1/0x600 [ 878.741066][T18279] ? trace_kmem_cache_alloc+0x29/0xe0 [ 878.741100][T18279] ? vm_area_dup+0x28/0x760 [ 878.741143][T18279] ? anon_vma_fork+0x88/0x540 [ 878.741185][T18279] anon_vma_fork+0x88/0x540 [ 878.741221][T18279] ? anon_vma_name+0x61/0x210 [ 878.741246][T18279] ? dup_userfaultfd+0xa7/0x610 [ 878.741278][T18279] ? dup_mmap+0x875/0x1dc0 [ 878.741315][T18279] dup_mmap+0x954/0x1dc0 [ 878.741369][T18279] ? __pfx_dup_mmap+0x10/0x10 [ 878.741406][T18279] ? do_raw_spin_lock+0x12b/0x2f0 [ 878.741455][T18279] ? lock_acquire+0x115/0x350 [ 878.741500][T18279] copy_mm+0x11a/0x480 [ 878.741534][T18279] ? copy_process+0xd3c/0x43e0 [ 878.741564][T18279] copy_process+0x1e75/0x43e0 [ 878.741605][T18279] ? copy_process+0xd3c/0x43e0 [ 878.741658][T18279] ? __pfx_copy_process+0x10/0x10 [ 878.741704][T18279] kernel_clone+0x2d7/0x940 [ 878.741744][T18279] ? __pfx_kernel_clone+0x10/0x10 [ 878.741799][T18279] __se_sys_clone3+0x33c/0x360 [ 878.741833][T18279] ? ksys_write+0x1e6/0x270 [ 878.741869][T18279] ? __pfx___se_sys_clone3+0x10/0x10 [ 878.741918][T18279] ? __fget_files+0x3a2/0x420 [ 878.741968][T18279] ? __pfx_ksys_write+0x10/0x10 [ 878.742017][T18279] do_syscall_64+0x166/0x520 [ 878.742043][T18279] ? trace_irq_disable+0x3b/0x140 [ 878.742067][T18279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.742092][T18279] ? clear_bhb_loop+0x70/0xc0 [ 878.742129][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.742154][T18279] RIP: 0033:0x7f56a619e159 [ 878.742176][T18279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.742197][T18279] RSP: 002b:00007f56a706fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 878.742223][T18279] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f56a619e159 [ 878.742240][T18279] RDX: 00007f56a706ff10 RSI: 0000000000000058 RDI: 00007f56a706ff10 [ 878.742257][T18279] RBP: 00007f56a7070090 R08: 0000000000000000 R09: 0000000000000058 [ 878.742272][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.742287][T18279] R13: 00007f56a6426038 R14: 00007f56a6425fa0 R15: 00007f56a654fa48 [ 878.742324][T18279] [ 879.064293][T13332] Bluetooth: hci0: command 0x0c1a tx timeout [ 879.144524][T13332] Bluetooth: hci4: command 0x0c1a tx timeout [ 879.240887][T18293] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3411'. [ 879.278208][ T31] audit: type=1800 audit(1789237844.423:10669): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3404" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 879.364453][T15205] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 879.494064][T15205] usb 6-1: device descriptor read/64, error -71 [ 879.627109][T15212] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 879.681956][T18302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3413'. [ 879.698817][T18302] FAULT_INJECTION: forcing a failure. [ 879.698817][T18302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.698844][T18302] CPU: 0 UID: 0 PID: 18302 Comm: syz.0.3413 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.698866][T18302] Tainted: [L]=SOFTLOCKUP [ 879.698872][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.698885][T18302] Call Trace: [ 879.698895][T18302] [ 879.698902][T18302] dump_stack_lvl+0xe8/0x150 [ 879.698930][T18302] should_fail_ex+0x410/0x560 [ 879.698952][T18302] _copy_from_user+0x2d/0xb0 [ 879.698973][T18302] __sys_bind+0x1c6/0x410 [ 879.698993][T18302] ? __pfx___sys_bind+0x10/0x10 [ 879.699019][T18302] ? __pfx_ksys_write+0x10/0x10 [ 879.699049][T18302] __x64_sys_bind+0x7a/0x90 [ 879.699067][T18302] do_syscall_64+0x166/0x520 [ 879.699085][T18302] ? trace_irq_disable+0x3b/0x140 [ 879.699102][T18302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.699119][T18302] ? clear_bhb_loop+0x70/0xc0 [ 879.699138][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.699155][T18302] RIP: 0033:0x7f63aa19e159 [ 879.699169][T18302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.699183][T18302] RSP: 002b:00007f63aafa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 879.699201][T18302] RAX: ffffffffffffffda RBX: 00007f63aa426090 RCX: 00007f63aa19e159 [ 879.699213][T18302] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 879.699224][T18302] RBP: 00007f63aafa0090 R08: 0000000000000000 R09: 0000000000000000 [ 879.699234][T18302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.699244][T18302] R13: 00007f63aa426128 R14: 00007f63aa426090 R15: 00007f63aa54fa48 [ 879.699268][T18302] [ 879.734278][T15205] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 879.754096][T15212] usb 5-1: device descriptor read/64, error -71 [ 879.865843][T15205] usb 6-1: device descriptor read/64, error -71 [ 879.934220][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 879.974396][T15205] usb usb6-port1: attempt power cycle [ 879.997340][T15212] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 880.085175][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.086289][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.086322][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.086355][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.086401][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.091745][ T10] usb 1-1: config 0 descriptor?? [ 880.150231][T15212] usb 5-1: device descriptor read/64, error -71 [ 880.254617][T15212] usb usb5-port1: attempt power cycle [ 880.317000][T15205] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 880.337497][T15205] usb 6-1: device descriptor read/8, error -71 [ 880.532565][ T10] plantronics 0003:047F:FFFF.0077: reserved main item tag 0xd [ 880.569132][ T10] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 880.574380][T15205] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 880.596441][T15205] usb 6-1: device descriptor read/8, error -71 [ 880.614048][T15212] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 880.634913][T15212] usb 5-1: device descriptor read/8, error -71 [ 880.704380][T15205] usb usb6-port1: unable to enumerate USB device [ 880.800652][T18302] syzkaller1: entered promiscuous mode [ 880.800677][T18302] syzkaller1: entered allmulticast mode [ 880.874039][T15212] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 880.894783][T15212] usb 5-1: device descriptor read/8, error -71 [ 881.004875][T15212] usb usb5-port1: unable to enumerate USB device [ 881.134146][T15205] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 881.144160][T13332] Bluetooth: hci0: command 0x0c1a tx timeout [ 881.234314][T13332] Bluetooth: hci4: command 0x0c1a tx timeout [ 881.283998][T15205] usb 4-1: Using ep0 maxpacket: 32 [ 881.284889][T15205] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 881.286244][T15205] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 881.286269][T15205] usb 4-1: config 0 has no interface number 0 [ 881.286314][T15205] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 881.288222][T15205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.288241][T15205] usb 4-1: Product: syz [ 881.288252][T15205] usb 4-1: Manufacturer: syz [ 881.288264][T15205] usb 4-1: SerialNumber: syz [ 881.291851][T15205] usb 4-1: config 0 descriptor?? [ 881.300611][T18326] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 881.559938][T18320] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 881.954102][ T10] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 882.783311][T18337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.264206][ T10] usb 1-1: device descriptor read/64, error -71 [ 883.425186][T15212] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 883.504078][ T10] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 883.586606][T15212] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 883.587860][T15212] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 883.593441][T15212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.593471][T15212] usb 6-1: Product: à  [ 883.593489][T15212] usb 6-1: Manufacturer: ж [ 883.593506][T15212] usb 6-1: SerialNumber: syz [ 883.657042][ T10] usb 1-1: device firmware changed [ 883.657790][ T5693] usb 1-1: USB disconnect, device number 17 [ 883.773298][T18361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3430'. [ 883.852190][T15212] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 883.862009][ T5693] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 883.894266][T15219] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 884.005698][ T5693] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 884.006465][ T5693] usb 1-1: config 187 has no interfaces? [ 884.008550][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.008577][ T5693] usb 1-1: Product: syz [ 884.008595][ T5693] usb 1-1: Manufacturer: syz [ 884.008612][ T5693] usb 1-1: SerialNumber: syz [ 884.052972][T15212] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 884.060890][T15219] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 884.065738][T15219] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 884.065847][T15219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 884.065938][T15219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.106011][T15219] usb 5-1: config 0 descriptor?? [ 884.107009][T18359] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 884.115258][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 884.200927][T15212] usb 6-1: USB disconnect, device number 48 [ 884.241990][ T5693] usb 1-1: USB disconnect, device number 18 [ 884.286174][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 884.288108][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 884.290201][ T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 884.290229][ T10] usb 3-1: config 0 has no interface number 0 [ 884.290302][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 884.290332][ T10] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.290357][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.290383][ T10] usb 3-1: config 0 interface 196 has no altsetting 0 [ 884.293824][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.293852][ T10] usb 3-1: Product: syz [ 884.293869][ T10] usb 3-1: Manufacturer: syz [ 884.340349][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.345706][ T10] usb 3-1: SerialNumber: syz [ 884.412201][ T10] usb 3-1: config 0 descriptor?? [ 884.421730][T18363] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 884.457584][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 884.482815][T15205] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 884.482874][T15205] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 884.483146][T15205] asix 4-1:0.188: probe with driver asix failed with error -71 [ 884.533686][T15205] usb 4-1: USB disconnect, device number 114 [ 884.836967][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3431'. [ 884.837089][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 884.942438][T18363] bridge0: port 3(veth1_to_bridge) entered blocking state [ 884.943866][T18363] bridge0: port 3(veth1_to_bridge) entered disabled state [ 884.960290][T18363] veth1_to_bridge: entered allmulticast mode [ 884.978109][T18363] veth1_to_bridge: entered promiscuous mode [ 884.978388][T18363] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 885.008703][T18363] bridge0: port 3(veth1_to_bridge) entered blocking state [ 885.008854][T18363] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 885.134330][ T10] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 885.134606][ T10] ipheth 3-1:0.196: probe with driver ipheth failed with error -110 [ 885.238410][T18374] syzkaller1: entered promiscuous mode [ 885.238437][T18374] syzkaller1: entered allmulticast mode [ 885.302101][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.315875][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.422120][T15212] usb 3-1: USB disconnect, device number 31 [ 885.754131][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 885.907348][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 885.911796][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 885.911830][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 885.911859][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 885.911887][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 885.969790][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.969821][ T10] usb 4-1: Product: syz [ 885.969838][ T10] usb 4-1: Manufacturer: syz [ 885.969855][ T10] usb 4-1: SerialNumber: syz [ 885.999231][ T10] usb 4-1: config 0 descriptor?? [ 886.013840][ T10] iguanair 4-1:0.0: failed to get version [ 886.020223][ T10] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 886.135838][T18389] tipc: Started in network mode [ 886.135873][T18389] tipc: Node identity bed2a317ba84, cluster identity 4711 [ 886.138466][T18389] tipc: Enabled bearer , priority 0 [ 886.139366][T18389] syzkaller0: entered promiscuous mode [ 886.139390][T18389] syzkaller0: entered allmulticast mode [ 886.255969][T18389] tipc: Resetting bearer [ 886.276439][T18388] tipc: Resetting bearer [ 886.320077][T18388] tipc: Disabling bearer [ 886.425109][T18379] net_ratelimit: 14 callbacks suppressed [ 886.425131][T18379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 886.427350][T18392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 886.429792][ T10] usb 4-1: USB disconnect, device number 115 [ 886.562918][T18402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3442'. [ 886.766806][T15219] usbhid 5-1:0.0: can't add hid device: -71 [ 886.766916][T15219] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 886.799091][T15219] usb 5-1: USB disconnect, device number 24 [ 887.157612][T18419] FAULT_INJECTION: forcing a failure. [ 887.157612][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 887.157660][T18419] CPU: 1 UID: 0 PID: 18419 Comm: syz.5.3448 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.157695][T18419] Tainted: [L]=SOFTLOCKUP [ 887.157705][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.157719][T18419] Call Trace: [ 887.157728][T18419] [ 887.157739][T18419] dump_stack_lvl+0xe8/0x150 [ 887.157782][T18419] should_fail_ex+0x410/0x560 [ 887.157815][T18419] should_failslab+0xa8/0x100 [ 887.157848][T18419] __kvmalloc_node_noprof+0x176/0x820 [ 887.157874][T18419] ? rcu_is_watching+0x16/0xb0 [ 887.157904][T18419] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 887.157932][T18419] ? trace_kmalloc+0x2a/0xf0 [ 887.157966][T18419] ? call_instance+0x263/0x560 [ 887.157990][T18419] ? call_instance+0x263/0x560 [ 887.158022][T18419] call_instance+0x263/0x560 [ 887.158056][T18419] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 887.158085][T18419] ? __asan_memset+0x22/0x50 [ 887.158152][T18419] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 887.158187][T18419] ? __kvmalloc_node_noprof+0x345/0x820 [ 887.158212][T18419] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 887.158238][T18419] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 887.158274][T18419] bpf_compute_live_registers+0x8d3/0x1ff0 [ 887.158322][T18419] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 887.158363][T18419] bpf_check+0x25ed/0x2e10 [ 887.158401][T18419] ? ktime_get_with_offset+0x93/0x2d0 [ 887.158431][T18419] ? __pfx_bpf_check+0x10/0x10 [ 887.158460][T18419] ? bpf_obj_name_cpy+0x194/0x1e0 [ 887.158498][T18419] bpf_prog_load+0x14d6/0x1c20 [ 887.158539][T18419] ? __pfx_bpf_prog_load+0x10/0x10 [ 887.158593][T18419] __sys_bpf+0xd0d/0xd90 [ 887.158630][T18419] ? __pfx___sys_bpf+0x10/0x10 [ 887.158677][T18419] ? __fget_files+0x2a/0x420 [ 887.158735][T18419] ? ksys_write+0x242/0x270 [ 887.158773][T18419] ? __pfx_ksys_write+0x10/0x10 [ 887.158813][T18419] __x64_sys_bpf+0xba/0xd0 [ 887.158840][T18419] do_syscall_64+0x166/0x520 [ 887.158867][T18419] ? trace_irq_disable+0x3b/0x140 [ 887.158891][T18419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.158916][T18419] ? clear_bhb_loop+0x70/0xc0 [ 887.158945][T18419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.158969][T18419] RIP: 0033:0x7fa6acf9e159 [ 887.158992][T18419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.159011][T18419] RSP: 002b:00007fa6ade5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 887.159037][T18419] RAX: ffffffffffffffda RBX: 00007fa6ad225fa0 RCX: 00007fa6acf9e159 [ 887.159055][T18419] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 887.159071][T18419] RBP: 00007fa6ade5b090 R08: 0000000000000000 R09: 0000000000000000 [ 887.159087][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.159102][T18419] R13: 00007fa6ad226038 R14: 00007fa6ad225fa0 R15: 00007fa6ad34fa48 [ 887.159138][T18419] [ 887.646880][T18423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.720027][T18433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.054102][T15219] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 888.204940][T15219] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.206303][T15219] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 888.206343][T15219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 888.206364][T15219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 888.207388][T15219] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.207419][T15219] usb 3-1: Manufacturer: syz [ 888.210011][T15219] usb 3-1: config 0 descriptor?? [ 888.224385][T15205] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 888.375029][T15205] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 888.376359][T15205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.376391][T15205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.376432][T15205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.387379][T15205] usb 6-1: config 0 descriptor?? [ 888.439874][T15219] usb 3-1: USB disconnect, device number 32 [ 888.854571][T15205] hid_parser_main: 129 callbacks suppressed [ 888.854831][T15205] playstation 0003:054C:0DF2.0078: unknown main item tag 0x0 [ 888.854870][T15205] playstation 0003:054C:0DF2.0078: unknown main item tag 0x0 [ 888.854911][T15205] playstation 0003:054C:0DF2.0078: unknown main item tag 0x0 [ 888.854938][T15205] playstation 0003:054C:0DF2.0078: unknown main item tag 0x0 [ 888.854966][T15205] playstation 0003:054C:0DF2.0078: unknown main item tag 0x0 [ 888.860857][T15205] playstation 0003:054C:0DF2.0078: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 889.164156][ T5693] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 889.294173][ T5693] usb 4-1: device descriptor read/64, error -71 [ 889.534159][ T5693] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 889.675026][ T5693] usb 4-1: device descriptor read/64, error -71 [ 889.784543][ T5693] usb usb4-port1: attempt power cycle [ 889.993892][T18473] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.015976][T15219] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 890.126044][ T5693] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 890.150036][ T5693] usb 4-1: device descriptor read/8, error -71 [ 890.174966][T15219] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 890.176447][T15219] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 890.176475][T15219] usb 5-1: config 0 has no interface number 0 [ 890.176520][T15219] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 890.176551][T15219] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 890.181704][T15219] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 890.181734][T15219] usb 5-1: Product: syz [ 890.181751][T15219] usb 5-1: SerialNumber: syz [ 890.253588][T15219] usb 5-1: config 0 descriptor?? [ 890.259560][T18471] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 890.273679][T15219] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 890.298022][T15219] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input99 [ 890.388509][ T5693] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 890.405703][ T5693] usb 4-1: device descriptor read/8, error -71 [ 890.517367][ T5693] usb usb4-port1: unable to enumerate USB device [ 891.370374][T18486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.371010][T18486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.619320][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.621552][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.621775][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.622011][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.622252][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.622475][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.622700][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.622926][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.623152][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.623382][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 891.626869][T15194] usb 5-1: USB disconnect, device number 25 [ 891.631195][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 891.731040][T15194] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 891.823131][T15205] playstation 0003:054C:0DF2.0078: Failed to retrieve feature with reportID 5: -71 [ 891.823168][T15205] playstation 0003:054C:0DF2.0078: Failed to retrieve DualSense calibration info: -71 [ 891.823228][T15205] playstation 0003:054C:0DF2.0078: Failed to get calibration data from DualSense [ 891.823252][T15205] playstation 0003:054C:0DF2.0078: Failed to create dualsense. [ 891.893610][T15205] playstation 0003:054C:0DF2.0078: probe with driver playstation failed with error -71 [ 891.943706][T15205] usb 6-1: USB disconnect, device number 49 [ 892.551674][T18505] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3471'. [ 892.651142][T18499] syzkaller0: entered allmulticast mode [ 892.659207][T18513] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3472'. [ 892.716523][T18514] Cannot find set identified by id 1 to match [ 892.864783][T15219] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 892.924034][T15212] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 892.974162][T15216] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 893.015245][T15219] usb 1-1: Using ep0 maxpacket: 32 [ 893.016007][T15219] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 893.017030][T15219] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 893.017076][T15219] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 893.019596][T15219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.019634][T15219] usb 1-1: Product: syz [ 893.019652][T15219] usb 1-1: Manufacturer: syz [ 893.019669][T15219] usb 1-1: SerialNumber: syz [ 893.085065][T15212] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 893.090480][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.090504][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.090520][T15212] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 893.090549][T15212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.093740][T15212] usb 6-1: config 0 descriptor?? [ 893.155020][T15216] usb 3-1: Using ep0 maxpacket: 16 [ 893.156574][T15216] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 893.158006][T15216] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 893.158032][T15216] usb 3-1: config 0 has no interface number 0 [ 893.161713][T15216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.161731][T15216] usb 3-1: Product: syz [ 893.161742][T15216] usb 3-1: Manufacturer: syz [ 893.161753][T15216] usb 3-1: SerialNumber: syz [ 893.205259][T15216] usb 3-1: config 0 descriptor?? [ 893.231730][T15216] hub 3-1:0.132: bad descriptor, ignoring hub [ 893.231795][T15216] hub 3-1:0.132: probe with driver hub failed with error -5 [ 893.255004][T15216] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input100 [ 893.295150][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.296891][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.436538][T15219] usb 1-1: Fast Track Pro switching to config #2 [ 893.495163][T15219] usb 1-1: USB disconnect, device number 19 [ 893.498592][T18505] netlink: 'syz.2.3471': attribute type 4 has an invalid length. [ 893.498614][T18505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3471'. [ 893.571866][T18505] .`: renamed from bond0 (while UP) [ 893.625393][T15212] plantronics 0003:047F:FFFF.0079: reserved main item tag 0xd [ 893.668378][T15212] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 893.799795][T18524] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 893.879646][T18524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 893.891973][T18513] syzkaller1: entered promiscuous mode [ 893.891992][T18513] syzkaller1: entered allmulticast mode [ 893.935189][T18526] bond5: (slave veth3): Enslaving as an active interface with a down link [ 893.943978][T18524] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 893.953646][T18524] bond5: (slave batadv1): making interface the new active one [ 893.969781][T18524] batadv1: entered promiscuous mode [ 893.971636][T18524] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 894.028115][T18524] veth5: entered allmulticast mode [ 894.031479][T18524] bond5: (slave veth5): Enslaving as an active interface with a down link [ 894.514225][T15219] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 894.654048][T15219] usb 5-1: device descriptor read/64, error -71 [ 894.844000][T18545] loop5: detected capacity change from 0 to 7 [ 894.855298][T18545] Dev loop5: unable to read RDB block 7 [ 894.855334][T18545] loop5: AHDI p1 p2 p4 [ 894.855356][T18545] loop5: partition table partially beyond EOD, truncated [ 894.855681][T18545] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 894.859852][T18545] loop5: p4 start 3288604672 is beyond EOD, truncated [ 894.904154][T15219] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 894.924406][T15216] usb 6-1: reset high-speed USB device number 50 using dummy_hcd [ 895.034022][T15219] usb 5-1: device descriptor read/64, error -71 [ 895.154654][T15219] usb usb5-port1: attempt power cycle [ 895.505096][T15219] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 895.538838][T15219] usb 5-1: device descriptor read/8, error -71 [ 895.794009][T15219] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 895.831630][T15219] usb 5-1: device descriptor read/8, error -71 [ 895.945771][T15219] usb usb5-port1: unable to enumerate USB device [ 896.004254][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 896.004322][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 896.467982][T15214] usb 6-1: USB disconnect, device number 50 [ 896.524499][T15205] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 896.679963][T15205] usb 1-1: unable to get BOS descriptor or descriptor too short [ 896.680673][T15205] usb 1-1: not running at top speed; connect to a high speed hub [ 896.680707][T15205] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 896.682224][T15205] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 896.682264][T15205] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 896.682280][T15205] usb 1-1: config 14 has no interface number 0 [ 896.682293][T15205] usb 1-1: config 14 has no interface number 1 [ 896.682337][T15205] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 896.682355][T15205] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 896.682374][T15205] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 896.682394][T15205] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.682414][T15205] usb 1-1: config 14 interface 57 has no altsetting 0 [ 896.682428][T15205] usb 1-1: config 14 interface 228 has no altsetting 0 [ 896.780501][T15205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.780523][T15205] usb 1-1: Product: syz [ 896.780535][T15205] usb 1-1: Manufacturer: syz [ 896.780546][T15205] usb 1-1: SerialNumber: syz [ 897.192907][T15212] usb 3-1: USB disconnect, device number 33 [ 897.337529][T15205] legousbtower 1-1:14.57: interrupt endpoints not found [ 897.669724][T18576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3492'. [ 897.734454][T15216] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 897.740863][T15205] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 897.743493][T15205] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 897.904848][T15216] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 897.906115][T15216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 897.906138][T15216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.906163][T15216] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.906194][T15216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.908485][T15216] usb 5-1: config 0 descriptor?? [ 897.934835][T15194] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 898.105220][T15194] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.106823][T15194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.106853][T15194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.106876][T15194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.106915][T15194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.109777][T15194] usb 3-1: config 0 descriptor?? [ 898.134247][T15205] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 898.302168][T15216] usbhid 5-1:0.0: can't add hid device: -71 [ 898.302292][T15216] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 898.329396][T15216] usb 5-1: USB disconnect, device number 30 [ 898.341072][T15205] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 898.353467][T15205] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 898.353526][T15205] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 898.353548][T15205] usb 4-1: config 0 has no interface number 0 [ 898.353567][T15205] usb 4-1: config 0 has no interface number 1 [ 898.353628][T15205] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 898.353724][T15205] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 898.353755][T15205] usb 4-1: config 0 interface 3 has no altsetting 0 [ 898.353797][T15205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.432628][T15205] usb 4-1: config 0 descriptor?? [ 898.536877][T15194] plantronics 0003:047F:FFFF.007A: reserved main item tag 0xd [ 898.578925][T15194] plantronics 0003:047F:FFFF.007A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 898.678255][T15216] usb 1-1: USB disconnect, device number 20 [ 898.729097][T15216] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 898.886467][T18576] syzkaller1: entered promiscuous mode [ 898.886491][T18576] syzkaller1: entered allmulticast mode [ 899.258434][T18594] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 900.014023][T15212] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 900.059554][T15205] usb 4-1: Could not set interface, error -71 [ 900.097111][T15205] usb 4-1: selecting invalid altsetting 0 [ 900.097138][T15205] usb 4-1: Could not set interface, error -22 [ 900.132779][T15205] usb 4-1: USB disconnect, device number 120 [ 900.166596][T15212] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 900.168672][T15212] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 900.168709][T15212] usb 1-1: can't read configurations, error -61 [ 900.304298][T15212] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 900.455094][T15212] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 900.457460][T15212] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 900.457487][T15212] usb 1-1: can't read configurations, error -61 [ 900.457707][T15212] usb usb1-port1: attempt power cycle [ 900.689390][T15216] usb 3-1: USB disconnect, device number 34 [ 900.749719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.797765][T15212] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 900.821679][T15212] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 900.848674][T15212] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 900.848718][T15212] usb 1-1: can't read configurations, error -61 [ 900.974158][T15212] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 900.998015][T15212] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 901.001143][T15212] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 901.001179][T15212] usb 1-1: can't read configurations, error -61 [ 901.001729][T15212] usb usb1-port1: unable to enumerate USB device [ 901.194091][T15212] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 901.324172][T15212] usb 4-1: device descriptor read/64, error -71 [ 901.324308][T15216] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 901.394867][T15205] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 901.454182][T15216] usb 3-1: device descriptor read/64, error -71 [ 901.555120][T15205] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 901.556048][T15205] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.557769][T15205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.557787][T15205] usb 6-1: Product: syz [ 901.557799][T15205] usb 6-1: Manufacturer: syz [ 901.557810][T15205] usb 6-1: SerialNumber: syz [ 901.564261][T15212] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 901.579504][T15205] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 901.714037][T15212] usb 4-1: device descriptor read/64, error -71 [ 901.734091][T15216] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 901.798182][T18619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.798747][T18619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.827214][T15212] usb usb4-port1: attempt power cycle [ 901.868211][T15216] usb 3-1: device descriptor read/64, error -71 [ 901.885211][T15205] gspca_mr97310a: reg write [21] error -71 [ 901.885287][T15205] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71 [ 901.895459][T15205] usb 6-1: USB disconnect, device number 51 [ 901.975306][T15216] usb usb3-port1: attempt power cycle [ 902.184657][T15212] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 902.204686][T15212] usb 4-1: device descriptor read/8, error -71 [ 902.254350][T15214] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 902.314159][T15216] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 902.334678][T15216] usb 3-1: device descriptor read/8, error -71 [ 902.404115][T15214] usb 5-1: Using ep0 maxpacket: 32 [ 902.405853][T15214] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 902.407192][T15214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.407227][T15214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.407300][T15214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.410493][T15214] usb 5-1: config 0 descriptor?? [ 902.454906][T15212] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 902.475304][T15212] usb 4-1: device descriptor read/8, error -71 [ 902.584621][T15212] usb usb4-port1: unable to enumerate USB device [ 902.606944][T15216] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 902.624327][T18630] loop5: detected capacity change from 0 to 7 [ 902.625729][T18630] Dev loop5: unable to read RDB block 7 [ 902.625760][T18630] loop5: AHDI p1 p2 p4 [ 902.625783][T18630] loop5: partition table partially beyond EOD, truncated [ 902.626319][T18630] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 902.628103][T18630] loop5: p4 start 3288604672 is beyond EOD, truncated [ 902.639821][T15216] usb 3-1: device descriptor read/8, error -71 [ 902.744855][T15216] usb usb3-port1: unable to enumerate USB device [ 903.103012][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3509'. [ 903.128252][T18639] loop5: detected capacity change from 0 to 7 [ 903.132864][T18639] Dev loop5: unable to read RDB block 7 [ 903.132896][T18639] loop5: AHDI p1 p2 p4 [ 903.132918][T18639] loop5: partition table partially beyond EOD, truncated [ 903.137755][T18639] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 903.178116][T18639] loop5: p4 start 3288604672 is beyond EOD, truncated [ 903.339329][T15214] usbhid 5-1:0.0: can't add hid device: -71 [ 903.339443][T15214] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 903.361974][T15214] usb 5-1: USB disconnect, device number 31 [ 903.684252][T15212] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 903.845950][T15212] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 903.847241][T15212] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 903.847269][T15212] usb 6-1: config 0 has an invalid interface number: 3 but max is 2 [ 903.847292][T15212] usb 6-1: config 0 has no interface number 0 [ 903.847311][T15212] usb 6-1: config 0 has no interface number 1 [ 903.847364][T15212] usb 6-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 903.847404][T15212] usb 6-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 903.847435][T15212] usb 6-1: config 0 interface 3 has no altsetting 0 [ 903.847470][T15212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.856705][T15212] usb 6-1: config 0 descriptor?? [ 903.944537][T15214] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 904.074505][T15214] usb 1-1: device descriptor read/64, error -71 [ 904.199579][T18659] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3514'. [ 904.324180][T15214] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 904.464312][T15214] usb 1-1: device descriptor read/64, error -71 [ 904.475135][T15205] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 904.574706][T15214] usb usb1-port1: attempt power cycle [ 904.628800][T15205] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.633291][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.633326][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.633353][T15205] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.633399][T15205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.680542][T15205] usb 3-1: config 0 descriptor?? [ 904.698001][T15212] usb 6-1: Could not set interface, error -71 [ 904.815639][T15212] usb 6-1: selecting invalid altsetting 0 [ 904.815666][T15212] usb 6-1: Could not set interface, error -22 [ 904.841303][T15212] usb 6-1: USB disconnect, device number 52 [ 904.932730][T15214] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 904.972945][T15214] usb 1-1: device descriptor read/8, error -71 [ 905.145307][ T7394] batadv1: left promiscuous mode [ 905.177655][T18659] syzkaller1: entered promiscuous mode [ 905.177682][T18659] syzkaller1: entered allmulticast mode [ 905.204246][T15214] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 905.227676][T15214] usb 1-1: device descriptor read/8, error -71 [ 905.345665][T15214] usb usb1-port1: unable to enumerate USB device [ 905.587372][T18674] veth2: entered allmulticast mode [ 906.745730][T15212] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 906.884104][T15212] usb 4-1: device descriptor read/64, error -71 [ 907.054122][ T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 907.107221][T18706] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3530'. [ 907.124160][T15212] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 907.183841][T15205] usbhid 3-1:0.0: can't add hid device: -71 [ 907.192065][T15205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 907.205440][ T10] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 907.210393][T15205] usb 3-1: USB disconnect, device number 39 [ 907.212991][ T10] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 907.213017][ T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 907.213036][ T10] usb 5-1: config 0 has no interface number 0 [ 907.213055][ T10] usb 5-1: config 0 has no interface number 1 [ 907.213106][ T10] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 907.213146][ T10] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 907.213176][ T10] usb 5-1: config 0 interface 3 has no altsetting 0 [ 907.213211][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.283260][T15212] usb 4-1: device descriptor read/64, error -71 [ 907.325153][ T10] usb 5-1: config 0 descriptor?? [ 907.396487][T15212] usb usb4-port1: attempt power cycle [ 907.744372][T15212] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 907.765468][T15212] usb 4-1: device descriptor read/8, error -71 [ 908.004085][T15212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 908.026354][T15212] usb 4-1: device descriptor read/8, error -71 [ 908.144549][T15212] usb usb4-port1: unable to enumerate USB device [ 908.886168][T18721] vivid-000: disconnect [ 909.549676][T18727] netlink: 'syz.3.3534': attribute type 2 has an invalid length. [ 909.891824][ T10] usb 5-1: Could not set interface, error -71 [ 909.915290][ T10] usb 5-1: selecting invalid altsetting 0 [ 909.915315][ T10] usb 5-1: Could not set interface, error -22 [ 909.948783][ T10] usb 5-1: USB disconnect, device number 32 [ 910.065434][ T5693] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 910.214955][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 910.215697][ T5693] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 910.217317][ T5693] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 910.217347][ T5693] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 910.217368][ T5693] usb 6-1: config 0 interface 0 has no altsetting 0 [ 910.217397][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.221082][ T5693] usb 6-1: config 0 descriptor?? [ 910.499680][T18746] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3539'. [ 910.754083][ T10] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 910.919305][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 910.922512][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 910.922548][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 910.922614][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 66, changing to 4 [ 910.922642][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 910.986250][ T10] usb 5-1: string descriptor 0 read error: -22 [ 910.986469][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.046251][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 911.165265][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 911.168838][ T31] audit: type=1326 audit(1789237876.313:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18754 comm="syz.3.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85cc79e159 code=0x0 [ 911.283556][ T5693] usbhid 6-1:0.0: can't add hid device: -71 [ 911.290476][ T5693] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 911.307094][T15212] usb 5-1: USB disconnect, device number 33 [ 911.309225][ T5693] usb 6-1: USB disconnect, device number 53 [ 911.606805][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 911.714016][T15194] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 911.765109][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 911.771878][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 911.771909][ T10] usb 3-1: no configurations [ 911.771920][ T10] usb 3-1: can't read configurations, error -22 [ 911.865879][T15194] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 911.867293][T15194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.867317][T15194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.867344][T15194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.872293][T15194] usb 1-1: config 0 descriptor?? [ 911.895673][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 912.039171][T18768] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 912.044061][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 912.044808][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 912.044850][ T10] usb 3-1: no configurations [ 912.044864][ T10] usb 3-1: can't read configurations, error -22 [ 912.052436][ T10] usb usb3-port1: attempt power cycle [ 912.098251][ T31] audit: type=1326 audit(1789237877.243:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.3.3548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85cc79e159 code=0x0 [ 912.154061][ T5693] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 912.297886][T15194] playstation 0003:054C:0DF2.007B: unknown main item tag 0x0 [ 912.297927][T15194] playstation 0003:054C:0DF2.007B: unknown main item tag 0x0 [ 912.297965][T15194] playstation 0003:054C:0DF2.007B: unknown main item tag 0x0 [ 912.297995][T15194] playstation 0003:054C:0DF2.007B: unknown main item tag 0x0 [ 912.298023][T15194] playstation 0003:054C:0DF2.007B: unknown main item tag 0x0 [ 912.301861][T15194] playstation 0003:054C:0DF2.007B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 912.306612][ T5693] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 912.309528][ T5693] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 912.309599][ T5693] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 912.309658][ T5693] usb 5-1: config 0 has no interface number 0 [ 912.309713][ T5693] usb 5-1: config 0 has no interface number 1 [ 912.309851][ T5693] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 912.309961][ T5693] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 912.310035][ T5693] usb 5-1: config 0 interface 3 has no altsetting 0 [ 912.310128][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.394552][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 912.418569][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 912.423876][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 912.426589][ T10] usb 3-1: no configurations [ 912.426637][ T10] usb 3-1: can't read configurations, error -22 [ 912.473862][ T5693] usb 5-1: config 0 descriptor?? [ 912.566449][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 912.584970][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 912.585555][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 912.585608][ T10] usb 3-1: no configurations [ 912.585618][ T10] usb 3-1: can't read configurations, error -22 [ 912.585961][ T10] usb usb3-port1: unable to enumerate USB device [ 912.987083][T18779] fuse: blksize only supported for fuseblk [ 913.354041][T15219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 913.504870][T15219] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 913.506132][T15219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.506166][T15219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.506206][T15219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.509368][T15219] usb 4-1: config 0 descriptor?? [ 913.936520][T15219] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 913.936565][T15219] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 913.936595][T15219] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 913.936622][T15219] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 913.936669][T15219] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 913.941665][T15219] playstation 0003:054C:0DF2.007C: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 914.338480][T15219] playstation 0003:054C:0DF2.007C: Duplicate device found for MAC address 00:00:00:00:00:01. [ 914.338517][T15219] playstation 0003:054C:0DF2.007C: Failed to create dualsense. [ 914.341560][T15219] playstation 0003:054C:0DF2.007C: probe with driver playstation failed with error -17 [ 914.433041][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3551'. [ 914.440091][T18787] kernel profiling enabled (shift: 5) [ 914.599990][T18796] syzkaller1: entered promiscuous mode [ 914.600016][T18796] syzkaller1: entered allmulticast mode [ 914.786255][T18798] usb usb7: usbfs: process 18798 (syz.2.3553) did not claim interface 0 before use [ 914.904518][ T5693] usb 5-1: Could not set interface, error -71 [ 914.947004][ T5693] usb 5-1: selecting invalid altsetting 0 [ 914.947032][ T5693] usb 5-1: Could not set interface, error -22 [ 914.974397][ T5693] usb 5-1: USB disconnect, device number 34 [ 915.024952][T15205] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 915.032782][T15194] playstation 0003:054C:0DF2.007B: Failed to retrieve feature with reportID 5: -71 [ 915.032813][T15194] playstation 0003:054C:0DF2.007B: Failed to retrieve DualSense calibration info: -71 [ 915.032865][T15194] playstation 0003:054C:0DF2.007B: Failed to get calibration data from DualSense [ 915.032885][T15194] playstation 0003:054C:0DF2.007B: Failed to create dualsense. [ 915.108469][T15194] playstation 0003:054C:0DF2.007B: probe with driver playstation failed with error -71 [ 915.126463][T15194] usb 1-1: USB disconnect, device number 29 [ 915.174346][T15205] usb 3-1: Using ep0 maxpacket: 8 [ 915.176838][T15205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 915.176890][T15205] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 915.178914][T15205] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 211, changing to 7 [ 915.182895][T15205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.182923][T15205] usb 3-1: Product: syz [ 915.182940][T15205] usb 3-1: Manufacturer: syz [ 915.182958][T15205] usb 3-1: SerialNumber: syz [ 915.335906][T15194] usb 4-1: USB disconnect, device number 3 [ 915.374328][T18803] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3555'. [ 915.442323][T18807] loop5: detected capacity change from 0 to 7 [ 915.443170][T18807] Dev loop5: unable to read RDB block 7 [ 915.443202][T18807] loop5: AHDI p1 p2 p4 [ 915.443226][T18807] loop5: partition table partially beyond EOD, truncated [ 915.443393][T18807] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 915.471611][T18807] loop5: p4 start 3288604672 is beyond EOD, truncated [ 915.549297][T15205] usb 3-1: unit 2 not found! [ 915.549324][T15205] usb 3-1: unit 119 not found! [ 915.655967][T15219] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 915.686472][T15205] usb 3-1: USB disconnect, device number 44 [ 915.741202][ T6166] udevd[6166]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.818077][T15219] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.824920][T15219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.825017][T15219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.825085][T15219] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.825205][T15219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.895121][T15219] usb 5-1: config 0 descriptor?? [ 915.941606][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 916.382215][T15219] plantronics 0003:047F:FFFF.007D: reserved main item tag 0xd [ 916.395106][T18825] syzkaller1: entered promiscuous mode [ 916.395131][T18825] syzkaller1: entered allmulticast mode [ 916.418537][T15219] plantronics 0003:047F:FFFF.007D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 916.547082][T15216] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 916.564444][T15205] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 916.704305][T15216] usb 1-1: Using ep0 maxpacket: 32 [ 916.705171][T15216] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 916.705213][T15216] usb 1-1: no configurations [ 916.705228][T15216] usb 1-1: can't read configurations, error -22 [ 916.738703][T15205] usb 3-1: Using ep0 maxpacket: 8 [ 916.746514][T15205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 916.746566][T15205] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 916.747804][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 916.747837][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 916.747860][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 916.747894][T15205] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 916.747911][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 916.747927][T15205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 916.751046][T15205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.751075][T15205] usb 3-1: Product: syz [ 916.751093][T15205] usb 3-1: Manufacturer: syz [ 916.751111][T15205] usb 3-1: SerialNumber: syz [ 916.854884][T15205] usb 3-1: config 0 descriptor?? [ 916.856639][T15216] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 916.862420][T18822] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 916.885696][T15205] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 916.909461][T18835] ip6gretap0: entered promiscuous mode [ 916.912953][T18835] bridge0: port 3(macvlan2) entered blocking state [ 916.913716][T18835] bridge0: port 3(macvlan2) entered disabled state [ 916.913864][T18835] macvlan2: entered allmulticast mode [ 916.913882][T18835] ip6gretap0: entered allmulticast mode [ 916.932859][T18835] macvlan2: entered promiscuous mode [ 916.942195][T18835] bridge0: port 3(macvlan2) entered blocking state [ 916.942543][T18835] bridge0: port 3(macvlan2) entered forwarding state [ 917.048982][T15216] usb 1-1: Using ep0 maxpacket: 32 [ 917.050296][T15216] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 917.050343][T15216] usb 1-1: no configurations [ 917.050368][T15216] usb 1-1: can't read configurations, error -22 [ 917.050662][T15216] usb usb1-port1: attempt power cycle [ 917.084369][T18822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3562'. [ 917.121091][T18840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3562'. [ 917.137005][T18838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.137500][T18838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.188099][T15219] usb 3-1: USB disconnect, device number 45 [ 917.202712][T18846] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3569'. [ 917.273820][ T6239] udevd[6239]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.404769][T15216] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 917.436046][T15216] usb 1-1: Using ep0 maxpacket: 32 [ 917.436763][T15216] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 917.436801][T15216] usb 1-1: no configurations [ 917.436839][T15216] usb 1-1: can't read configurations, error -22 [ 917.437231][T18852] loop5: detected capacity change from 0 to 7 [ 917.439989][T18852] Dev loop5: unable to read RDB block 7 [ 917.440011][T18852] loop5: AHDI p1 p2 p4 [ 917.440025][T18852] loop5: partition table partially beyond EOD, truncated [ 917.440173][T18852] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 917.442952][T18852] loop5: p4 start 3288604672 is beyond EOD, truncated [ 917.586208][T15216] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 917.616545][T15216] usb 1-1: Using ep0 maxpacket: 32 [ 917.617329][T15216] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 917.617361][T15216] usb 1-1: no configurations [ 917.617371][T15216] usb 1-1: can't read configurations, error -22 [ 917.617637][T15216] usb usb1-port1: unable to enumerate USB device [ 917.744259][T15219] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 917.801661][T18851] kAFS: unable to lookup cell 'ÿ' [ 918.286241][T15212] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 918.365159][T18872] lo: entered allmulticast mode [ 918.449350][T15212] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 918.450979][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.451014][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.451055][T15212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.475138][T15212] usb 6-1: config 0 descriptor?? [ 918.521494][T18880] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3578'. [ 918.648780][T18886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3578'. [ 918.648812][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 918.651127][T18886] Cannot find set identified by id 1 to match [ 918.783163][T18883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 918.884291][T15194] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 918.897225][T15212] playstation 0003:054C:0DF2.007E: unknown main item tag 0x0 [ 918.900750][T15212] playstation 0003:054C:0DF2.007E: unknown main item tag 0x0 [ 918.900843][T15212] playstation 0003:054C:0DF2.007E: unknown main item tag 0x0 [ 918.900916][T15212] playstation 0003:054C:0DF2.007E: unknown main item tag 0x0 [ 918.900994][T15212] playstation 0003:054C:0DF2.007E: unknown main item tag 0x0 [ 918.923813][T15212] playstation 0003:054C:0DF2.007E: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 918.931924][T15216] usb 5-1: USB disconnect, device number 35 [ 919.034040][T15194] usb 3-1: Using ep0 maxpacket: 16 [ 919.037723][T15194] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 919.041340][T15194] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 919.041370][T15194] usb 3-1: config 0 has no interface number 0 [ 919.076631][T15194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.076663][T15194] usb 3-1: Product: syz [ 919.076679][T15194] usb 3-1: Manufacturer: syz [ 919.076695][T15194] usb 3-1: SerialNumber: syz [ 919.118736][T15194] usb 3-1: config 0 descriptor?? [ 919.296136][T18883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3579'. [ 919.343569][T15194] hub 3-1:0.132: bad descriptor, ignoring hub [ 919.343618][T15194] hub 3-1:0.132: probe with driver hub failed with error -5 [ 919.374574][T15194] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input104 [ 919.448902][T15194] usb 3-1: USB disconnect, device number 46 [ 919.600038][ T31] audit: type=1326 audit(1789237884.743:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63aa19e159 code=0x0 [ 919.975123][T15194] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 920.125628][T15194] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 920.126831][T15194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.126885][T15194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.131298][T15194] usb 1-1: config 0 descriptor?? [ 920.172642][T15194] pwc: Askey VC010 type 2 USB webcam detected. [ 920.534113][T18915] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3585'. [ 920.536363][T15194] pwc: recv_control_msg error -32 req 02 val 2b00 [ 920.537171][T15194] pwc: recv_control_msg error -32 req 02 val 2700 [ 920.537966][T15194] pwc: recv_control_msg error -32 req 02 val 2c00 [ 920.540311][T15194] pwc: recv_control_msg error -32 req 04 val 1000 [ 920.542686][T15194] pwc: recv_control_msg error -32 req 04 val 1300 [ 920.543498][T15194] pwc: recv_control_msg error -32 req 04 val 1400 [ 920.598995][T15194] pwc: recv_control_msg error -32 req 02 val 2000 [ 920.603435][T15194] pwc: recv_control_msg error -32 req 02 val 2100 [ 920.620990][T15194] pwc: recv_control_msg error -32 req 04 val 1500 [ 920.622923][T15194] pwc: recv_control_msg error -32 req 02 val 2500 [ 920.641583][T15194] pwc: recv_control_msg error -32 req 02 val 2400 [ 920.643086][T15194] pwc: recv_control_msg error -32 req 02 val 2600 [ 920.728768][T18918] sock: sock_timestamping_bind_phc: sock not bind to device [ 920.748291][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3587'. [ 920.748365][T18918] netlink: 'syz.2.3587': attribute type 2 has an invalid length. [ 920.835878][T15219] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 921.006493][T15219] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.007866][T15219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.007898][T15219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.007923][T15219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.007967][T15219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.023414][T15219] usb 4-1: config 0 descriptor?? [ 921.789581][T18915] syzkaller1: entered promiscuous mode [ 921.789607][T18915] syzkaller1: entered allmulticast mode [ 921.956753][T15219] plantronics 0003:047F:FFFF.007F: reserved main item tag 0xd [ 922.323191][T15212] playstation 0003:054C:0DF2.007E: Failed to retrieve feature with reportID 5: -71 [ 922.323224][T15212] playstation 0003:054C:0DF2.007E: Failed to retrieve DualSense calibration info: -71 [ 922.323279][T15212] playstation 0003:054C:0DF2.007E: Failed to get calibration data from DualSense [ 922.323299][T15212] playstation 0003:054C:0DF2.007E: Failed to create dualsense. [ 922.416498][T15219] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 922.437480][T15205] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 922.584304][T15205] usb 3-1: Using ep0 maxpacket: 32 [ 922.585028][T15205] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 922.585091][T15205] usb 3-1: no configurations [ 922.585106][T15205] usb 3-1: can't read configurations, error -22 [ 922.663491][T15194] pwc: recv_control_msg error -71 req 02 val 2900 [ 922.672631][T15194] pwc: recv_control_msg error -71 req 02 val 2800 [ 922.683170][T15194] pwc: recv_control_msg error -71 req 04 val 1100 [ 922.691147][T15194] pwc: recv_control_msg error -71 req 04 val 1200 [ 922.714134][T15205] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 922.864989][T15205] usb 3-1: Using ep0 maxpacket: 32 [ 922.866287][T15205] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 922.866327][T15205] usb 3-1: no configurations [ 922.866341][T15205] usb 3-1: can't read configurations, error -22 [ 922.866631][T15205] usb usb3-port1: attempt power cycle [ 922.921052][T18936] __nla_validate_parse: 1 callbacks suppressed [ 922.921072][T18936] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3591'. [ 923.204067][T15205] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 923.226086][T15205] usb 3-1: Using ep0 maxpacket: 32 [ 923.226774][T15205] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 923.226813][T15205] usb 3-1: no configurations [ 923.226827][T15205] usb 3-1: can't read configurations, error -22 [ 923.354096][T15205] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 923.374820][T15205] usb 3-1: Using ep0 maxpacket: 32 [ 923.375387][T15205] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 923.375424][T15205] usb 3-1: no configurations [ 923.375438][T15205] usb 3-1: can't read configurations, error -22 [ 923.375680][T15205] usb usb3-port1: unable to enumerate USB device [ 923.441721][T15194] pwc: Registered as video103. [ 923.463294][T15194] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 923.515119][T15194] usb 1-1: USB disconnect, device number 34 [ 923.734715][T15212] playstation 0003:054C:0DF2.007E: probe with driver playstation failed with error -71 [ 923.917242][T15219] usb 4-1: USB disconnect, device number 4 [ 925.352892][T15212] usb 6-1: USB disconnect, device number 54 [ 926.012151][T18945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3593'. [ 927.629185][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.629211][T18958] PKCS7: Only support pkcs7_signedData type [ 927.629344][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.629357][T18958] PKCS7: Only support pkcs7_signedData type [ 927.629490][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.629504][T18958] PKCS7: Only support pkcs7_signedData type [ 927.630075][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.630094][T18958] PKCS7: Only support pkcs7_signedData type [ 927.632092][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.632108][T18958] PKCS7: Only support pkcs7_signedData type [ 927.632253][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.632267][T18958] PKCS7: Only support pkcs7_signedData type [ 927.632404][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.632417][T18958] PKCS7: Only support pkcs7_signedData type [ 927.632546][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.632559][T18958] PKCS7: Only support pkcs7_signedData type [ 927.667160][T15194] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 927.749242][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.749259][T18958] PKCS7: Only support pkcs7_signedData type [ 927.749396][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.749409][T18958] PKCS7: Only support pkcs7_signedData type [ 927.749534][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.749546][T18958] PKCS7: Only support pkcs7_signedData type [ 927.749692][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.749705][T18958] PKCS7: Only support pkcs7_signedData type [ 927.749846][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.749860][T18958] PKCS7: Only support pkcs7_signedData type [ 927.750030][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.750044][T18958] PKCS7: Only support pkcs7_signedData type [ 927.750170][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.750183][T18958] PKCS7: Only support pkcs7_signedData type [ 927.750295][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.750307][T18958] PKCS7: Only support pkcs7_signedData type [ 927.750441][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.750453][T18958] PKCS7: Only support pkcs7_signedData type [ 927.845584][T15194] usb 3-1: Using ep0 maxpacket: 16 [ 927.895280][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.895299][T18958] PKCS7: Only support pkcs7_signedData type [ 927.895612][T15194] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 927.896417][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.896433][T18958] PKCS7: Only support pkcs7_signedData type [ 927.896812][T15194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.896846][T15194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.898811][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.898827][T18958] PKCS7: Only support pkcs7_signedData type [ 927.898961][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.898974][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899104][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899117][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899364][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899379][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899548][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899561][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899691][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899704][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899833][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899847][T18958] PKCS7: Only support pkcs7_signedData type [ 927.899975][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.899988][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900118][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900131][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900260][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900273][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900423][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900449][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900594][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900607][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900734][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900747][T18958] PKCS7: Only support pkcs7_signedData type [ 927.900875][T18958] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 927.900888][T18958] PKCS7: Only support pkcs7_signedData type [ 928.569631][T15194] usb 3-1: config 0 descriptor?? [ 929.571936][T15194] mcp2221 0003:04D8:00DD.0080: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 931.155406][T18972] loop5: detected capacity change from 0 to 7 [ 931.469280][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.469788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.470086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.470389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.470697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.470986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.471270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.471554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.471838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 931.472129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 932.184959][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.208854][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.474084][ C0] net_ratelimit: 15478 callbacks suppressed [ 936.474111][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.474457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.474793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.475131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.475476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.475812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.476148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.476532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.476868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 936.477261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 939.203179][ C1] sched: DL replenish lagged too much [ 941.484081][ C0] net_ratelimit: 19309 callbacks suppressed [ 941.484106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.484466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.484695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 941.484816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.485134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.485445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.485756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.485854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 941.486068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 941.486386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.493990][ C1] net_ratelimit: 22488 callbacks suppressed [ 946.494015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.494232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.494362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.494584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.494936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.495297][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.495401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 946.495691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 946.495710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.496015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.504197][ C0] net_ratelimit: 21665 callbacks suppressed [ 951.504224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.504593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.504776][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 951.504950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.505102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.505300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.505445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.505742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.506094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 951.506480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.514173][ C0] net_ratelimit: 22985 callbacks suppressed [ 956.514177][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.514198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.514495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.514552][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.514872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.515184][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.515496][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.515617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.515815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 956.515938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.523985][ C1] net_ratelimit: 23434 callbacks suppressed [ 961.524013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.524104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 961.524470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 961.524823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 961.525074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 961.525174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 961.525385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.525532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 961.525701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.526712][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 966.533928][ C1] net_ratelimit: 20702 callbacks suppressed [ 966.533954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.534198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 966.534569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 966.534921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 966.535169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 966.535323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 966.535486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.535672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 966.535810][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.536033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.544173][ C0] net_ratelimit: 24298 callbacks suppressed [ 971.544207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.544435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 971.544513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.544701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.544776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.544957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.545040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.545336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.545616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 971.545943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.553948][ C1] net_ratelimit: 24204 callbacks suppressed [ 976.553972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 976.554109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.554305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.554434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.554626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.554764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.555087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.555436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.555776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 976.555812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 981.564022][ C0] net_ratelimit: 24172 callbacks suppressed [ 981.564047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.564381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.564697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 981.564745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.564989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.565063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.565265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.565423][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.565734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 981.566054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.573956][ C0] net_ratelimit: 23215 callbacks suppressed [ 986.573979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.574012][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.574364][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.574387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.574735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.575079][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.575419][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.575511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 986.575761][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 986.575846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.584174][ C0] net_ratelimit: 25301 callbacks suppressed [ 991.584198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.584325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 991.584534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.584647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.584863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.584968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.585209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.585524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.585877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 991.586087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.375968][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.393029][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.593942][ C1] net_ratelimit: 25018 callbacks suppressed [ 996.593964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.594109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 996.594289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.594449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 996.594749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 996.595089][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 996.595375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 996.595406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 996.595655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.595694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.603950][ C0] net_ratelimit: 24531 callbacks suppressed [ 1001.603974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.604319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.604630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.604818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1001.604933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.605100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.605258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.605406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.605587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1001.605912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.613958][ C0] net_ratelimit: 25155 callbacks suppressed [ 1006.613982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.614338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.614678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.614929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1006.615022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.615266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.615370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.615610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.615737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1006.616090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.623947][ C0] net_ratelimit: 24854 callbacks suppressed [ 1011.623971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.624034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.624278][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.624580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.624883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.625106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1011.625195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.625411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.625495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1011.625710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.633983][ C1] net_ratelimit: 25458 callbacks suppressed [ 1016.634007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.634213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1016.634305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.634508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1016.634821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1016.635107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1016.635337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1016.635392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1016.635634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.635685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.644117][ C0] net_ratelimit: 25437 callbacks suppressed [ 1021.644139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.644444][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.644693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1021.644763][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.644988][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.645076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.645293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.645411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.645741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1021.646067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.654003][ C0] net_ratelimit: 24280 callbacks suppressed [ 1026.654028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.654354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.654567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1026.654692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.654939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.655023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.655243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.655353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.655661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1026.655967][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.664108][ C0] net_ratelimit: 22125 callbacks suppressed [ 1031.664132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.664500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.664808][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1031.664827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.665113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.665152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.665405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.665478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.665810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1031.666179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.674034][ C0] net_ratelimit: 22797 callbacks suppressed [ 1036.674057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.674341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.674617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1036.674696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.674916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.674975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.675214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.675262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.675542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1036.675826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.684025][ C0] net_ratelimit: 22245 callbacks suppressed [ 1041.684049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.684072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.684355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.684695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.685003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.685356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.685657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.685873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1041.685964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1041.686212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.693870][ C1] net_ratelimit: 21958 callbacks suppressed [ 1046.693895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.694066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.694197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.694412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.694731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.695049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.695400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.695717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1046.696015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1046.696037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.703926][ C0] net_ratelimit: 21757 callbacks suppressed [ 1051.703951][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.704281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.704532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1051.704611][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.704848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.704935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.705169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.705259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.705582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1051.705911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1054.913902][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1055.058500][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18974/1:b..l [ 1055.066521][ C0] rcu: (detected by 0, t=10513 jiffies, g=169801, q=1946 ncpus=2) [ 1055.074448][ C0] task:syz.4.3598 state:R running task stack:28808 pid:18974 tgid:18967 ppid:10218 task_flags:0x400040 flags:0x00080002 [ 1055.087984][ C0] Call Trace: [ 1055.091299][ C0] [ 1055.094264][ C0] __schedule+0x17db/0x58f0 [ 1055.098850][ C0] ? __pfx___schedule+0x10/0x10 [ 1055.103751][ C0] preempt_schedule_irq+0x4b/0x90 [ 1055.108810][ C0] irqentry_exit+0x14f/0x910 [ 1055.113443][ C0] ? trace_irq_disable+0x3b/0x140 [ 1055.118522][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1055.124537][ C0] RIP: 0010:__update_page_owner_free_handle+0x45e/0x4a0 [ 1055.131512][ C0] Code: e8 e6 85 ff c6 05 5e b4 21 0e 01 48 c7 c7 e0 da 1e 8c be 6f 03 00 00 48 c7 c2 e0 dc 1e 8c e8 19 92 61 ff 48 c7 c7 a0 c8 d5 8e <4c> 89 f6 e8 aa 76 61 ff 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d [ 1055.151148][ C0] RSP: 0018:ffffc90002f0f820 EFLAGS: 00000293 [ 1055.157240][ C0] RAX: ffffffff8241e38f RBX: 0000000000000001 RCX: ffff888026ad0000 [ 1055.165356][ C0] RDX: 0000000000000000 RSI: ffffffff8c6d9c60 RDI: ffffffff8ed5c8a0 [ 1055.173363][ C0] RBP: ffff88801e598ab4 R08: ffff88801e598a77 R09: 1ffff11003cb314e [ 1055.181379][ C0] R10: dffffc0000000000 R11: ffffed1003cb314f R12: ffff888026ad0644 [ 1055.189376][ C0] R13: 0000000000004a1e R14: ffffffff8241dfbe R15: 0000000000000001 [ 1055.197373][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 1055.203650][ C0] ? __update_page_owner_free_handle+0x3ff/0x4a0 [ 1055.210024][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 1055.216320][ C0] __reset_page_owner+0x85/0x1f0 [ 1055.221317][ C0] __free_frozen_pages+0xc93/0xd90 [ 1055.226484][ C0] __slab_free+0x274/0x2c0 [ 1055.230957][ C0] qlist_free_all+0x99/0x100 [ 1055.235577][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1055.241068][ C0] __kasan_slab_alloc+0x22/0x80 [ 1055.245955][ C0] __kmalloc_noprof+0x307/0x720 [ 1055.250833][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 1055.255878][ C0] ? tomoyo_encode+0x2ad/0x570 [ 1055.260675][ C0] ? tomoyo_encode+0x2ad/0x570 [ 1055.265490][ C0] tomoyo_encode+0x2ad/0x570 [ 1055.270125][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 1055.275812][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1055.281476][ C0] tomoyo_path_number_perm+0x246/0x5f0 [ 1055.286982][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1055.292990][ C0] ? __lock_acquire+0x747/0x2de0 [ 1055.297969][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.303044][ C0] ? hook_file_ioctl+0x1f2/0x600 [ 1055.308041][ C0] ? __fget_files+0x2a/0x420 [ 1055.312678][ C0] ? __fget_files+0x2a/0x420 [ 1055.317315][ C0] ? __fget_files+0x3a2/0x420 [ 1055.322028][ C0] ? __fget_files+0x2a/0x420 [ 1055.326659][ C0] security_file_ioctl+0xc3/0x2a0 [ 1055.331722][ C0] __se_sys_ioctl+0x47/0x170 [ 1055.336346][ C0] do_syscall_64+0x166/0x520 [ 1055.340966][ C0] ? trace_irq_disable+0x3b/0x140 [ 1055.346023][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.352125][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1055.356846][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.362830][ C0] RIP: 0033:0x7f56a619ddeb [ 1055.367289][ C0] RSP: 002b:00007f56a6fec050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.375745][ C0] RAX: ffffffffffffffda RBX: 00007f56a64263f8 RCX: 00007f56a619ddeb [ 1055.383752][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000dc [ 1055.391763][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f56a6fec6c0 [ 1055.399768][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1055.407771][ C0] R13: 00007f56a64263f8 R14: 00007f56a654f960 R15: 00007f56a654fa48 [ 1055.415795][ C0] [ 1056.713986][ C0] net_ratelimit: 19613 callbacks suppressed [ 1056.714010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.714023][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.714302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.714317][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.714620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.714937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.715287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.715605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.715914][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1056.716007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.723912][ C0] net_ratelimit: 21636 callbacks suppressed [ 1061.723936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.724329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.724657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.724705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.724993][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.725069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.725379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.725415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.725719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0) [ 1061.726057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:05:4e:65:e4:1c, vlan:0)