last executing test programs: 21m48.600158075s ago: executing program 2 (id=3022): r0 = syz_io_uring_setup(0x3a5a, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x1}) r4 = socket(0x2, 0x3, 0xff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x5, 0x800000000009, 0x0, 0xffffffc, 0x1, 0x0, 0x4664}, &(0x7f0000000000)={0x18, 0xa, 0x1ff, 0x0, 0x7ff, 0x400004, 0x4, 0x92}, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet(r5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x40800) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) close_range(0xffffffffffffffff, r5, 0x0) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000280)={'\x00', {0x2, 0x0, @dev}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 21m47.312243341s ago: executing program 2 (id=3023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) (fail_nth: 10) 21m46.393953585s ago: executing program 2 (id=3025): io_uring_setup(0x3e45, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000000380), 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x9, 0x0, @buffer={0x20, 0x1000, &(0x7f0000000240)=""/4096}, &(0x7f0000000200)="2a0000000000000001", 0x0, 0x80000001, 0x0, 0x0, 0x0}) 21m46.22895881s ago: executing program 2 (id=3026): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x9, 0x78}}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x28, 0x2, 0x8, "8a00000000b8af3e8f72f108007c39492ff7e7ffffffffff4bee00", 0xa0363159}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat64(r6, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r9, 0x0, &(0x7f0000000340)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="40171100000006a44f3bee509f885eb4208187"], 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae22c48b12864656f4"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) syz_io_uring_setup(0x7544, &(0x7f0000001380)={0x0, 0x43d3, 0x8000, 0x1, 0x48}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022cbd7000fedbdf2512000000080007000300000018000180140002000000000000000000000000000000000008000800f7ffff"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 21m43.936376763s ago: executing program 2 (id=3038): openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x24, 0x880}}], 0x1, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x2, 0x100, 0x4, 0x540000, r5}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x4, 0x0, 0x2, 0x180121, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getpeername$l2tp(r8, 0x0, &(0x7f0000000080)) setsockopt$inet_buf(r8, 0x0, 0x23, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xfff3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 21m43.274148015s ago: executing program 2 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f349", 0x11, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="e100000000d6", 0x3e, 0x8040, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xcf) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300ad81366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) 21m42.605391586s ago: executing program 32 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f349", 0x11, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="e100000000d6", 0x3e, 0x8040, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xcf) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300ad81366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) 8m25.631243455s ago: executing program 0 (id=6833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r1}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x5, 0x1, 0x0, @msi={0x6, 0x6, 0x5, 0x9}}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003}, &(0x7f0000000140), &(0x7f0000000280), 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) getsockname$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xb}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @ldst={0x1, 0x2, 0x2, 0x4, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x5, 0x63, &(0x7f0000000680)=""/99, 0x41100, 0x41, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000800), 0x10, 0x1000}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYBLOB="48fd20103f6b8097dc3128112fc31a3f5a914894d22d6aaf550f5cb55a1e2a7950acdc4c2e002f1ce0fb2ccb0d6d5fe3c0dba28da421269d6a560274b06be33cbdde44d68fd1a5e361fcd24dbdeb5c19bc558fa18866bbd48c5be0874b7e8e0694b40ce62a2d403e2772c209b0c2f28e100fb8af9885c27abd929dac32f94cfa2a627eaefeaf05894d58e9a430053426d25b7db32955b728204dc914b2057374f14a9ed58c22df9e4e9d383b9ce98b7cbc36bf6c19a1d0a2d2b965464a59bf5665937f25b7370763e8490ce2e8dde30b56819a80071a", @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000015000000f6000000bf9800000000000056080000020000008500000007000000b700f1ffffff000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m25.037317248s ago: executing program 0 (id=6834): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f0000000a00)="abc3b74cb3f48d114362ad619c660fd99a94e037cedc3ed29ef32124a51ca456340793c38d618f6affd86ff57b353dadde00bce532b7fd412092186194320283f062815ca8fac421cad24277b135d7c989ac0f4340e7ff41d8a89761051e135051a3e7e99aa933a95c3f36e0bb008ae0fa53abee505d22e339b6931d75443687a3ee391af8ca9803d8ede5dc8cd4818ae27a6f6f5f769a34fb81b06b0a6d3d534209d08dd878dbfb6de8310aa5"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r5}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="f80000001900010028ff3684d74b928548000000000000000000ffffac1414aa200100000000000000000000000000020001610f000000000064e40000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000003000000000000003c00000000000000ffffffffffffffff00000000002000000600000000000000abcd0000000000002f00000000000000feffffffff7f4000020000000000000801000000000000000100000044000500ac1e0001000000000000000000000000000000003c00000000000000ac1414bb00000000000000000000000006000000040100"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) 8m24.802508569s ago: executing program 0 (id=6836): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a24000000000000008b0d"], 0x0}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000003280)) 8m21.696289902s ago: executing program 0 (id=6851): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000049c0)={0x2020, 0x0, 0x0}, 0xfffffead) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') pread64(r3, &(0x7f00000003c0)=""/179, 0xb3, 0x40) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = syz_io_uring_setup(0x40f04, &(0x7f0000000400)={0x0, 0x595c, 0x0, 0x3, 0x10000151}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close(r1) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev(r8, &(0x7f00000024c0)=[{&(0x7f00000000c0)="299c638c47a2298e43", 0x9}, {&(0x7f0000000280)="3df771e70b8699a318b6e6dfb7ddc2d23833cce85fe09eeb4df0e030d591cf889a076ee47a2aaec1eee58834439fdf77d22ece2b8bc3553ca6ec8f445bee7ce43b87afad52fa6b47b4d623d3ff5e2ab9ab8b65d6bda9629ab8836e87481118716e7d9350915fd239c3249c3a45d423e58397d7ad7865b6c2916865cf139e602e9e5523dab78d0895ebd2eb36b4b27bf30324c9b5c9ec18eca08d9c427f04649f7bbec22fd7a5ca752ed38399ec8889c6b0fb85d1f84c9366b5e04bc6b8ddce7e117bf7b66d0bdf547eac68c4b01778a5a38e2c132f090f852f00645eaa88d4cf8b3df6435937024646a849739bf83ffab2", 0xf1}, {&(0x7f0000000380)="51a7cc8677f3ca3f190a0f0c16f11d0ddd2e6fdeb0fe098a7a803c63025549eff866639e736a6486e4d920af3e4948a676de0e012e26b8", 0x37}, {&(0x7f00000003c0)="fd7f348d8a069fa64986b60f8563f4427a6c8fd4eaa533a014e910311db915f9153ad565d38d45b96d1d948aea92d12b9ccf", 0x32}, {&(0x7f0000001480)="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", 0x2a2}], 0x5) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae03, 0x88) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 8m21.34300443s ago: executing program 0 (id=6852): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0xfffffffc, @local, 0x3}}}, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0xf1d5, 0x3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000040000010000000900030073797a32000000001c000000060a010300000000000000000100000108000b4000000000140000001100010000000000000000000700"], 0x84}, 0x1, 0x0, 0x0, 0x2048}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) remap_file_pages(&(0x7f0000748000/0x3000)=nil, 0x3000, 0x1000006, 0x4, 0x3) 8m20.881744007s ago: executing program 0 (id=6854): r0 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r0, 0x1) 8m19.947602427s ago: executing program 33 (id=6854): r0 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r0, 0x1) 1m8.135381262s ago: executing program 3 (id=8876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x3}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r2 = socket(0x10, 0x803, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003a4a9e410240430cf5ac7010203010902430a04070670720904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) recvmsg$can_j1939(r2, 0x0, 0x10000) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x701, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0xfcb, 0xfffffdef, 0x6}, 0x10) r7 = shmget$private(0x0, 0x800000, 0x78000000, &(0x7f0000800000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b503b) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCBRK(r8, 0x5428) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000140)=0x22140) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000"], 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000580)) 1m5.066262781s ago: executing program 6 (id=8893): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff000000070501020800000705820308000107050302400000070584"], 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xa, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80"], 0x94}, 0x1, 0x0, 0x0, 0x8058}, 0x20008841) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8201, 0x4) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) 1m1.941294836s ago: executing program 6 (id=8907): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a2400000000000000"], 0x0}, 0x0) 1m0.294699027s ago: executing program 3 (id=8915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000"], 0x34}}, 0x0) 1m0.203438318s ago: executing program 3 (id=8916): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000081, 0x0, 0x4}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) pause() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x4788, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x3}]}) 59.393710607s ago: executing program 1 (id=8919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="062c077685"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x2, "a0e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000540)={0x0, 0x18, 0x2, "9a47"}, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfffffd49, 0x0, 0x0, 0x0}, 0x40}], 0x2, 0x0, &(0x7f0000000640)="85b9"}) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) r12 = dup(0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x1, 0x7fffffff, 0x9, 0x80000001, 0xa87d]}, &(0x7f0000000200)=0x50) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000d00)={0x1, 0x0, 0x19, 0x14, 0x97, &(0x7f0000000680)}) readv(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffff9c, 0x0, 0x4040, 0x0) 59.323591747s ago: executing program 3 (id=8920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 59.284718878s ago: executing program 3 (id=8921): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000780)="edcb9b902d8e48cfcb757e59f211a5962e0384da17fb6ceaac811940104afb0edec413eaa5352c43f018f42ccafcf6970b7204a99ae71ed8479274e0d2f71c284a1cfda34907abd6ea4674dc6c2efa95c48f849c970481287dd873c749d978783adbb4c255405047162cc85e780b0f3703e8650935d1f99da5bee1381618e0c363a271c0278fdfdc4e8278206830422775492e4c0b0cb627ef4780a648bcb20a132ec49cbe55f94e1e23d05d73d22d4532c312bafd40efe1526b5ea36b3f6d416a63f3ec9476e84683fad40585bac73cdcf6", &(0x7f0000000a00)="abc3b74cb3f48d114362ad619c660fd99a94e037cedc3ed29ef32124a51ca456340793c38d618f6affd86ff57b353dadde00bce532b7fd412092186194320283f062815ca8fac421cad24277b135d7c989ac0f4340e7ff41d8a89761051e135051a3e7e99aa933a95c3f36e0bb008ae0fa53abee505d22e339b6931d75443687a3ee391af8ca9803d8ede5dc8cd4818ae27a6f6f5f769a34fb81b06b0a6d3d534209d08dd878dbfb6de8310aa5"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r5}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="f80000001900010028ff3684d74b928548000000000000000000ffffac1414aa200100000000000000000000000000020001610f000000000064e40000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000003000000000000003c00000000000000ffffffffffffffff00000000002000000600000000000000abcd0000000000002f00000000000000feffffffff7f4000020000000000000801000000000000000100000044000500ac1e0001000000000000000000000000000000003c00000000000000ac1414bb00000000000000000000000006000000040100"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) 59.089110702s ago: executing program 5 (id=8924): r0 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x62, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x0, 0x3c, 0x54, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x3, 0xc8}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x30, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc, r3}) 58.926684416s ago: executing program 5 (id=8925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000040)=0xb106) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x2516fe2a6eac4bfd}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 58.853089608s ago: executing program 6 (id=8926): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={0x0, 0xcd0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x490, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x464, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xfffffff8, 0x8001, 0x4, 0x5, 0x4, 0x6, 0x9, 0xe, 0xf195, 0x6, 0x3230, 0x2, 0xd2fb, 0x8, 0x1, 0xe, 0x0, 0x5, 0x7, 0x101, 0x9, 0x0, 0x7, 0x2, 0xf7, 0xf, 0xa4b, 0xf, 0x7, 0x0, 0x2, 0xe, 0x6, 0x1, 0x5, 0x3, 0x7, 0x3, 0xaf, 0xb81a, 0x0, 0x3, 0x30912ce7, 0x4, 0x1c8827a3, 0x5, 0x9, 0x3, 0x8, 0x9, 0x3, 0x6, 0xb0, 0x7, 0x1, 0x3, 0x3, 0xc3, 0x7, 0x9, 0x7, 0x7ff, 0x80, 0xa76, 0x1, 0x2, 0x8, 0x2, 0xc, 0x5, 0xc, 0x10004, 0x1, 0x4, 0x7, 0x1, 0x0, 0x64, 0x5, 0xc26, 0x5, 0x8e20, 0x0, 0x7, 0x8, 0xfffffff9, 0x100, 0x9, 0x1, 0x400, 0xd, 0x8, 0x1, 0x1, 0x6, 0x4, 0x8000, 0x2, 0x8, 0x3, 0xb, 0x584, 0x3, 0x3, 0x6, 0x0, 0xe8, 0xffffffff, 0x3, 0xfffffff7, 0x70a, 0xfffffb96, 0x5, 0x1, 0x78c3, 0x28, 0x401, 0x7fffffff, 0x82, 0x67, 0x8, 0x80, 0xf2, 0x10001, 0x3, 0x6, 0xff, 0x2ab, 0x8001, 0x38000, 0x80000000, 0xc, 0xc, 0x10000, 0x1, 0x9, 0x5, 0xb, 0x0, 0x10001, 0xc68a, 0xd9d4, 0x3, 0xffffff7f, 0x2, 0x7, 0x9, 0x724, 0x7fff, 0xca, 0x1, 0x4, 0x7, 0x3, 0x6, 0x4, 0x88ca, 0xdbdc, 0x7debbec4, 0xc, 0xd5, 0x1, 0xdb, 0x7, 0x1, 0x4, 0x540526fc, 0x4, 0x5, 0x9, 0x5, 0x71, 0x6, 0x9, 0x101, 0x8, 0x49b, 0x3e, 0x6, 0x6, 0x9, 0x3, 0x1, 0x2, 0x1, 0xe335, 0x9, 0x8, 0x401, 0x2, 0x3, 0x2, 0x7ff, 0x90, 0x6, 0x7, 0x7f, 0x7, 0x7fffffff, 0x9, 0x7, 0xc65, 0x8, 0x10001, 0x6fc0000, 0x3b3, 0x401, 0x8, 0x4c9ed481, 0x4000000, 0x1, 0x2, 0x3ff, 0x1000, 0x8, 0xe, 0x4e, 0x0, 0x0, 0x800, 0x2, 0x3, 0xf, 0xcb, 0xd75, 0x7fffffff, 0x1, 0x3, 0x400, 0x6, 0x36, 0x8000000, 0x1, 0x101, 0x80000001, 0x80000000, 0x6, 0x4, 0x101, 0x5, 0x3e4, 0x6, 0x186, 0x78000, 0x2, 0x9, 0x2, 0x0, 0x5, 0x4, 0x6bc2, 0x2, 0xe, 0x7, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100386, 0x5, 0x923c, 0xdd, 0x0, {0x4, 0x2, 0x2, 0x5, 0xcdfe, 0xaffc}, {0x26, 0x0, 0xf000, 0x1, 0x6}, 0x0, 0x10, 0x7}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x490}}, 0x0) 58.824700623s ago: executing program 5 (id=8927): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) r1 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_score_adj\x00') preadv(r1, &(0x7f0000001140)=[{0x0}, {&(0x7f0000000080)=""/154, 0x9a}], 0x2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 58.677680819s ago: executing program 6 (id=8928): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffbffd}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') close(r2) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) timer_create(0x2, &(0x7f00000004c0)={0x0, 0x6, 0x0, @thr={&(0x7f00000002c0)="1e8fb641afb12eb83b31e52ac6506084bc288173b8d20bd078e61e12feb15c1b8dfec710d7016e525d3456c7cb5b6986e59aba1d24c26a744a33d744883d661d4d8aee67e26dcdaa27dacc7e00e74b955be009bb39c0e48750878c526a24dca545809311c1a610bde5136320a29e428e94f7d72d5d0b0af120c07d9b2d07ab5c30a8529dbc21420195d3c0c74020d86fcc6faa321dc361e35a4614686dc761236851c9b99957e76db46e7336470fe0058853ae45574fbdbc1adacd7cdfa130b155404045ab2027c892aeeca033a4e57b1c90e38a6d30ac7e6e8da396319d5a208888062667cf141308", &(0x7f00000003c0)="5f567796c378f51411854dec0a10a1e89ac5922f352919521f03ed45a5e43de1978c367ab6418cddf057d4ef4a470391edee0371d661a61764e6c150bd727cba64d1cbd3dbca709521009822845eb3b4517bcfe3c7eb29846a04b36cc9f0d969ba6722405c60c4c6491635d4f3c5ab284b92177048bc60a7fe25bfed3ee9aa356efa30669cf97517be496568152e2b949907f65bcb4fb273e522b3cf9e710fb82c99cd10c2e611bb9f0a8c3229ea9114e5a51ef2cdbcd6c0a294816aaa6725ac0538af2b77cee66623674b2501c99bca894c07dcbec8058e861f84a3e59309e98a7f82d6d9ae"}}, &(0x7f0000000500)=0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000580)={{}, {r5, r6+60000000}}, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x6040000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 57.852642879s ago: executing program 6 (id=8929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000000c0)={0x4}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0xa888, r3, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 57.788556448s ago: executing program 3 (id=8930): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000009c0)={0x10, &(0x7f0000000880)={0x20, 0xf, 0x1, "8d"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x93) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet_sctp(0x2, 0x1, 0x84) listen(0xffffffffffffffff, 0x9) 56.461063675s ago: executing program 1 (id=8934): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000002280), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, r1, 0x4f6f5000) capset(0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0xc8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000280)={0x2, 0xa883, 0x1}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000580)={0x5f, 0x3, 0x101, 0xa, 0x0, 0xc1c}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000d0000000000000000000000080012000200029d360078e2d316ae17677e152d8599dda6cf3f0000000700000000320003000000000000000000000010003300000000000000000000000000fc0200000000000000000000000000000300170000000000"], 0x68}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c040600) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40000030, r8, 0x0) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000a80)='=', 0x1}], 0x1, 0x3) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000240)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x1}, 0x3c) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000040)={@empty, @empty, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0x80000000, 0x6, 0x6}, 0x3c) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x91, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109027f00010100800009040000120206000007241a00007f5b05240000000d240f01000000000900000009072414768c01000f2413044c067bb685642aef9665c31524120004a317a88b045e4f01a607c0ffcb7e392a07240a04040c7f0724140800050009058103000402072a090582020002000003090503"], 0x0) 56.394910086s ago: executing program 4 (id=8935): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 55.433391524s ago: executing program 4 (id=8936): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a24000000000000008b"], 0x0}, 0x0) 52.257208362s ago: executing program 4 (id=8937): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x6526, 0x0, 0x2, 0x1008}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) (fail_nth: 13) 52.246387749s ago: executing program 5 (id=8938): r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, r3, &(0x7f0000000040)="98", 0x17060bb3c, 0x8000000, 0x0, 0x10}]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x2dec, 0x4) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES64=r1, @ANYRES8=0x0, @ANYRES8=r0, @ANYRES64=r7, @ANYRESDEC=r2, @ANYBLOB="d967958ab040f20760005613af6d2421a703fcb58c0338a51adf82bcbef81b485103409b5123b511389ef1dbe8e7d96c65a5d8381492f31822c11efcc9c422923c342aee9287bd90d984768441713900be9487db5f9f517cbac8f83012e831ccd76308b65a3f5ad8a22b69ef073453a93bb1d911ab88d47a5ca5bd11617c777a8bc3ef2d1cec139a7f36107773"], 0x4a) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x10, r8) add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ptrace$cont(0x20, r8, 0x200, 0x40a) 51.624751281s ago: executing program 4 (id=8939): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x44, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x44}, 0x1, 0x1000000}, 0x0) 49.152558968s ago: executing program 4 (id=8940): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000780)="edcb9b902d8e48cfcb757e59f211a5962e0384da17fb6ceaac811940104afb0edec413eaa5352c43f018f42ccafcf6970b7204a99ae71ed8479274e0d2f71c284a1cfda34907abd6ea4674dc6c2efa95c48f849c970481287dd873c749d978783adbb4c255405047162cc85e780b0f3703e8650935d1f99da5bee1381618e0c363a271c0278fdfdc4e8278206830422775492e4c0b0cb627ef4780a648bcb20a132ec49cbe55f94e1e23d05d73d22d4532c312bafd40efe1526b5ea36b3f6d416a63f3ec9476e84683fad40585bac73cdcf6", &(0x7f0000000a00)="abc3b74cb3f48d114362ad619c660fd99a94e037cedc3ed29ef32124a51ca456340793c38d618f6affd86ff57b353dadde00bce532b7fd412092186194320283f062815ca8fac421cad24277b135d7c989ac0f4340e7ff41d8a89761051e135051a3e7e99aa933a95c3f36e0bb008ae0fa53abee505d22e339b6931d75443687a3ee391af8ca9803d8ede5dc8cd4818ae27a6f6f5f769a34fb81b06b0a6d3d534209d08dd878dbfb6de8310aa5"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r5}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="f80000001900010028ff3684d74b928548000000000000000000ffffac1414aa200100000000000000000000000000020001610f000000000064e40000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000003000000000000003c00000000000000ffffffffffffffff00000000002000000600000000000000abcd0000000000002f00000000000000feffffffff7f4000020000000000000801000000000000000100000044000500ac1e0001000000000000000000000000000000003c00000000000000ac1414bb00000000000000000000000006000000040100"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) 49.068711736s ago: executing program 6 (id=8941): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x2d}, 0xb00}], 0x1, 0x1100000000000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x90, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x200480d0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) 49.012402743s ago: executing program 5 (id=8942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c000000000101040000ff00000000000200fffe3c0001802c00018014000300fc02000000000000000000000000000114000400fe8800000000000000000000000001010c00024a70e2e30001018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000201010100cf26372673150000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048001}, 0x24008000) memfd_create(&(0x7f00000000c0)=',\xea\x00\xd4\xd7\xf1..\x8es\x0f\xb9\x80\xb9\x13\x92\'\x94N\x00-\xb3\x8d\xa1\xa4d\xda0y\xed\xdb\xf4\xeb-\xcf\xa3\xb8\xa3\x85\x9b\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\x00'/67, 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="070000030400018000"/25], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x2010, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) (async, rerun: 32) r7 = eventfd2(0x0, 0x801) (rerun: 32) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r7}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x110b, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) (async, rerun: 32) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) 48.93187321s ago: executing program 1 (id=8943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/18, &(0x7f0000000000)=0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r1], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x4}, 0x38) 48.547548811s ago: executing program 1 (id=8944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, 0x0, 0x0) 48.462002622s ago: executing program 5 (id=8945): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a240000000000"], 0x0}, 0x0) syz_open_procfs$userns(0x0, 0x0) 48.421999733s ago: executing program 1 (id=8946): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004700)=@base={0x23, 0x7ff, 0xf0, 0xfffffffa, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1300000000000000}, 0x50) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x2000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc0, 0x100, @void}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x157f, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x209, 0x70bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x5}}]}, 0x1c}}, 0x8800) (fail_nth: 1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x0, 0x0, 0x401}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb250d6707540288a83e0088641100feff44080283"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000400)=""/4119, 0x1017}], 0x1) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r5, @ANYBLOB="06001c004e21000008000100ac1414", @ANYBLOB="ff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 47.993825197s ago: executing program 4 (id=8947): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1200801, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0xfffffbff, 0x1c9e, 0x2, {0x1, @raw_data="703ae250a59abbd048535633a23c667752b6de9b0d41d659f7e91735c66824ec34bd116a5c2bbe7bca7699381f9584b21a8a6ae80bed93f539b10823974f8ab08abd7cd5f872412b1ea8e06baec2e377011ba060fce406d2bf764bc490a32c41936a1d9a56bb2b22e46e0a93f3135a3f038d3d15607ba132391b6065ad927b89c3871c1019c5c4516f4f91c7f9cc816ac96760cfb924783fa64c06d4b1b0501be1631114a7ee56990901754f45949319dfd3afdf477c372f44caf19a311412f9f319395d5b2a37dd"}, 0x9}) 47.941437185s ago: executing program 1 (id=8948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 0s ago: executing program 34 (id=8930): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000009c0)={0x10, &(0x7f0000000880)={0x20, 0xf, 0x1, "8d"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x93) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet_sctp(0x2, 0x1, 0x84) listen(0xffffffffffffffff, 0x9) kernel console output (not intermixed with test programs): ][ T1783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1930.593510][ T1783] Call Trace: [ 1930.593519][ T1783] [ 1930.593529][ T1783] dump_stack_lvl+0xe8/0x150 [ 1930.593567][ T1783] should_fail_ex+0x410/0x560 [ 1930.593600][ T1783] should_failslab+0xa8/0x100 [ 1930.593639][ T1783] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1930.593676][ T1783] ? __d_alloc+0x37/0x6f0 [ 1930.593707][ T1783] ? __d_alloc+0x37/0x6f0 [ 1930.593747][ T1783] __d_alloc+0x37/0x6f0 [ 1930.593806][ T1783] d_alloc_parallel+0xde/0x16b0 [ 1930.593853][ T1783] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1930.593877][ T1783] ? lock_acquire+0x115/0x350 [ 1930.593918][ T1783] __lookup_slow+0x82/0x2f0 [ 1930.593953][ T1783] lookup_slow+0x53/0x70 [ 1930.593983][ T1783] path_lookupat+0x3f5/0x8c0 [ 1930.594027][ T1783] filename_lookup+0x265/0x5d0 [ 1930.594062][ T1783] ? __pfx_filename_lookup+0x10/0x10 [ 1930.594116][ T1783] ? do_getname_kernel+0x54/0x230 [ 1930.594143][ T1783] ? do_getname_kernel+0x97/0x230 [ 1930.594173][ T1783] ? __asan_memcpy+0x40/0x70 [ 1930.594196][ T1783] ? do_getname_kernel+0x183/0x230 [ 1930.594229][ T1783] kern_path+0x3d/0x150 [ 1930.594263][ T1783] lookup_bdev+0xc8/0x2b0 [ 1930.594290][ T1783] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1930.594313][ T1783] ? resume_store+0x14e/0x4f0 [ 1930.594349][ T1783] ? __pfx_lookup_bdev+0x10/0x10 [ 1930.594377][ T1783] ? __asan_memcpy+0x40/0x70 [ 1930.594400][ T1783] ? kstrndup+0xbd/0x160 [ 1930.594445][ T1783] resume_store+0x16f/0x4f0 [ 1930.594477][ T1783] ? sysfs_file_kobj+0x1a/0x230 [ 1930.594509][ T1783] ? __pfx_resume_store+0x10/0x10 [ 1930.594546][ T1783] ? sysfs_file_kobj+0x1a/0x230 [ 1930.594576][ T1783] ? sysfs_file_kobj+0x1a/0x230 [ 1930.594605][ T1783] ? sysfs_file_kobj+0x1a/0x230 [ 1930.594646][ T1783] ? sysfs_file_kobj+0x1e4/0x230 [ 1930.594679][ T1783] ? sysfs_kf_write+0x166/0x260 [ 1930.594716][ T1783] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1930.594751][ T1783] kernfs_fop_write_iter+0x3a4/0x540 [ 1930.594787][ T1783] iter_file_splice_write+0xa31/0x1240 [ 1930.594851][ T1783] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1930.594909][ T1783] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1930.594944][ T1783] direct_splice_actor+0x101/0x160 [ 1930.594985][ T1783] splice_direct_to_actor+0x57b/0xcb0 [ 1930.595042][ T1783] ? __pfx_direct_splice_actor+0x10/0x10 [ 1930.595076][ T1783] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1930.595124][ T1783] do_splice_direct+0x195/0x290 [ 1930.595162][ T1783] ? __pfx_do_splice_direct+0x10/0x10 [ 1930.595198][ T1783] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1930.595229][ T1783] ? rw_verify_area+0x203/0x4c0 [ 1930.595268][ T1783] do_sendfile+0x52e/0x7c0 [ 1930.595306][ T1783] ? __pfx_do_sendfile+0x10/0x10 [ 1930.595331][ T1783] ? ksys_write+0x242/0x270 [ 1930.595370][ T1783] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 1930.595404][ T1783] __do_fast_syscall_32+0x27a/0x6a0 [ 1930.595437][ T1783] ? do_fast_syscall_32+0x33/0x70 [ 1930.595467][ T1783] ? asm_int80_emulation+0x1a/0x20 [ 1930.595489][ T1783] ? do_int80_emulation+0x299/0x500 [ 1930.595518][ T1783] ? trace_irq_disable+0x3b/0x140 [ 1930.595548][ T1783] do_fast_syscall_32+0x33/0x70 [ 1930.595580][ T1783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.595608][ T1783] RIP: 0023:0xf703f0ec [ 1930.595636][ T1783] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1930.595656][ T1783] RSP: 002b:00000000f540c50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1930.595681][ T1783] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 1930.595698][ T1783] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 1930.595712][ T1783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1930.595726][ T1783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1930.595741][ T1783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1930.595776][ T1783] [ 1930.627816][T29888] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1930.767680][ T1783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1930.784395][T29888] usb 6-1: device descriptor read/64, error -71 [ 1931.028589][T29888] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1931.182400][T29888] usb 6-1: device descriptor read/64, error -71 [ 1931.294051][T29888] usb usb6-port1: attempt power cycle [ 1931.386202][ T1752] FAULT_INJECTION: forcing a failure. [ 1931.386202][ T1752] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.386245][ T1752] CPU: 1 UID: 0 PID: 1752 Comm: syz.3.8751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.386277][ T1752] Tainted: [L]=SOFTLOCKUP [ 1931.386286][ T1752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1931.386300][ T1752] Call Trace: [ 1931.386309][ T1752] [ 1931.386318][ T1752] dump_stack_lvl+0xe8/0x150 [ 1931.386357][ T1752] should_fail_ex+0x410/0x560 [ 1931.386390][ T1752] should_failslab+0xa8/0x100 [ 1931.386422][ T1752] __kmalloc_noprof+0xfe/0x720 [ 1931.386444][ T1752] ? rcu_is_watching+0x16/0xb0 [ 1931.386471][ T1752] ? tomoyo_realpath_from_path+0xef/0x640 [ 1931.386503][ T1752] ? tomoyo_realpath_from_path+0xef/0x640 [ 1931.386552][ T1752] tomoyo_realpath_from_path+0xef/0x640 [ 1931.386596][ T1752] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1931.386623][ T1752] tomoyo_path_number_perm+0x246/0x5f0 [ 1931.386653][ T1752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1931.386680][ T1752] ? __lock_acquire+0x747/0x2de0 [ 1931.386721][ T1752] ? hook_file_ioctl_compat+0x1f2/0x600 [ 1931.386773][ T1752] ? __fget_files+0x2a/0x420 [ 1931.386809][ T1752] ? __fget_files+0x3a2/0x420 [ 1931.386840][ T1752] ? __fget_files+0x2a/0x420 [ 1931.386876][ T1752] security_file_ioctl_compat+0xc3/0x2a0 [ 1931.386905][ T1752] __ia32_compat_sys_ioctl+0x139/0x950 [ 1931.386937][ T1752] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1931.386964][ T1752] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1931.386997][ T1752] ? __fget_files+0x3a2/0x420 [ 1931.387036][ T1752] ? fput+0xa0/0xd0 [ 1931.387082][ T1752] __do_fast_syscall_32+0x27a/0x6a0 [ 1931.387115][ T1752] ? do_fast_syscall_32+0x33/0x70 [ 1931.387146][ T1752] ? asm_int80_emulation+0x1a/0x20 [ 1931.387169][ T1752] ? do_int80_emulation+0x299/0x500 [ 1931.387198][ T1752] ? trace_irq_disable+0x3b/0x140 [ 1931.387228][ T1752] do_fast_syscall_32+0x33/0x70 [ 1931.387261][ T1752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.387289][ T1752] RIP: 0023:0xf70bf0ec [ 1931.387309][ T1752] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1931.387329][ T1752] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1931.387354][ T1752] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000040106f52 [ 1931.387371][ T1752] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1931.387386][ T1752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.387400][ T1752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1931.387415][ T1752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.387449][ T1752] [ 1931.639436][T29888] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1931.657933][T29888] usb 6-1: device descriptor read/8, error -71 [ 1931.705672][ T1752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1931.705725][ T1752] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1931.813826][T18334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1931.815546][T18334] usb 4-1: New USB device found, idVendor=413c, idProduct=8137, bcdDevice=e3.82 [ 1931.835804][T18334] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1931.835846][T18334] usb 4-1: can't read configurations, error -71 [ 1931.904345][T29888] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1931.924534][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1931.935598][T29888] usb 6-1: device descriptor read/8, error -71 [ 1932.044590][T29888] usb usb6-port1: unable to enumerate USB device [ 1932.934002][T18334] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 1933.032093][ T1806] FAULT_INJECTION: forcing a failure. [ 1933.032093][ T1806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1933.032122][ T1806] CPU: 1 UID: 0 PID: 1806 Comm: syz.1.8769 Tainted: G L syzkaller #0 PREEMPT(full) [ 1933.032145][ T1806] Tainted: [L]=SOFTLOCKUP [ 1933.032152][ T1806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1933.032162][ T1806] Call Trace: [ 1933.032169][ T1806] [ 1933.032176][ T1806] dump_stack_lvl+0xe8/0x150 [ 1933.032205][ T1806] should_fail_ex+0x410/0x560 [ 1933.032229][ T1806] _copy_to_user+0x31/0xb0 [ 1933.032252][ T1806] simple_read_from_buffer+0xe1/0x170 [ 1933.032280][ T1806] proc_fail_nth_read+0x1bb/0x230 [ 1933.032295][ T1806] ? common_file_perm+0x20e/0x2b0 [ 1933.032317][ T1806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1933.032344][ T1806] ? rw_verify_area+0x24a/0x4c0 [ 1933.032369][ T1806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1933.032393][ T1806] vfs_read+0x213/0xa80 [ 1933.032420][ T1806] ? __pfx___mutex_lock+0x10/0x10 [ 1933.032442][ T1806] ? __pfx_vfs_read+0x10/0x10 [ 1933.032474][ T1806] ? __fget_files+0x2a/0x420 [ 1933.032500][ T1806] ? __fget_files+0x3a2/0x420 [ 1933.032537][ T1806] ? __fget_files+0x2a/0x420 [ 1933.032565][ T1806] ksys_read+0x150/0x270 [ 1933.032590][ T1806] ? __pfx_ksys_read+0x10/0x10 [ 1933.032617][ T1806] ? asm_int80_emulation+0x1a/0x20 [ 1933.032636][ T1806] do_int80_emulation+0x198/0x500 [ 1933.032659][ T1806] ? trace_irq_disable+0x3b/0x140 [ 1933.032675][ T1806] ? asm_int80_emulation+0x1a/0x20 [ 1933.032690][ T1806] ? clear_bhb_loop+0x70/0xc0 [ 1933.032706][ T1806] ? clear_bhb_loop+0x70/0xc0 [ 1933.032725][ T1806] asm_int80_emulation+0x1a/0x20 [ 1933.032741][ T1806] RIP: 0023:0xf71775ab [ 1933.032755][ T1806] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1933.032769][ T1806] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1933.032785][ T1806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 1933.032797][ T1806] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1933.032807][ T1806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1933.032816][ T1806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1933.032825][ T1806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1933.032847][ T1806] [ 1933.117783][T18334] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1933.306596][ T1809] validate_nla: 4 callbacks suppressed [ 1933.306617][ T1809] netlink: 'syz.1.8770': attribute type 41 has an invalid length. [ 1933.306635][ T1809] netlink: 'syz.1.8770': attribute type 17 has an invalid length. [ 1933.306851][T18334] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1933.306878][T18334] usb 4-1: config 0 has no interface number 0 [ 1933.306933][T18334] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1933.306962][T18334] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1933.307007][T18334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.313791][T18334] usb 4-1: config 0 descriptor?? [ 1933.476479][ T1804] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1933.482197][T18334] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1933.551658][ T1816] netlink: 'syz.1.8772': attribute type 1 has an invalid length. [ 1933.583637][ T1816] bond1: entered promiscuous mode [ 1933.584532][ T1816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1933.753282][T29888] usb 4-1: USB disconnect, device number 92 [ 1933.844281][T23829] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1933.845097][T18334] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1933.994712][T23829] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1933.995397][T23829] usb 6-1: config 0 has no interfaces? [ 1933.995437][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.997823][T23829] usb 6-1: config 0 descriptor?? [ 1934.010338][T18334] usb 2-1: not running at top speed; connect to a high speed hub [ 1934.010443][T18334] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1934.014134][T18334] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1934.021526][T18334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.021598][T18334] usb 2-1: Product: syz [ 1934.021660][T18334] usb 2-1: Manufacturer: syz [ 1934.021700][T18334] usb 2-1: SerialNumber: syz [ 1934.049118][T18334] oti6858 2-1:1.0: required endpoints missing [ 1934.202864][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1934.203762][T23829] usb 6-1: string descriptor 0 read error: -71 [ 1934.222348][T23829] usb 6-1: USB disconnect, device number 118 [ 1934.248580][T29888] usb 2-1: USB disconnect, device number 25 [ 1934.688397][ T1828] FAULT_INJECTION: forcing a failure. [ 1934.688397][ T1828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.688426][ T1828] CPU: 0 UID: 0 PID: 1828 Comm: syz.3.8778 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.688457][ T1828] Tainted: [L]=SOFTLOCKUP [ 1934.688463][ T1828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1934.688474][ T1828] Call Trace: [ 1934.688481][ T1828] [ 1934.688488][ T1828] dump_stack_lvl+0xe8/0x150 [ 1934.688520][ T1828] should_fail_ex+0x410/0x560 [ 1934.688543][ T1828] _copy_from_iter+0x1d3/0x1660 [ 1934.688567][ T1828] ? _copy_from_iter+0x21b/0x1660 [ 1934.688587][ T1828] ? __pfx__copy_from_iter+0x10/0x10 [ 1934.688610][ T1828] ? __pfx__copy_from_iter+0x10/0x10 [ 1934.688634][ T1828] copy_page_from_iter+0x219/0x2d0 [ 1934.688656][ T1828] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1934.688690][ T1828] packet_sendmsg+0x35e2/0x4f80 [ 1934.688718][ T1828] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1934.688744][ T1828] ? __lock_acquire+0x747/0x2de0 [ 1934.688767][ T1828] ? __lock_acquire+0x747/0x2de0 [ 1934.688789][ T1828] ? kstrtouint+0x6e/0xe0 [ 1934.688807][ T1828] ? __pfx_packet_sendmsg+0x10/0x10 [ 1934.688826][ T1828] ? aa_sk_perm+0x713/0x900 [ 1934.688849][ T1828] ? percpu_is_read_locked+0x130/0x190 [ 1934.688873][ T1828] ? __pfx_aa_sk_perm+0x10/0x10 [ 1934.688895][ T1828] ? aa_sock_msg_perm+0x144/0x210 [ 1934.688919][ T1828] ? apparmor_socket_sendmsg+0x98/0x360 [ 1934.688939][ T1828] ? __pfx_packet_sendmsg+0x10/0x10 [ 1934.688956][ T1828] sock_sendmsg_nosec+0x13a/0x180 [ 1934.688976][ T1828] __sys_sendto+0x408/0x5a0 [ 1934.689000][ T1828] ? __pfx___sys_sendto+0x10/0x10 [ 1934.689030][ T1828] ? __fget_files+0x3a2/0x420 [ 1934.689061][ T1828] ? ksys_write+0x242/0x270 [ 1934.689091][ T1828] __ia32_sys_sendto+0xdd/0x100 [ 1934.689115][ T1828] __do_fast_syscall_32+0x27a/0x6a0 [ 1934.689138][ T1828] ? do_fast_syscall_32+0x33/0x70 [ 1934.689159][ T1828] ? asm_int80_emulation+0x1a/0x20 [ 1934.689175][ T1828] ? do_int80_emulation+0x299/0x500 [ 1934.689196][ T1828] ? trace_irq_disable+0x3b/0x140 [ 1934.689216][ T1828] do_fast_syscall_32+0x33/0x70 [ 1934.689238][ T1828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.689259][ T1828] RIP: 0023:0xf70bf0ec [ 1934.689273][ T1828] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1934.689287][ T1828] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1934.689305][ T1828] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 1934.689317][ T1828] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 1934.689335][ T1828] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1934.689345][ T1828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1934.689355][ T1828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1934.689377][ T1828] [ 1935.165412][ T1840] netlink: 'syz.5.8783': attribute type 41 has an invalid length. [ 1935.165438][ T1840] netlink: 'syz.5.8783': attribute type 17 has an invalid length. [ 1935.525152][T29888] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1935.675971][T29888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1935.677288][T29888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.677314][T29888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1935.678347][T29888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1935.678366][T29888] usb 4-1: SerialNumber: syz [ 1935.861167][ T1851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1936.277515][ T1857] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8788'. [ 1936.315435][ T1859] syzkaller0: entered promiscuous mode [ 1936.315460][ T1859] syzkaller0: entered allmulticast mode [ 1936.406329][ T1861] netlink: 'syz.5.8790': attribute type 5 has an invalid length. [ 1936.406474][ T1861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.716644][T18334] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1936.853998][T18334] usb 6-1: device descriptor read/64, error -71 [ 1936.944083][T23829] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1937.094107][T18334] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1937.096260][T23829] usb 2-1: Using ep0 maxpacket: 32 [ 1937.096915][T23829] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1937.097833][T23829] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1937.097852][T23829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.097866][T23829] usb 2-1: config 0 has no interface number 0 [ 1937.097941][T23829] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1937.097965][T23829] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1937.097994][T23829] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1937.100047][T23829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.100065][T23829] usb 2-1: Product: syz [ 1937.100076][T23829] usb 2-1: Manufacturer: syz [ 1937.100087][T23829] usb 2-1: SerialNumber: syz [ 1937.103321][T23829] usb 2-1: config 0 descriptor?? [ 1937.115186][T23829] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1937.116452][T23829] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1937.284385][T18334] usb 6-1: device descriptor read/64, error -71 [ 1937.310776][T23829] usb 2-1: USB disconnect, device number 26 [ 1937.396454][T18334] usb usb6-port1: attempt power cycle [ 1937.744002][T18334] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1937.764158][T23829] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1937.765306][T18334] usb 6-1: device descriptor read/8, error -71 [ 1937.913984][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1937.914801][T23829] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= f.18 [ 1937.917365][T23829] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1937.917431][T23829] usb 2-1: can't read configurations, error -61 [ 1938.014026][T18334] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1938.034639][T18334] usb 6-1: device descriptor read/8, error -71 [ 1938.045063][T23829] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1938.144300][T18334] usb usb6-port1: unable to enumerate USB device [ 1938.204661][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1938.205451][T23829] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= f.18 [ 1938.208471][T23829] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1938.208513][T23829] usb 2-1: can't read configurations, error -61 [ 1938.209501][T23829] usb usb2-port1: attempt power cycle [ 1938.313673][T29888] usb 4-1: 0:2 : does not exist [ 1938.313778][T29888] usb 4-1: unit 5: unexpected type 0x0a [ 1938.377915][T29888] usb 4-1: USB disconnect, device number 93 [ 1938.452519][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1938.544296][T23829] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1938.549107][ T1870] netlink: 'syz.3.8794': attribute type 41 has an invalid length. [ 1938.569144][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1938.570704][T23829] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= f.18 [ 1938.579821][T23829] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1938.579928][T23829] usb 2-1: can't read configurations, error -61 [ 1938.704120][T23829] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1938.726490][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1938.727214][T23829] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= f.18 [ 1938.729000][T23829] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1938.729039][T23829] usb 2-1: can't read configurations, error -61 [ 1938.729652][T23829] usb usb2-port1: unable to enumerate USB device [ 1939.748769][ T1882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8798'. [ 1939.815909][ T1882] syzkaller0: entered promiscuous mode [ 1939.815927][ T1882] syzkaller0: entered allmulticast mode [ 1939.820114][T26005] IPVS: starting estimator thread 0... [ 1939.917808][ T1883] IPVS: using max 25 ests per chain, 60000 per kthread [ 1939.976977][T29888] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1940.126216][T29888] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1940.127655][T29888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.127724][T29888] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1940.132978][T29888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.133009][T29888] usb 2-1: Product: syz [ 1940.133025][T29888] usb 2-1: Manufacturer: syz [ 1940.133043][T29888] usb 2-1: SerialNumber: syz [ 1940.211606][T29888] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1940.236290][T29888] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1940.252882][T29888] scsi host1: usb-storage 2-1:1.0 [ 1940.301632][ T1889] kernel read not supported for file /blkio.bfq.io_service_bytes_recursive (pid: 1889 comm: syz.5.8801) [ 1940.301907][ T31] audit: type=1800 audit(1790217971.141:4899): pid=1889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8801" name="blkio.bfq.io_service_bytes_recursive" dev="mqueue" ino=188708 res=0 errno=0 [ 1940.438621][T18334] usb 2-1: USB disconnect, device number 31 [ 1940.510740][ T31] audit: type=1326 audit(1790217971.351:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1894 comm="syz.5.8802" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x0 [ 1940.754173][ T1902] netlink: 'syz.3.8805': attribute type 41 has an invalid length. [ 1940.798858][ T1904] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8806'. [ 1941.054159][T29888] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1941.204219][T29888] usb 4-1: Using ep0 maxpacket: 8 [ 1941.205508][T29888] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1941.206756][T29888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.206780][T29888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1941.206809][T29888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.209830][T29888] usb 4-1: config 0 descriptor?? [ 1941.244599][T18335] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1941.394133][T18335] usb 2-1: Using ep0 maxpacket: 32 [ 1941.395914][T18335] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1941.397222][T18335] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 1941.397251][T18335] usb 2-1: config 2 has no interface number 0 [ 1941.397280][T18335] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1941.397315][T18335] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1941.400050][T18335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.400076][T18335] usb 2-1: Product: syz [ 1941.400092][T18335] usb 2-1: Manufacturer: syz [ 1941.400107][T18335] usb 2-1: SerialNumber: syz [ 1941.413044][T18335] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 1941.422344][T18335] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1941.633967][T23829] usb 2-1: USB disconnect, device number 32 [ 1941.651475][T23829] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1941.652726][T23829] kobil_sct 2-1:2.45: device disconnected [ 1941.694750][T29888] betop 0003:11C0:5506.0060: no output reports found [ 1941.697860][T29888] betop 0003:11C0:5506.0060: hidraw0: USB HID v0.00 Joystick [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 1942.085760][T29888] usb 4-1: USB disconnect, device number 94 [ 1942.164780][T23829] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1942.313990][T23829] usb 6-1: Using ep0 maxpacket: 32 [ 1942.314780][T23829] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1942.315869][T23829] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1942.315900][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1942.315929][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1942.315972][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.318404][T23829] usb 6-1: config 0 descriptor?? [ 1942.319237][ T1911] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1942.322550][T23829] hub 6-1:0.0: USB hub found [ 1942.454114][T18324] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1942.527637][ T1911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.528283][ T1911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.608613][T18324] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1942.610057][T18324] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.610091][T18324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1942.610156][T18324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.632129][T18324] usb 2-1: config 0 descriptor?? [ 1943.192763][T23829] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1943.207616][T23829] usbhid 6-1:0.0: can't add hid device: -71 [ 1943.207718][T23829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1943.229739][T23829] usb 6-1: USB disconnect, device number 123 [ 1943.302748][ T1914] bond2: entered allmulticast mode [ 1943.303337][ T1914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1943.345111][ T1914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1943.346942][ T1914] macvlan2: entered allmulticast mode [ 1943.346964][ T1914] bond0: entered allmulticast mode [ 1943.347003][ T1914] bond_slave_0: entered allmulticast mode [ 1943.347023][ T1914] bond_slave_1: entered allmulticast mode [ 1943.349728][ T1914] bond_slave_0: entered promiscuous mode [ 1943.349780][ T1914] bond_slave_1: entered promiscuous mode [ 1943.362248][ T1914] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1943.419960][ T1914] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8809'. [ 1943.420260][ T1914] bond_slave_0: left promiscuous mode [ 1943.421261][ T1914] bond_slave_1: left promiscuous mode [ 1943.449580][ T1914] bond0 (unregistering): left allmulticast mode [ 1943.449599][ T1914] bond_slave_0: left allmulticast mode [ 1943.449613][ T1914] bond_slave_1: left allmulticast mode [ 1943.453486][ T1914] bond2: (slave macvlan2): Removing an active aggregator [ 1943.460238][ T1914] bond2: (slave macvlan2): Releasing backup interface [ 1943.485901][ T1914] macvlan2 (unregistering): left allmulticast mode [ 1943.512047][ T1914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1943.523800][ T1914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1943.537066][ T1914] bond0 (unregistering): Released all slaves [ 1943.641225][T18324] usbhid 2-1:0.0: can't add hid device: -71 [ 1943.641307][T18324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1943.658787][T18324] usb 2-1: USB disconnect, device number 33 [ 1943.690202][ T1923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1944.025077][ T1936] netlink: 'syz.6.8816': attribute type 41 has an invalid length. [ 1944.211376][ T1941] syzkaller1: entered promiscuous mode [ 1944.211401][ T1941] syzkaller1: entered allmulticast mode [ 1944.245570][ T5698] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1944.398356][ T5698] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1944.398403][ T5698] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 1944.432721][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.432751][ T5698] usb 6-1: Product: syz [ 1944.432766][ T5698] usb 6-1: Manufacturer: syz [ 1944.432781][ T5698] usb 6-1: SerialNumber: syz [ 1944.688861][ T5698] net_ratelimit: 4 callbacks suppressed [ 1944.688888][ T5698] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1944.688941][ T5698] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1944.688962][ T5698] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1944.738568][ T5698] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1944.756741][ T5698] usb 6-1: USB disconnect, device number 124 [ 1944.805493][T23829] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1944.954836][T23829] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1944.956704][T23829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.956731][T23829] usb 4-1: config 0 has no interfaces? [ 1944.956764][T23829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.960623][T23829] usb 4-1: config 0 descriptor?? [ 1945.624185][T18334] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1945.784340][T18334] usb 6-1: Using ep0 maxpacket: 8 [ 1945.788428][T18334] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=62.d6 [ 1945.793432][T18334] usb 6-1: config 103 has an invalid interface number: 252 but max is 0 [ 1945.793474][T18334] usb 6-1: config 103 has no interface number 0 [ 1945.793520][T18334] usb 6-1: config 103 interface 252 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1945.793542][T18334] usb 6-1: config 103 interface 252 altsetting 10 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1945.793569][T18334] usb 6-1: config 103 interface 252 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 1945.793585][T18334] usb 6-1: config 103 interface 252 altsetting 10 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1945.793604][T18334] usb 6-1: config 103 interface 252 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 1945.793644][T18334] usb 6-1: config 103 interface 252 altsetting 10 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1945.793669][T18334] usb 6-1: config 103 interface 252 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 1945.793689][T18334] usb 6-1: config 103 interface 252 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 1945.793716][T18334] usb 6-1: config 103 interface 252 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 1945.793732][T18334] usb 6-1: config 103 interface 252 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1945.793747][T18334] usb 6-1: config 103 interface 252 has no altsetting 0 [ 1945.948262][T18334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.948349][T18334] usb 6-1: Product: Ы [ 1945.948393][T18334] usb 6-1: Manufacturer: â ‰ [ 1945.948436][T18334] usb 6-1: SerialNumber: Ї [ 1946.004251][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1946.217755][T18334] cp210x 6-1:103.252: cp210x converter detected [ 1946.220030][T18334] cp210x 6-1:103.252: failed to get vendor val 0x370b size 1: -71 [ 1946.220070][T18334] cp210x 6-1:103.252: querying part number failed [ 1946.249010][T18334] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1946.292759][T18334] usb 6-1: USB disconnect, device number 125 [ 1946.351907][T18334] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1946.352500][T18334] cp210x 6-1:103.252: device disconnected [ 1946.379267][ T530] udevd[530]: setting mode of /dev/bus/usb/006/125 to 020664 failed: No such file or directory [ 1946.379423][ T530] udevd[530]: setting owner of /dev/bus/usb/006/125 to uid=0, gid=0 failed: No such file or directory [ 1946.624003][T18335] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1946.781925][T18335] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1946.783662][T18335] usb 2-1: config 0 has no interfaces? [ 1946.783700][T18335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.812422][T18335] usb 2-1: config 0 descriptor?? [ 1946.832154][ T1971] FAULT_INJECTION: forcing a failure. [ 1946.832154][ T1971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1946.832193][ T1971] CPU: 0 UID: 0 PID: 1971 Comm: syz.5.8826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1946.832228][ T1971] Tainted: [L]=SOFTLOCKUP [ 1946.832237][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1946.832252][ T1971] Call Trace: [ 1946.832261][ T1971] [ 1946.832271][ T1971] dump_stack_lvl+0xe8/0x150 [ 1946.832308][ T1971] should_fail_ex+0x410/0x560 [ 1946.832341][ T1971] prepare_alloc_pages+0x223/0x600 [ 1946.832374][ T1971] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1946.832405][ T1971] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1946.832436][ T1971] ? __pfx_policy_nodemask+0x10/0x10 [ 1946.832464][ T1971] ? __get_vm_area_node+0x155/0x2f0 [ 1946.832496][ T1971] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1946.832530][ T1971] ? __vmalloc_noprof+0xd2/0x120 [ 1946.832561][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.832585][ T1971] ? bpf_prog_load+0x14d6/0x1c20 [ 1946.832611][ T1971] ? __ia32_sys_bpf+0xba/0xd0 [ 1946.832633][ T1971] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1946.832663][ T1971] ? do_fast_syscall_32+0x33/0x70 [ 1946.832692][ T1971] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.832725][ T1971] alloc_pages_mpol+0x21e/0x390 [ 1946.832771][ T1971] alloc_pages_noprof+0xb1/0x2b0 [ 1946.832805][ T1971] get_free_pages_noprof+0xf/0x80 [ 1946.832831][ T1971] __kasan_populate_vmalloc+0x38/0x1c0 [ 1946.832854][ T1971] ? do_raw_spin_unlock+0xf5/0x200 [ 1946.832893][ T1971] alloc_vmap_area+0xd1a/0x1420 [ 1946.832943][ T1971] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1946.832973][ T1971] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1946.832999][ T1971] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1946.833023][ T1971] ? __get_vm_area_node+0x155/0x2f0 [ 1946.833061][ T1971] __get_vm_area_node+0x200/0x2f0 [ 1946.833102][ T1971] __vmalloc_node_range_noprof+0x343/0x1540 [ 1946.833139][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.833167][ T1971] ? rcu_is_watching+0x16/0xb0 [ 1946.833214][ T1971] ? bpf_check+0x106b/0x2e10 [ 1946.833242][ T1971] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1946.833285][ T1971] ? bpf_diag_init+0x87/0x140 [ 1946.833312][ T1971] ? bpf_diag_init+0x87/0x140 [ 1946.833342][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.833366][ T1971] __vmalloc_noprof+0xd2/0x120 [ 1946.833401][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.833429][ T1971] bpf_check+0x10ee/0x2e10 [ 1946.833466][ T1971] ? ktime_get_with_offset+0x93/0x2d0 [ 1946.833497][ T1971] ? __pfx_bpf_check+0x10/0x10 [ 1946.833526][ T1971] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1946.833564][ T1971] bpf_prog_load+0x14d6/0x1c20 [ 1946.833601][ T1971] ? __pfx_bpf_prog_load+0x10/0x10 [ 1946.833657][ T1971] __sys_bpf+0xd0d/0xd90 [ 1946.833693][ T1971] ? __pfx___sys_bpf+0x10/0x10 [ 1946.833723][ T1971] ? ksys_write+0x1e6/0x270 [ 1946.833769][ T1971] ? __mutex_unlock_slowpath+0x731/0x900 [ 1946.833820][ T1971] ? fput+0xa0/0xd0 [ 1946.833854][ T1971] ? ksys_write+0x242/0x270 [ 1946.833891][ T1971] __ia32_sys_bpf+0xba/0xd0 [ 1946.833918][ T1971] __do_fast_syscall_32+0x27a/0x6a0 [ 1946.833950][ T1971] ? do_fast_syscall_32+0x33/0x70 [ 1946.833979][ T1971] ? asm_int80_emulation+0x1a/0x20 [ 1946.834001][ T1971] ? do_int80_emulation+0x299/0x500 [ 1946.834031][ T1971] ? trace_irq_disable+0x3b/0x140 [ 1946.834059][ T1971] do_fast_syscall_32+0x33/0x70 [ 1946.834092][ T1971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.834120][ T1971] RIP: 0023:0xf7fd30ec [ 1946.834142][ T1971] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1946.834162][ T1971] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1946.834187][ T1971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1946.834204][ T1971] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.834218][ T1971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.834233][ T1971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1946.834247][ T1971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.834281][ T1971] [ 1946.852192][ T1971] syz.5.8826: vmalloc error: size 1088, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1946.852435][ T1971] CPU: 0 UID: 0 PID: 1971 Comm: syz.5.8826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1946.852512][ T1971] Tainted: [L]=SOFTLOCKUP [ 1946.852542][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1946.852574][ T1971] Call Trace: [ 1946.852597][ T1971] [ 1946.852620][ T1971] dump_stack_lvl+0xe8/0x150 [ 1946.852741][ T1971] warn_alloc+0x24d/0x270 [ 1946.852816][ T1971] ? lockdep_hardirqs_on+0x7b/0x110 [ 1946.852894][ T1971] ? __pfx_warn_alloc+0x10/0x10 [ 1946.852943][ T1971] ? kfree+0x1c5/0x650 [ 1946.853039][ T1971] ? __get_vm_area_node+0x219/0x2f0 [ 1946.853135][ T1971] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1946.853216][ T1971] ? rcu_is_watching+0x16/0xb0 [ 1946.853327][ T1971] ? bpf_check+0x106b/0x2e10 [ 1946.853396][ T1971] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1946.853508][ T1971] ? bpf_diag_init+0x87/0x140 [ 1946.853572][ T1971] ? bpf_diag_init+0x87/0x140 [ 1946.853646][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.853700][ T1971] __vmalloc_noprof+0xd2/0x120 [ 1946.853786][ T1971] ? bpf_check+0x10ee/0x2e10 [ 1946.853856][ T1971] bpf_check+0x10ee/0x2e10 [ 1946.853949][ T1971] ? ktime_get_with_offset+0x93/0x2d0 [ 1946.854014][ T1971] ? __pfx_bpf_check+0x10/0x10 [ 1946.854088][ T1971] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1946.854196][ T1971] bpf_prog_load+0x14d6/0x1c20 [ 1946.854300][ T1971] ? __pfx_bpf_prog_load+0x10/0x10 [ 1946.854434][ T1971] __sys_bpf+0xd0d/0xd90 [ 1946.854527][ T1971] ? __pfx___sys_bpf+0x10/0x10 [ 1946.854598][ T1971] ? ksys_write+0x1e6/0x270 [ 1946.854691][ T1971] ? __mutex_unlock_slowpath+0x731/0x900 [ 1946.854816][ T1971] ? fput+0xa0/0xd0 [ 1946.854881][ T1971] ? ksys_write+0x242/0x270 [ 1946.854982][ T1971] __ia32_sys_bpf+0xba/0xd0 [ 1946.855052][ T1971] __do_fast_syscall_32+0x27a/0x6a0 [ 1946.855127][ T1971] ? do_fast_syscall_32+0x33/0x70 [ 1946.855198][ T1971] ? asm_int80_emulation+0x1a/0x20 [ 1946.855263][ T1971] ? do_int80_emulation+0x299/0x500 [ 1946.855323][ T1971] ? trace_irq_disable+0x3b/0x140 [ 1946.855388][ T1971] do_fast_syscall_32+0x33/0x70 [ 1946.855462][ T1971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.855542][ T1971] RIP: 0023:0xf7fd30ec [ 1946.855613][ T1971] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1946.855663][ T1971] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1946.855717][ T1971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1946.855770][ T1971] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.855810][ T1971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.855842][ T1971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1946.855882][ T1971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.855956][ T1971] [ 1946.916467][ T1971] Mem-Info: [ 1946.916588][ T1971] active_anon:11953 inactive_anon:101 isolated_anon:0 [ 1946.916588][ T1971] active_file:253 inactive_file:20086 isolated_file:0 [ 1946.916588][ T1971] unevictable:0 dirty:237 writeback:0 [ 1946.916588][ T1971] slab_reclaimable:7449 slab_unreclaimable:110699 [ 1946.916588][ T1971] mapped:37368 shmem:4626 pagetables:1912 [ 1946.916588][ T1971] sec_pagetables:0 bounce:0 [ 1946.916588][ T1971] kernel_misc_reclaimable:0 [ 1946.916588][ T1971] free:1303170 free_pcp:10414 free_cma:0 [ 1946.916837][ T1971] Node 0 active_anon:47812kB inactive_anon:404kB active_file:1012kB inactive_file:80160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149444kB dirty:948kB writeback:0kB shmem:18504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13736kB pagetables:7480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1946.917096][ T1971] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1946.917304][ T1971] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.917526][ T1971] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1946.917714][ T1971] Node 0 DMA32 free:1242936kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47812kB inactive_anon:404kB active_file:1012kB inactive_file:80160kB unevictable:0kB writepending:948kB zspages:604kB present:3129332kB managed:2546944kB mlocked:0kB bounce:0kB free_pcp:41656kB local_pcp:20588kB free_cma:0kB [ 1946.917931][ T1971] lowmem_reserve[]: 0 0 0 0 0 [ 1946.918113][ T1971] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.938969][ T1971] lowmem_reserve[]: 0 0 0 0 0 [ 1946.939019][ T1971] Node 1 Normal free:3954384kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.939127][ T1971] lowmem_reserve[]: 0 0 0 0 0 [ 1946.939169][ T1971] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1946.939334][ T1971] Node 0 DMA32: 1370*4kB (UME) 1321*8kB (ME) 1292*16kB (UME) 798*32kB (UME) 405*64kB (UME) 155*128kB (UME) 161*256kB (UME) 104*512kB (UME) 54*1024kB (UME) 1*2048kB (U) 240*4096kB (UM) = 1242864kB [ 1946.939694][ T1971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1946.940214][ T1971] Node 1 Normal: 6*4kB (UM) 11*8kB (UM) 8*16kB (U) 9*32kB (UM) 7*64kB (UM) 2*128kB (U) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 963*4096kB (UM) = 3954384kB [ 1946.962207][ T1971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.962268][ T1971] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1946.962387][ T1971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.962438][ T1971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.962491][ T1971] 25081 total pagecache pages [ 1946.962567][ T1971] 120 pages in swap cache [ 1946.962607][ T1971] Free swap = 124240kB [ 1946.962628][ T1971] Total swap = 124996kB [ 1946.962662][ T1971] 2097051 pages RAM [ 1946.962739][ T1971] 0 pages HighMem/MovableOnly [ 1946.962778][ T1971] 428699 pages reserved [ 1946.962800][ T1971] 0 pages cma reserved [ 1947.175245][T18335] usb 2-1: string descriptor 0 read error: -71 [ 1947.243665][T18335] usb 2-1: USB disconnect, device number 34 [ 1947.999063][ T1973] netlink: 'syz.4.8827': attribute type 41 has an invalid length. [ 1947.999093][ T1973] netlink: 'syz.4.8827': attribute type 17 has an invalid length. [ 1947.999108][ T1973] netlink: 'syz.4.8827': attribute type 27 has an invalid length. [ 1948.131214][ T1978] FAULT_INJECTION: forcing a failure. [ 1948.131214][ T1978] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.131251][ T1978] CPU: 0 UID: 0 PID: 1978 Comm: syz.5.8830 Tainted: G L syzkaller #0 PREEMPT(full) [ 1948.131279][ T1978] Tainted: [L]=SOFTLOCKUP [ 1948.131287][ T1978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1948.131299][ T1978] Call Trace: [ 1948.131308][ T1978] [ 1948.131317][ T1978] dump_stack_lvl+0xe8/0x150 [ 1948.131353][ T1978] should_fail_ex+0x410/0x560 [ 1948.131383][ T1978] should_failslab+0xa8/0x100 [ 1948.131413][ T1978] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1948.131436][ T1978] ? kasan_save_track+0x4f/0x80 [ 1948.131456][ T1978] ? kasan_save_track+0x3e/0x80 [ 1948.131476][ T1978] ? __kasan_kmalloc+0x93/0xb0 [ 1948.131497][ T1978] ? __get_vm_area_node+0x155/0x2f0 [ 1948.131526][ T1978] ? __get_vm_area_node+0x155/0x2f0 [ 1948.131556][ T1978] ? __ia32_sys_bpf+0xba/0xd0 [ 1948.131582][ T1978] __get_vm_area_node+0x155/0x2f0 [ 1948.131617][ T1978] __vmalloc_node_range_noprof+0x343/0x1540 [ 1948.131651][ T1978] ? bpf_check+0x10ee/0x2e10 [ 1948.131684][ T1978] ? rcu_is_watching+0x16/0xb0 [ 1948.131729][ T1978] ? bpf_check+0x106b/0x2e10 [ 1948.131753][ T1978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1948.131792][ T1978] ? bpf_diag_init+0x87/0x140 [ 1948.131815][ T1978] ? bpf_diag_init+0x87/0x140 [ 1948.131844][ T1978] ? bpf_check+0x10ee/0x2e10 [ 1948.131864][ T1978] __vmalloc_noprof+0xd2/0x120 [ 1948.131895][ T1978] ? bpf_check+0x10ee/0x2e10 [ 1948.131920][ T1978] bpf_check+0x10ee/0x2e10 [ 1948.131954][ T1978] ? ktime_get_with_offset+0x93/0x2d0 [ 1948.131982][ T1978] ? __pfx_bpf_check+0x10/0x10 [ 1948.132008][ T1978] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1948.132046][ T1978] bpf_prog_load+0x14d6/0x1c20 [ 1948.132083][ T1978] ? __pfx_bpf_prog_load+0x10/0x10 [ 1948.132153][ T1978] __sys_bpf+0xd0d/0xd90 [ 1948.132187][ T1978] ? __pfx___sys_bpf+0x10/0x10 [ 1948.132216][ T1978] ? ksys_write+0x1e6/0x270 [ 1948.132254][ T1978] ? __mutex_unlock_slowpath+0x731/0x900 [ 1948.132304][ T1978] ? fput+0xa0/0xd0 [ 1948.132331][ T1978] ? ksys_write+0x242/0x270 [ 1948.132371][ T1978] __ia32_sys_bpf+0xba/0xd0 [ 1948.132398][ T1978] __do_fast_syscall_32+0x27a/0x6a0 [ 1948.132430][ T1978] ? do_fast_syscall_32+0x33/0x70 [ 1948.132459][ T1978] ? asm_int80_emulation+0x1a/0x20 [ 1948.132481][ T1978] ? do_int80_emulation+0x299/0x500 [ 1948.132510][ T1978] ? trace_irq_disable+0x3b/0x140 [ 1948.132539][ T1978] do_fast_syscall_32+0x33/0x70 [ 1948.132570][ T1978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1948.132597][ T1978] RIP: 0023:0xf7fd30ec [ 1948.132617][ T1978] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1948.132636][ T1978] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1948.132660][ T1978] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1948.132684][ T1978] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1948.132698][ T1978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1948.132713][ T1978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1948.132727][ T1978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1948.132759][ T1978] [ 1948.368484][T29888] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1948.537346][T29888] usb 2-1: not running at top speed; connect to a high speed hub [ 1948.537414][T29888] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1948.539245][T29888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.539271][T29888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1948.539324][T29888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.617052][ T1984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8832'. [ 1948.625122][T29888] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 1948.843589][ T1979] sock: sock_set_timeout: `syz.1.8829' (pid 1979) tries to set negative timeout [ 1948.873385][T29888] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1948.884186][T29888] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 1948.894816][T29888] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1948.894943][T29888] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 1948.931565][T29888] usb 2-1: USB disconnect, device number 35 [ 1948.976914][ T530] udevd[530]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 1948.977042][ T530] udevd[530]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 1949.051175][T23829] usb 4-1: string descriptor 0 read error: -71 [ 1949.052935][T23829] usb 4-1: USB disconnect, device number 95 [ 1949.208081][T18335] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1949.394014][T18335] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1949.395524][T18335] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 1949.395552][T18335] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.395572][T18335] usb 6-1: config 4 has no interface number 0 [ 1949.395616][T18335] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1949.397836][T18335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.397864][T18335] usb 6-1: Product: syz [ 1949.397879][T18335] usb 6-1: Manufacturer: syz [ 1949.397899][T18335] usb 6-1: SerialNumber: syz [ 1949.534040][T23829] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1949.684455][T23829] usb 2-1: Using ep0 maxpacket: 8 [ 1949.685341][T23829] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1949.686879][T23829] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1949.686909][T23829] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1949.686937][T23829] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1949.686990][T23829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.691762][ T1989] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1949.692050][ T1989] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1949.766080][T23829] mdc800 2-1:1.0: probe fails -> Wrong Endpoints. [ 1949.839224][T18335] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1949.946999][T18335] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1949.947070][T18335] dib0700: firmware download failed at 7 with -22 [ 1949.964946][T18335] usb 6-1: USB disconnect, device number 126 [ 1950.018582][ T1992] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1950.494463][T23829] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1950.599271][ T2000] syzkaller0: entered promiscuous mode [ 1950.599297][ T2000] syzkaller0: entered allmulticast mode [ 1950.702729][T23829] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1950.702783][T23829] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 1950.793799][T23829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.793834][T23829] usb 4-1: Product: syz [ 1950.793943][T23829] usb 4-1: Manufacturer: syz [ 1950.793962][T23829] usb 4-1: SerialNumber: syz [ 1951.206550][T23829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1951.206612][T23829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1951.206633][T23829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1951.254095][T23829] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1951.276960][T23829] usb 4-1: USB disconnect, device number 96 [ 1951.905824][T23829] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 1952.005326][T26005] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1952.069347][T23829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1952.069418][T23829] usb 6-1: New USB device found, idVendor=0299, idProduct=0075, bcdDevice=6d.03 [ 1952.069456][T23829] usb 6-1: too many configurations: 166, using maximum allowed: 8 [ 1952.071388][T23829] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1952.071425][T23829] usb 6-1: can't read configurations, error -61 [ 1952.195007][T23829] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1952.267869][T27747] usb 2-1: USB disconnect, device number 36 [ 1952.347722][T23829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1952.347784][T23829] usb 6-1: New USB device found, idVendor=0299, idProduct=0075, bcdDevice=6d.03 [ 1952.347823][T23829] usb 6-1: too many configurations: 166, using maximum allowed: 8 [ 1952.350050][T23829] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1952.350089][T23829] usb 6-1: can't read configurations, error -61 [ 1952.351926][T23829] usb usb6-port1: attempt power cycle [ 1952.419850][ T31] audit: type=1326 audit(1790217983.261:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.420380][ T31] audit: type=1326 audit(1790217983.261:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.420568][ T31] audit: type=1326 audit(1790217983.261:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.420759][ T31] audit: type=1326 audit(1790217983.261:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.421134][ T31] audit: type=1326 audit(1790217983.261:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.421364][ T31] audit: type=1326 audit(1790217983.261:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.421527][ T31] audit: type=1326 audit(1790217983.261:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.421836][ T31] audit: type=1326 audit(1790217983.261:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.421980][ T31] audit: type=1326 audit(1790217983.261:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.422134][ T31] audit: type=1326 audit(1790217983.261:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2013 comm="syz.6.8843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1952.446858][ T2016] netlink: 'syz.6.8843': attribute type 11 has an invalid length. [ 1952.714242][T23829] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1952.738729][T23829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1952.738789][T23829] usb 6-1: New USB device found, idVendor=0299, idProduct=0075, bcdDevice=6d.03 [ 1952.738824][T23829] usb 6-1: too many configurations: 166, using maximum allowed: 8 [ 1952.740973][T23829] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1952.741019][T23829] usb 6-1: can't read configurations, error -61 [ 1952.864034][T23829] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1952.887627][T23829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1952.887683][T23829] usb 6-1: New USB device found, idVendor=0299, idProduct=0075, bcdDevice=6d.03 [ 1952.887805][T23829] usb 6-1: too many configurations: 166, using maximum allowed: 8 [ 1952.890057][T23829] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1952.890092][T23829] usb 6-1: can't read configurations, error -61 [ 1952.890473][T23829] usb usb6-port1: unable to enumerate USB device [ 1953.421857][T23829] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1953.564818][T23829] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1953.565961][T23829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.565989][T23829] usb 2-1: config 0 has no interfaces? [ 1953.566009][T23829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.568703][T23829] usb 2-1: config 0 descriptor?? [ 1954.659256][ T2049] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8854'. [ 1954.791284][ T2053] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1955.074262][T18334] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1955.244012][T18334] usb 6-1: Using ep0 maxpacket: 16 [ 1955.244825][T18334] usb 6-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 1955.246075][T18334] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 1955.248651][T18334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.248677][T18334] usb 6-1: Product: Ð… [ 1955.248693][T18334] usb 6-1: Manufacturer: ä’栯镀⾸쥘徆䮸̸⦶롵쮭疗ᶭ呾ൾ톳⩫ꟼ틛㳾ﻞ㬖鉛íŸé­´æ«¥ïº´â¼ˆå‡ìŒ¥Ì¹ã¸±ëž«éš©ï’¸ïŒ‹ê¥£è‚â“ì©à±“ﶒï¨ãŸ‚㷸ㄖ隑æ­à»‹èºŒæ†·ì™žçš†æ©è¯¦ë› [ 1955.248721][T18334] usb 6-1: SerialNumber: Й [ 1955.527416][T18334] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1955.527959][T18334] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1955.532644][T18334] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1955.539014][T18334] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1955.568595][T18334] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1955.635749][T27747] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1955.637237][T18334] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1955.641468][T18334] usb 6-1: USB disconnect, device number 5 [ 1955.685317][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1955.795674][T27747] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1955.796618][T27747] usb 4-1: config 0 has no interfaces? [ 1955.796658][T27747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.799803][T27747] usb 4-1: config 0 descriptor?? [ 1956.068171][T27747] usb 4-1: string descriptor 0 read error: -71 [ 1956.080830][T27747] usb 4-1: USB disconnect, device number 97 [ 1956.167561][T23829] usb 2-1: string descriptor 0 read error: -71 [ 1956.182540][T23829] usb 2-1: USB disconnect, device number 37 [ 1956.260637][ T2081] netlink: 'syz.1.8865': attribute type 2 has an invalid length. [ 1956.260666][ T2081] netlink: 'syz.1.8865': attribute type 7 has an invalid length. [ 1956.284830][ T2081] Uý: entered promiscuous mode [ 1956.407852][ T2092] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1956.408935][ T2085] IPVS: stopping backup sync thread 2092 ... [ 1956.689526][ T2102] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 1957.228974][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1957.464227][T23829] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1957.484031][T29888] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1957.509429][ T2116] FAULT_INJECTION: forcing a failure. [ 1957.509429][ T2116] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.509460][ T2116] CPU: 0 UID: 0 PID: 2116 Comm: syz.5.8877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.509482][ T2116] Tainted: [L]=SOFTLOCKUP [ 1957.509488][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1957.509517][ T2116] Call Trace: [ 1957.509523][ T2116] [ 1957.509531][ T2116] dump_stack_lvl+0xe8/0x150 [ 1957.509560][ T2116] should_fail_ex+0x410/0x560 [ 1957.509583][ T2116] should_failslab+0xa8/0x100 [ 1957.509606][ T2116] __kmalloc_cache_noprof+0xa3/0x600 [ 1957.509624][ T2116] ? lock_acquire+0x115/0x350 [ 1957.509640][ T2116] ? subflow_ulp_init+0xd0/0x610 [ 1957.509655][ T2116] ? subflow_ulp_init+0xd0/0x610 [ 1957.509675][ T2116] subflow_ulp_init+0xd0/0x610 [ 1957.509695][ T2116] tcp_set_ulp+0x557/0x610 [ 1957.509720][ T2116] mptcp_subflow_create_socket+0x35d/0x810 [ 1957.509748][ T2116] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1957.509771][ T2116] ? process_measurement+0x7b2/0x1c10 [ 1957.509796][ T2116] ? begin_current_label_crit_section+0x2a3/0x830 [ 1957.509824][ T2116] __mptcp_nmpc_sk+0x155/0x770 [ 1957.509849][ T2116] ? do_raw_spin_lock+0x12b/0x2f0 [ 1957.509871][ T2116] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1957.509898][ T2116] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1957.509925][ T2116] mptcp_sendmsg_fastopen+0xce/0x540 [ 1957.509947][ T2116] ? mptcp_rps_record_subflows+0x1d/0x400 [ 1957.509975][ T2116] mptcp_sendmsg+0x1a69/0x1d10 [ 1957.510017][ T2116] ? lock_acquire+0x115/0x350 [ 1957.510033][ T2116] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1957.510052][ T2116] ? sock_rps_record_flow+0x19/0x350 [ 1957.510071][ T2116] ? inet_send_prepare+0xb2/0x260 [ 1957.510090][ T2116] ? inet6_sendmsg+0x101/0x120 [ 1957.510106][ T2116] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1957.510120][ T2116] sock_sendmsg_nosec+0x90/0x180 [ 1957.510140][ T2116] ____sys_sendmsg+0x54e/0x850 [ 1957.510166][ T2116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1957.510200][ T2116] ___sys_sendmsg+0x2a5/0x360 [ 1957.510222][ T2116] ? __lock_acquire+0x747/0x2de0 [ 1957.510241][ T2116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1957.510263][ T2116] ? get_pid_task+0x20/0x1f0 [ 1957.510278][ T2116] ? get_pid_task+0x20/0x1f0 [ 1957.510292][ T2116] ? get_pid_task+0x20/0x1f0 [ 1957.510329][ T2116] ? __fget_files+0x2a/0x420 [ 1957.510350][ T2116] ? __fget_files+0x3a2/0x420 [ 1957.510386][ T2116] __sys_sendmsg+0x177/0x240 [ 1957.510410][ T2116] ? __pfx___sys_sendmsg+0x10/0x10 [ 1957.510448][ T2116] __do_fast_syscall_32+0x27a/0x6a0 [ 1957.510471][ T2116] ? do_fast_syscall_32+0x33/0x70 [ 1957.510493][ T2116] ? asm_int80_emulation+0x1a/0x20 [ 1957.510509][ T2116] ? do_int80_emulation+0x299/0x500 [ 1957.510530][ T2116] ? trace_irq_disable+0x3b/0x140 [ 1957.510551][ T2116] do_fast_syscall_32+0x33/0x70 [ 1957.510572][ T2116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1957.510592][ T2116] RIP: 0023:0xf7fd30ec [ 1957.510607][ T2116] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1957.510621][ T2116] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1957.510638][ T2116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 1957.510663][ T2116] RDX: 0000000020dfefca RSI: 0000000000000000 RDI: 0000000000000000 [ 1957.510673][ T2116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1957.510682][ T2116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1957.510692][ T2116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1957.510714][ T2116] [ 1957.678213][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1957.689437][T23829] usb 2-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 1957.689628][T29888] usb 4-1: Using ep0 maxpacket: 8 [ 1957.700758][T23829] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 1957.711705][T29888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1957.850240][T29888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1957.850300][T29888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1957.850319][T29888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1957.850337][T29888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1957.850355][T29888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1957.850386][T29888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.901554][ T2120] netlink: zone id is out of range [ 1957.902453][ T2120] netlink: zone id is out of range [ 1957.902791][T23829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.902817][T23829] usb 2-1: Product: Ð… [ 1957.902925][T23829] usb 2-1: Manufacturer: ä’栯镀⾸쥘徆䮸̸⦶롵쮭疗ᶭ呾ൾ톳⩫ꟼ틛㳾ﻞ㬖鉛íŸé­´æ«¥ïº´â¼ˆå‡ìŒ¥Ì¹ã¸±ëž«éš©ï’¸ïŒ‹ê¥£è‚â“ì©à±“ﶒï¨ãŸ‚㷸ㄖ隑æ­à»‹èºŒæ†·ì™žçš†æ©è¯¦ë› [ 1957.902985][T23829] usb 2-1: SerialNumber: Й [ 1958.118613][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.119297][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.120692][T29888] usb 4-1: usb_control_msg returned -32 [ 1958.120785][T29888] usbtmc 4-1:16.0: can't read capabilities [ 1958.178949][T23829] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1958.179322][T23829] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1958.186884][T23829] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1958.190077][T23829] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1958.220003][T23829] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1958.297171][T23829] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1958.302934][T23829] usb 2-1: USB disconnect, device number 38 [ 1958.352478][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1958.544977][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8880'. [ 1958.817901][T18334] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1958.881854][ T2131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.933267][ T2131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.964076][T18334] usb 6-1: Using ep0 maxpacket: 8 [ 1958.965007][T18334] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a [ 1958.971171][T18334] usb 6-1: config 5 has an invalid interface number: 54 but max is 0 [ 1958.971201][T18334] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.971222][T18334] usb 6-1: config 5 has no interface number 0 [ 1958.971254][T18334] usb 6-1: config 5 interface 54 has no altsetting 0 [ 1958.974064][T18334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.974092][T18334] usb 6-1: Product: syz [ 1958.974136][T18334] usb 6-1: Manufacturer: syz [ 1958.974153][T18334] usb 6-1: SerialNumber: syz [ 1959.252321][T18334] cdc_ether 6-1:5.54: skipping garbage [ 1959.252371][T18334] cdc_ether 6-1:5.54: bad CDC descriptors [ 1959.266466][T18334] usb 6-1: unsupported MDLM descriptors [ 1959.267297][T18334] cdc_acm 6-1:5.54: skipping garbage [ 1959.285518][T18334] usb 6-1: USB disconnect, device number 6 [ 1960.069522][ T2150] netlink: 'syz.5.8889': attribute type 41 has an invalid length. [ 1960.069549][ T2150] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8889'. [ 1960.137465][T29888] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1960.292637][T29888] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1960.293391][T29888] usb 2-1: config 0 has no interfaces? [ 1960.293428][T29888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.327101][T29888] usb 2-1: config 0 descriptor?? [ 1960.474234][ T2161] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1960.546543][T29888] usb 2-1: string descriptor 0 read error: -71 [ 1960.556210][T29888] usb 2-1: USB disconnect, device number 39 [ 1960.958053][ T2169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8896'. [ 1960.959162][ T2169] netlink: 'syz.5.8896': attribute type 1 has an invalid length. [ 1960.959178][ T2169] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8896'. [ 1961.460839][ T2181] FAULT_INJECTION: forcing a failure. [ 1961.460839][ T2181] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.460869][ T2181] CPU: 0 UID: 0 PID: 2181 Comm: syz.4.8900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1961.460895][ T2181] Tainted: [L]=SOFTLOCKUP [ 1961.460901][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1961.460912][ T2181] Call Trace: [ 1961.460918][ T2181] [ 1961.460925][ T2181] dump_stack_lvl+0xe8/0x150 [ 1961.460965][ T2181] should_fail_ex+0x410/0x560 [ 1961.460987][ T2181] should_failslab+0xa8/0x100 [ 1961.461008][ T2181] __kmalloc_node_noprof+0x100/0x720 [ 1961.461027][ T2181] ? __fget_files+0x2a/0x420 [ 1961.461049][ T2181] ? load_msg+0x41/0x3b0 [ 1961.461068][ T2181] ? load_msg+0x41/0x3b0 [ 1961.461092][ T2181] load_msg+0x41/0x3b0 [ 1961.461117][ T2181] do_mq_timedsend+0x3b5/0xab0 [ 1961.461138][ T2181] ? __pfx_do_mq_timedsend+0x10/0x10 [ 1961.461158][ T2181] ? __fget_files+0x2a/0x420 [ 1961.461182][ T2181] ? __fget_files+0x3a2/0x420 [ 1961.461208][ T2181] __ia32_sys_mq_timedsend_time32+0x177/0x220 [ 1961.461226][ T2181] ? __pfx___ia32_sys_mq_timedsend_time32+0x10/0x10 [ 1961.461250][ T2181] __do_fast_syscall_32+0x27a/0x6a0 [ 1961.461272][ T2181] ? do_fast_syscall_32+0x33/0x70 [ 1961.461292][ T2181] ? asm_int80_emulation+0x1a/0x20 [ 1961.461307][ T2181] ? do_int80_emulation+0x299/0x500 [ 1961.461327][ T2181] ? trace_irq_disable+0x3b/0x140 [ 1961.461345][ T2181] do_fast_syscall_32+0x33/0x70 [ 1961.461366][ T2181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1961.461385][ T2181] RIP: 0023:0xf7f270ec [ 1961.461399][ T2181] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1961.461413][ T2181] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000117 [ 1961.461429][ T2181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1961.461440][ T2181] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1961.461449][ T2181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1961.461458][ T2181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1961.461468][ T2181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1961.461489][ T2181] [ 1961.660598][T18334] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1961.904897][T18334] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1961.906163][T18334] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1961.906183][T18334] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1961.906198][T18334] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.906212][T18334] usb 6-1: config 220 has no interface number 2 [ 1961.906271][T18334] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1961.906290][T18334] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1961.906345][T18334] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1961.906399][T18334] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1961.909152][T18334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.909171][T18334] usb 6-1: Product: syz [ 1961.909183][T18334] usb 6-1: Manufacturer: syz [ 1961.909194][T18334] usb 6-1: SerialNumber: syz [ 1962.100379][ T2183] netlink: 'syz.1.8901': attribute type 41 has an invalid length. [ 1962.100408][ T2183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1962.133788][T18334] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1962.133825][T18334] uvcvideo 6-1:220.0: No valid video chain found. [ 1962.149489][T18334] usb 6-1: selecting invalid altsetting 0 [ 1962.164801][T18334] usb 6-1: selecting invalid altsetting 0 [ 1962.164849][T18334] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1962.168064][T18334] usb 6-1: USB disconnect, device number 7 [ 1962.301765][ T2187] FAULT_INJECTION: forcing a failure. [ 1962.301765][ T2187] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.301804][ T2187] CPU: 1 UID: 0 PID: 2187 Comm: syz.4.8903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1962.301837][ T2187] Tainted: [L]=SOFTLOCKUP [ 1962.301844][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1962.301854][ T2187] Call Trace: [ 1962.301861][ T2187] [ 1962.301868][ T2187] dump_stack_lvl+0xe8/0x150 [ 1962.301916][ T2187] should_fail_ex+0x410/0x560 [ 1962.301948][ T2187] should_failslab+0xa8/0x100 [ 1962.301977][ T2187] __kmalloc_cache_noprof+0xa3/0x600 [ 1962.302003][ T2187] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1962.302018][ T2187] ? sctp_add_bind_addr+0x8c/0x370 [ 1962.302056][ T2187] ? sctp_add_bind_addr+0x8c/0x370 [ 1962.302105][ T2187] sctp_add_bind_addr+0x8c/0x370 [ 1962.302144][ T2187] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1962.302177][ T2187] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1962.302219][ T2187] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1962.302260][ T2187] ? sctp_v4_is_any+0x35/0x60 [ 1962.302281][ T2187] ? sctp_copy_one_addr+0x93/0x360 [ 1962.302319][ T2187] sctp_bind_addr_copy+0xb3/0x3c0 [ 1962.302346][ T2187] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1962.302390][ T2187] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1962.302421][ T2187] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1962.302454][ T2187] ? __local_bh_enable_ip+0xd6/0x140 [ 1962.302483][ T2187] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1962.302506][ T2187] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1962.302542][ T2187] sctp_sendmsg+0x159b/0x2d00 [ 1962.302585][ T2187] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1962.302612][ T2187] ? __lock_acquire+0x747/0x2de0 [ 1962.302645][ T2187] ? lock_acquire+0x115/0x350 [ 1962.302664][ T2187] ? aa_sock_msg_perm+0xfc/0x210 [ 1962.302701][ T2187] ? sock_rps_record_flow+0x19/0x350 [ 1962.302729][ T2187] ? inet_sendmsg+0x298/0x320 [ 1962.302753][ T2187] ? __pfx_inet_sendmsg+0x10/0x10 [ 1962.302779][ T2187] sock_sendmsg_nosec+0x10e/0x180 [ 1962.302800][ T2187] ____sys_sendmsg+0x54e/0x850 [ 1962.302827][ T2187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1962.302887][ T2187] ___sys_sendmsg+0x2a5/0x360 [ 1962.302917][ T2187] ? __lock_acquire+0x747/0x2de0 [ 1962.302947][ T2187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1962.302973][ T2187] ? kstrtoull+0x137/0x1d0 [ 1962.303045][ T2187] ? __fget_files+0x2a/0x420 [ 1962.303097][ T2187] ? __fget_files+0x3a2/0x420 [ 1962.303127][ T2187] __sys_sendmmsg+0x2de/0x4d0 [ 1962.303168][ T2187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1962.303228][ T2187] ? fput+0xa0/0xd0 [ 1962.303258][ T2187] ? ksys_write+0x242/0x270 [ 1962.303288][ T2187] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1962.303306][ T2187] __do_fast_syscall_32+0x27a/0x6a0 [ 1962.303351][ T2187] ? do_fast_syscall_32+0x33/0x70 [ 1962.303378][ T2187] ? asm_int80_emulation+0x1a/0x20 [ 1962.303398][ T2187] ? do_int80_emulation+0x299/0x500 [ 1962.303431][ T2187] ? trace_irq_disable+0x3b/0x140 [ 1962.303451][ T2187] do_fast_syscall_32+0x33/0x70 [ 1962.303507][ T2187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1962.303535][ T2187] RIP: 0023:0xf7f270ec [ 1962.303555][ T2187] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1962.303573][ T2187] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1962.303599][ T2187] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006d40 [ 1962.303611][ T2187] RDX: 0000000000000001 RSI: 0000000000048000 RDI: 0000000000000000 [ 1962.303621][ T2187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1962.303630][ T2187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1962.303653][ T2187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1962.303687][ T2187] [ 1962.489261][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 1962.504517][T18324] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1962.663313][T18324] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1962.676999][T18324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.677026][T18324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1962.677250][T18324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.720923][T18324] usb 2-1: config 0 descriptor?? [ 1962.932175][T18324] Bluetooth: Can't get state to change to load ram patch err [ 1962.932199][T18324] Bluetooth: Loading patch file failed [ 1962.932226][T18324] ath3k 2-1:0.0: probe with driver ath3k failed with error -32 [ 1962.999274][T18334] usb 2-1: USB disconnect, device number 40 [ 1963.304150][T27748] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1963.454158][T27748] usb 6-1: Using ep0 maxpacket: 16 [ 1963.455144][T27748] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1963.456876][T27748] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1963.456917][T27748] usb 6-1: config 0 has no interface number 0 [ 1963.456990][T27748] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1963.457019][T27748] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1963.460475][T27748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.460504][T27748] usb 6-1: Product: syz [ 1963.460521][T27748] usb 6-1: Manufacturer: syz [ 1963.460565][T27748] usb 6-1: SerialNumber: syz [ 1963.490023][T27748] usb 6-1: config 0 descriptor?? [ 1963.546313][ T2195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1963.546472][ T2195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1963.712084][ T2206] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8911'. [ 1963.754397][ T2195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1963.754529][ T2195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1963.844189][ T2127] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 1963.974389][T18324] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1964.125363][T18324] usb 2-1: Using ep0 maxpacket: 8 [ 1964.126445][T18324] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1964.127873][T18324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.127903][T18324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1964.127947][T18324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.132848][T18324] usb 2-1: config 0 descriptor?? [ 1964.190028][T27748] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 39 [ 1964.588726][T18324] betop 0003:11C0:5506.0061: no output reports found [ 1964.615998][T18324] betop 0003:11C0:5506.0061: hidraw0: USB HID v0.00 Joystick [HID 11c0:5506] on usb-dummy_hcd.1-1/input0 [ 1964.686487][ T2212] netlink: 'syz.4.8912': attribute type 41 has an invalid length. [ 1964.686516][ T2212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8912'. [ 1964.987594][T18324] usb 4-1: USB disconnect, device number 98 [ 1965.086873][T23829] usb 2-1: USB disconnect, device number 41 [ 1966.103096][T29888] usb 6-1: USB disconnect, device number 8 [ 1966.154205][T23829] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1966.306655][T23829] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1966.307832][T23829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.307857][T23829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1966.310379][T23829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.310405][T23829] usb 2-1: Product: syz [ 1966.310427][T23829] usb 2-1: Manufacturer: syz [ 1966.310439][T23829] usb 2-1: SerialNumber: syz [ 1966.371035][T23829] usb 2-1: 0:2 : does not exist [ 1966.371093][T23829] usb 2-1: unit 9 not found! [ 1966.601925][T23829] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1966.622947][T23829] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1966.757647][T23829] usb 2-1: USB disconnect, device number 42 [ 1966.785451][T27748] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1966.893218][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1966.943014][T27748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1966.943075][T27748] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1966.962874][T27748] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1966.981788][T27748] usb 6-1: string descriptor 0 read error: -22 [ 1966.982030][T27748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.154225][T23829] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1967.305892][T23829] usb 2-1: Using ep0 maxpacket: 16 [ 1967.314650][T23829] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1967.321175][T23829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.321242][T23829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1967.342284][T23829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.342358][T23829] usb 2-1: Product: syz [ 1967.342401][T23829] usb 2-1: Manufacturer: syz [ 1967.342444][T23829] usb 2-1: SerialNumber: syz [ 1967.583073][ T2262] syzkaller0: entered promiscuous mode [ 1967.583105][ T2262] syzkaller0: entered allmulticast mode [ 1967.709491][T23829] usb 2-1: 0:2 : does not exist [ 1967.709603][T23829] usb 2-1: unit 9 not found! [ 1967.974556][ T2266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8931'. [ 1967.974602][ T2266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8931'. [ 1968.134102][T27748] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1968.160563][ T2233] binder_alloc: 2232: binder_alloc_buf size 4294966672 failed, no address space [ 1968.160780][ T2233] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1968.245137][T23829] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1968.284034][T27748] usb 4-1: Using ep0 maxpacket: 32 [ 1968.285608][T27748] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1968.286973][T27748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1968.287002][T27748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1968.287052][T27748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1968.287094][T27748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.291321][T27748] usb 4-1: config 0 descriptor?? [ 1968.292353][ T2264] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1968.372306][T27748] hub 4-1:0.0: USB hub found [ 1968.416618][T23829] usb 2-1: USB disconnect, device number 43 [ 1968.510111][ T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1968.603488][ T2264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.616953][ T2264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.757995][T23829] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1969.915012][T23829] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1969.916334][T23829] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1969.916363][T23829] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1969.917546][T23829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1969.917573][T23829] usb 2-1: SerialNumber: syz [ 1969.933028][T23829] usb 2-1: No union descriptors [ 1972.941451][ T2250] usb 6-1: 1:1: usb_set_interface failed (-110) [ 1972.954543][T18334] usb 6-1: USB disconnect, device number 9 [ 1973.262832][ T2296] FAULT_INJECTION: forcing a failure. [ 1973.262832][ T2296] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.262867][ T2296] CPU: 0 UID: 0 PID: 2296 Comm: syz.4.8937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1973.262893][ T2296] Tainted: [L]=SOFTLOCKUP [ 1973.262901][ T2296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1973.262916][ T2296] Call Trace: [ 1973.262924][ T2296] [ 1973.262933][ T2296] dump_stack_lvl+0xe8/0x150 [ 1973.262966][ T2296] should_fail_ex+0x410/0x560 [ 1973.262993][ T2296] should_failslab+0xa8/0x100 [ 1973.263018][ T2296] __kmalloc_cache_noprof+0xa3/0x600 [ 1973.263038][ T2296] ? __kmalloc_cache_noprof+0x321/0x600 [ 1973.263056][ T2296] ? nfs_alloc_fhandle+0x4a/0xa0 [ 1973.263076][ T2296] ? nfs_alloc_fhandle+0x4a/0xa0 [ 1973.263104][ T2296] nfs_alloc_fhandle+0x4a/0xa0 [ 1973.263125][ T2296] nfs_init_fs_context+0x68/0x1300 [ 1973.263147][ T2296] ? mutex_init_lockdep+0xdf/0x110 [ 1973.263173][ T2296] alloc_fs_context+0x9a3/0xd00 [ 1973.263201][ T2296] do_new_mount+0x17f/0xdc0 [ 1973.263233][ T2296] ? __pfx_do_new_mount+0x10/0x10 [ 1973.263280][ T2296] ? ns_capable+0x89/0xe0 [ 1973.263308][ T2296] ? path_mount+0x647/0x1050 [ 1973.263337][ T2296] ? user_path_at+0xd4/0x160 [ 1973.263369][ T2296] __se_sys_mount+0x31d/0x420 [ 1973.263401][ T2296] ? __pfx___se_sys_mount+0x10/0x10 [ 1973.263431][ T2296] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1973.263456][ T2296] ? __ia32_sys_mount+0x20/0xc0 [ 1973.263485][ T2296] __do_fast_syscall_32+0x27a/0x6a0 [ 1973.263514][ T2296] ? do_fast_syscall_32+0x33/0x70 [ 1973.263540][ T2296] ? asm_int80_emulation+0x1a/0x20 [ 1973.263559][ T2296] ? do_int80_emulation+0x299/0x500 [ 1973.263585][ T2296] ? trace_irq_disable+0x3b/0x140 [ 1973.263620][ T2296] do_fast_syscall_32+0x33/0x70 [ 1973.263647][ T2296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1973.263671][ T2296] RIP: 0023:0xf7f270ec [ 1973.263689][ T2296] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1973.263706][ T2296] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 1973.263728][ T2296] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 1973.263742][ T2296] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 1973.263755][ T2296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1973.263767][ T2296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1973.263780][ T2296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1973.263808][ T2296] [ 1973.604693][T27748] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1973.610064][T27748] usbhid 4-1:0.0: can't add hid device: -32 [ 1973.610185][T27748] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1974.165242][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1976.093306][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.093367][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.222646][T18334] usb 2-1: USB disconnect, device number 44 [ 1976.397192][ T2311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458095][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458127][ T2311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458143][ T2311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458355][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458377][ T2311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458392][ T2311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458578][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458598][ T2311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.458613][ T2311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1976.649213][ T2312] binder: 2310:2312 unknown command 0 [ 1976.649236][ T2312] binder: 2310:2312 ioctl c0306201 80000080 returned -22 [ 1977.011071][ T2327] FAULT_INJECTION: forcing a failure. [ 1977.011071][ T2327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1977.011099][ T2327] CPU: 0 UID: 0 PID: 2327 Comm: syz.1.8946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1977.011120][ T2327] Tainted: [L]=SOFTLOCKUP [ 1977.011127][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1977.011137][ T2327] Call Trace: [ 1977.011144][ T2327] [ 1977.011150][ T2327] dump_stack_lvl+0xe8/0x150 [ 1977.011178][ T2327] should_fail_ex+0x410/0x560 [ 1977.011207][ T2327] _copy_from_user+0x2d/0xb0 [ 1977.011229][ T2327] get_compat_msghdr+0xb3/0x4c0 [ 1977.011256][ T2327] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1977.011289][ T2327] ___sys_sendmsg+0x201/0x360 [ 1977.011310][ T2327] ? __lock_acquire+0x747/0x2de0 [ 1977.011329][ T2327] ? __pfx____sys_sendmsg+0x10/0x10 [ 1977.011350][ T2327] ? get_pid_task+0x20/0x1f0 [ 1977.011365][ T2327] ? get_pid_task+0x20/0x1f0 [ 1977.011378][ T2327] ? get_pid_task+0x20/0x1f0 [ 1977.011413][ T2327] ? __fget_files+0x2a/0x420 [ 1977.011434][ T2327] ? __fget_files+0x3a2/0x420 [ 1977.011462][ T2327] __sys_sendmsg+0x177/0x240 [ 1977.011504][ T2327] ? __pfx___sys_sendmsg+0x10/0x10 [ 1977.011540][ T2327] __do_fast_syscall_32+0x27a/0x6a0 [ 1977.011564][ T2327] ? do_fast_syscall_32+0x33/0x70 [ 1977.011585][ T2327] ? asm_int80_emulation+0x1a/0x20 [ 1977.011601][ T2327] ? do_int80_emulation+0x299/0x500 [ 1977.011622][ T2327] ? trace_irq_disable+0x3b/0x140 [ 1977.011642][ T2327] do_fast_syscall_32+0x33/0x70 [ 1977.011665][ T2327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1977.011685][ T2327] RIP: 0023:0xf703f0ec [ 1977.011726][ T2327] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1977.011746][ T2327] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1977.011769][ T2327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1977.011785][ T2327] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1977.011800][ T2327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1977.011819][ T2327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1977.011829][ T2327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1977.011852][ T2327] [ 1977.040644][T18334] usb 4-1: USB disconnect, device number 99 [ 1977.394115][T18334] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1977.462566][ T2333] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1977.462744][ T2333] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1977.463104][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.463239][ T2333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1977.463543][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.463691][ T2333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1977.529330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.529762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.530253][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.530631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.531031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.531402][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.531761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.532132][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.532495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.532865][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.609162][T18334] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1977.668899][T18334] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.668928][T18334] usb 6-1: config 0 has no interfaces? [ 1977.668960][T18334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.697248][T18334] usb 6-1: config 0 descriptor?? [ 1982.534058][ C0] net_ratelimit: 26067 callbacks suppressed [ 1982.534084][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1982.534170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1982.534534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1982.534597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.534915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.534978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1982.535282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.535417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1982.535606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.535858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1985.329178][T18334] usb 6-1: string descriptor 0 read error: -32 [ 1987.544191][ C1] net_ratelimit: 25355 callbacks suppressed [ 1987.544216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1987.544231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.544650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.544963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.545256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.545563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.545845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.546119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.546396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1987.546678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1991.723886][ C1] sched: DL replenish lagged too much [ 1992.553948][ C1] net_ratelimit: 25582 callbacks suppressed [ 1992.553975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1992.554133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1992.554263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1992.554556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1992.554654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1992.554983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1992.555036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1992.555403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1992.555426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1992.555812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1997.564000][ C1] net_ratelimit: 26124 callbacks suppressed [ 1997.564024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1997.564049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1997.564395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1997.564468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1997.564762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1997.564871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1997.565204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1997.565280][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 1997.565551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1997.565768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2002.573996][ C1] net_ratelimit: 26018 callbacks suppressed [ 2002.574021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2002.574068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2002.574423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2002.574449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2002.574801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2002.574873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2002.575155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2002.575251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2002.575417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2002.575635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2007.583887][ C1] net_ratelimit: 26458 callbacks suppressed [ 2007.583915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2007.584218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2007.584248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2007.584541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2007.584613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2007.584935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2007.585005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2007.585279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2007.585440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2007.585673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2012.594026][ C1] net_ratelimit: 25805 callbacks suppressed [ 2012.594035][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2012.594051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2012.594431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2012.594441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2012.594732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2012.594835][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2012.595062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2012.595256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2012.595440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2012.595692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2017.604041][ C0] net_ratelimit: 26491 callbacks suppressed [ 2017.604067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.604249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.604459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2017.604743][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.604840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.605229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2017.605247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.605616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2017.605748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2017.606001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2022.613988][ C1] net_ratelimit: 25926 callbacks suppressed [ 2022.614014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2022.614231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2022.614490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2022.614649][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2022.614872][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2022.615047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2022.615337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2022.615445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2022.615782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2022.615826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2027.624172][ C1] net_ratelimit: 25864 callbacks suppressed [ 2027.624199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2027.624196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2027.624487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2027.624626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2027.624922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2027.625034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2027.625233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2027.625452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2027.625621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2027.625923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.404126][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2032.633951][ C1] net_ratelimit: 26272 callbacks suppressed [ 2032.633977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.634110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2032.634350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.634527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.634781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2032.634954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2032.635059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2032.635332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.635407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.635700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.643950][ C1] net_ratelimit: 26058 callbacks suppressed [ 2037.643976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.644186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.644387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.644597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2037.644689][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.644973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.644978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.645368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2037.645370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.645663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2039.708704][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.719112][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.654197][ C0] net_ratelimit: 26405 callbacks suppressed [ 2042.654222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2042.654287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2042.654575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.654664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.654967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.655042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2042.655336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.655423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.655755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.655796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2047.664059][ C0] net_ratelimit: 26559 callbacks suppressed [ 2047.664084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.664137][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2047.664489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.664516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2047.664867][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.664949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.665266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.665386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2047.665652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2047.665806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2052.674063][ C1] net_ratelimit: 26159 callbacks suppressed [ 2052.674089][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2052.674152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2052.674376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2052.674566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2052.674658][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2052.674961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2052.675086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2052.675360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2052.675371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2052.675744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2057.683950][ C0] net_ratelimit: 25992 callbacks suppressed [ 2057.683977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2057.684028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2057.684396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2057.684470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2057.684754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2057.684866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2057.685136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2057.685329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2057.685418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2057.685776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.693987][ C1] net_ratelimit: 26353 callbacks suppressed [ 2062.694013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.694127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.694378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.694550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2062.694737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.694954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2062.695106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2062.695362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2062.695382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2062.695660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2067.704218][ C0] net_ratelimit: 26727 callbacks suppressed [ 2067.704241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2067.704515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2067.704639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2067.704899][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2067.705094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2067.705197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2067.705482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2067.705503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2067.705883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2067.705912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2072.713885][ C1] net_ratelimit: 26503 callbacks suppressed [ 2072.713910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2072.714283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2072.714291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2072.714564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2072.714755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2072.714923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2072.715213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2072.715226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2072.715589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2072.715675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2077.573550][T18328] usb 6-1: USB disconnect, device number 10 [ 2077.723873][ C1] net_ratelimit: 26829 callbacks suppressed [ 2077.723897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2077.724147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2077.724232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2077.724523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2077.724534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2077.724799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2077.724906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2077.725161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2077.725274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2077.725477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2082.733987][ C0] net_ratelimit: 26312 callbacks suppressed [ 2082.734013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.734101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.734389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2082.734509][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.734754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.734908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.735155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:d2:01:8a:8f:d0, vlan:0) [ 2082.735304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.735518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2082.735712][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2083.013836][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2083.146496][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2275/1:b..l [ 2083.154450][ C1] rcu: (detected by 1, t=10516 jiffies, g=339061, q=2174 ncpus=2) [ 2083.162381][ C1] task:syz.3.8930 state:R running task stack:25808 pid:2275 tgid:2263 ppid:26763 task_flags:0x40054c flags:0x08080003 [ 2083.175922][ C1] Call Trace: [ 2083.179275][ C1] [ 2083.182248][ C1] __schedule+0x17db/0x58f0 [ 2083.186832][ C1] ? __pfx___schedule+0x10/0x10 [ 2083.191741][ C1] preempt_schedule_irq+0x4b/0x90 [ 2083.196816][ C1] irqentry_exit+0x14f/0x910 [ 2083.201453][ C1] ? trace_irq_disable+0x3b/0x140 [ 2083.206537][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.212560][ C1] RIP: 0010:__rcu_read_unlock+0x0/0xe0 [ 2083.218087][ C1] Code: d9 80 e1 07 80 c1 03 38 c1 7c dc 48 89 df e8 17 c6 8a 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff [ 2083.237731][ C1] RSP: 0000:ffffc90004ebf0b0 EFLAGS: 00000282 [ 2083.243860][ C1] RAX: cdb97680cf4a3d00 RBX: 0000000000e403fd RCX: 0000000000000046 [ 2083.251871][ C1] RDX: 0000000000000000 RSI: ffffffff8e69da56 RDI: ffffffff8c6da780 [ 2083.259880][ C1] RBP: 0000000000000000 R08: ffffffff8243b7e2 R09: 0000000000000000 [ 2083.267889][ C1] R10: dffffc0000000000 R11: fffff9400024610f R12: ffffea0001230840 [ 2083.275905][ C1] R13: dffffc0000000000 R14: ffffea0001230840 R15: 000001cc6e33c718 [ 2083.283936][ C1] ? page_ext_get+0x22/0x2e0 [ 2083.288668][ C1] __reset_page_owner+0x67/0x1f0 [ 2083.293661][ C1] free_unref_folios+0xdc2/0x14e0 [ 2083.298789][ C1] ? folios_put_refs+0x991/0xb30 [ 2083.303867][ C1] folios_put_refs+0x9e9/0xb30 [ 2083.308695][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2083.314036][ C1] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 2083.320426][ C1] shmem_undo_range+0x4e6/0x15d0 [ 2083.325422][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 2083.330914][ C1] ? __lock_acquire+0x747/0x2de0 [ 2083.335911][ C1] ? stack_trace_save+0xa9/0x100 [ 2083.340912][ C1] shmem_evict_inode+0x247/0xae0 [ 2083.345910][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 2083.351695][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2083.357205][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2083.363393][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2083.368562][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 2083.373729][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2083.379239][ C1] evict+0x624/0xb50 [ 2083.383196][ C1] ? __pfx_evict+0x10/0x10 [ 2083.387683][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 2083.392847][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2083.397739][ C1] ? iput+0xb84/0xf00 [ 2083.401780][ C1] dentry_kill+0x1b9/0x880 [ 2083.406240][ C1] finish_dput+0x1a/0x260 [ 2083.410617][ C1] __fput+0x675/0xa50 [ 2083.414649][ C1] task_work_run+0x1d9/0x270 [ 2083.419281][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2083.424430][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 2083.429620][ C1] do_exit+0x73a/0x2360 [ 2083.433910][ C1] ? ___sys_sendmsg+0x2b5/0x360 [ 2083.438813][ C1] ? __pfx_do_exit+0x10/0x10 [ 2083.443449][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2083.448532][ C1] do_group_exit+0x22d/0x2f0 [ 2083.453164][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2083.458417][ C1] get_signal+0x121b/0x12c0 [ 2083.462994][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 2083.468588][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2083.474816][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 2083.480225][ C1] ? rcu_is_watching+0x16/0xb0 [ 2083.485121][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2083.490213][ C1] __do_fast_syscall_32+0x437/0x6a0 [ 2083.495481][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2083.500588][ C1] ? irqentry_exit+0x10f/0x910 [ 2083.505396][ C1] ? trace_irq_disable+0x3b/0x140 [ 2083.510473][ C1] do_fast_syscall_32+0x33/0x70 [ 2083.515380][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2083.521770][ C1] RIP: 0023:0xf70bf0ec [ 2083.525873][ C1] RSP: 002b:00000000f546b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2083.534325][ C1] RAX: 0000000000000020 RBX: 0000000000000008 RCX: 0000000080000200 [ 2083.542330][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2083.550339][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2083.558348][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2083.566445][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2083.574499][ C1] [ 2083.577582][ C1] rcu: rcu_preempt kthread starved for 341 jiffies! g339061 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 2083.588546][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2083.598550][ C1] rcu: RCU grace-period kthread stack dump: [ 2083.604463][ C1] task:rcu_preempt state:R running task stack:27752 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2083.618005][ C1] Call Trace: [ 2083.621325][ C1] [ 2083.624294][ C1] __schedule+0x17db/0x58f0 [ 2083.628875][ C1] ? __pfx___schedule+0x10/0x10 [ 2083.633775][ C1] ? lock_acquire+0x115/0x350 [ 2083.638505][ C1] ? schedule+0x90/0x2b0 [ 2083.642795][ C1] schedule+0x164/0x2b0 [ 2083.646997][ C1] schedule_timeout+0x152/0x2c0 [ 2083.651892][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2083.657304][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2083.662655][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2083.668509][ C1] ? prepare_to_swait_event+0x322/0x350 [ 2083.674109][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 2083.679023][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2083.685233][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2083.690560][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2083.695810][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2083.701668][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 2083.706305][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2083.711553][ C1] ? __kthread_parkme+0x71/0x1f0 [ 2083.716623][ C1] ? __kthread_parkme+0x199/0x1f0 [ 2083.721708][ C1] kthread+0x38b/0x480 [ 2083.725824][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2083.731063][ C1] ? __pfx_kthread+0x10/0x10 [ 2083.735789][ C1] ret_from_fork+0x514/0xb70 [ 2083.740455][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2083.745613][ C1] ? __switch_to+0xc89/0x1420 [ 2083.750344][ C1] ? __pfx_kthread+0x10/0x10 [ 2083.754984][ C1] ret_from_fork_asm+0x1a/0x30 [ 2083.759820][ C1] [ 2083.762874][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2083.769238][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2083.774498][ C0] NMI backtrace for cpu 0 [ 2083.774520][ C0] CPU: 0 UID: 0 PID: 3226 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 2083.774548][ C0] Tainted: [L]=SOFTLOCKUP [ 2083.774555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2083.774569][ C0] Workqueue: bat_events batadv_dat_purge [ 2083.774604][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 2083.774637][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 a4 a6 0c 48 89 de 5b e9 23 87 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d f8 73 cd 11 65 48 8b 15 f8 73 [ 2083.774655][ C0] RSP: 0018:ffffc90000006bc8 EFLAGS: 00000202 [ 2083.774671][ C0] RAX: ffffffff8abf9b96 RBX: dffffc0000000000 RCX: ffff88803301be80 [ 2083.774687][ C0] RDX: 8000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 2083.774707][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000004 [ 2083.774719][ C0] R10: 0000000000000003 R11: ffffffff8abf99a0 R12: ffff88808d917912 [ 2083.774733][ C0] R13: 00000000000005dc R14: ffff88808d9117ff R15: 00000000000005dc [ 2083.774747][ C0] FS: 0000000000000000(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 2083.774763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2083.774777][ C0] CR2: 00000000f75bed1c CR3: 000000007facc000 CR4: 00000000003526f0 [ 2083.774794][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2083.774806][ C0] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2083.774819][ C0] Call Trace: [ 2083.774826][ C0] [ 2083.774834][ C0] br_nf_dev_queue_xmit+0x20a/0x25c0 [ 2083.774871][ C0] ? NF_HOOK+0xa2/0x6e0 [ 2083.774899][ C0] ? NF_HOOK+0xa2/0x6e0 [ 2083.774926][ C0] NF_HOOK+0x64e/0x6e0 [ 2083.774956][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2083.774984][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 2083.775015][ C0] ? net_generic+0x1e/0x240 [ 2083.775041][ C0] ? net_generic+0x1e/0x240 [ 2083.775071][ C0] br_nf_post_routing+0xa51/0xee0 [ 2083.775099][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 2083.775131][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 2083.775161][ C0] nf_hook_slow+0xc5/0x220 [ 2083.775183][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 2083.775212][ C0] NF_HOOK+0x23e/0x3f0 [ 2083.775236][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 2083.775261][ C0] ? NF_HOOK+0xa2/0x3f0 [ 2083.775285][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2083.775311][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 2083.775341][ C0] ? net_generic+0x1e/0x240 [ 2083.775369][ C0] br_forward_finish+0xd3/0x130 [ 2083.775394][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 2083.775422][ C0] br_nf_forward_finish+0xa76/0xea0 [ 2083.775457][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 2083.775489][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 2083.775517][ C0] ? NF_HOOK+0xa2/0x6e0 [ 2083.775544][ C0] ? NF_HOOK+0xa2/0x6e0 [ 2083.775571][ C0] NF_HOOK+0x64e/0x6e0 [ 2083.775601][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2083.775627][ C0] ? net_generic+0x1e/0x240 [ 2083.775657][ C0] ? net_generic+0x1e/0x240 [ 2083.775683][ C0] ? net_generic+0x1e/0x240 [ 2083.775720][ C0] br_nf_forward_ip+0x7e7/0xa30 [ 2083.775748][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 2083.775779][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 2083.775808][ C0] nf_hook_slow+0xc5/0x220 [ 2083.775830][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 2083.775856][ C0] NF_HOOK+0x23e/0x3f0 [ 2083.775882][ C0] ? NF_HOOK+0xa2/0x3f0 [ 2083.775906][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2083.775932][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 2083.775956][ C0] ? skb_clone+0x246/0x3a0 [ 2083.775997][ C0] ? br_flood+0x620/0x8d0 [ 2083.776020][ C0] ? br_handle_vlan+0x5e/0x530 [ 2083.776044][ C0] __br_forward+0x397/0x540 [ 2083.776067][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 2083.776094][ C0] br_handle_frame_finish+0x1119/0x1950 [ 2083.776122][ C0] ? __netif_receive_skb_core+0x989/0x30c0 [ 2083.776142][ C0] ? process_backlog+0x727/0x18b0 [ 2083.776163][ C0] ? __napi_poll+0xaa/0x330 [ 2083.776187][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2083.776218][ C0] ? __lock_acquire+0x747/0x2de0 [ 2083.776240][ C0] ? nf_hook_slow+0x176/0x220 [ 2083.776262][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2083.776289][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 2083.776321][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 2083.776350][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2083.776379][ C0] ? lock_acquire+0x115/0x350 [ 2083.776400][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 2083.776419][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2083.776450][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 2083.776469][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 2083.776487][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 2083.776507][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 2083.776526][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 2083.776557][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 2083.776585][ C0] br_handle_frame+0x1329/0x1600 [ 2083.776619][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2083.776649][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2083.776676][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 2083.776713][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 2083.776740][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2083.776766][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 2083.776797][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2083.776817][ C0] ? ip6_rcv_finish+0x265/0x280 [ 2083.776844][ C0] ? NF_HOOK+0x336/0x3c0 [ 2083.776878][ C0] ? process_backlog+0x3de/0x18b0 [ 2083.776898][ C0] ? process_backlog+0x3de/0x18b0 [ 2083.776922][ C0] process_backlog+0x727/0x18b0 [ 2083.776946][ C0] ? process_backlog+0x3de/0x18b0 [ 2083.776975][ C0] __napi_poll+0xaa/0x330 [ 2083.776996][ C0] net_rx_action+0x61d/0xf50 [ 2083.777024][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2083.777044][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2083.777071][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2083.777097][ C0] handle_softirqs+0x226/0x860 [ 2083.777124][ C0] ? do_softirq+0x77/0xd0 [ 2083.777150][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 2083.777177][ C0] do_softirq+0x77/0xd0 [ 2083.777201][ C0] [ 2083.777207][ C0] [ 2083.777214][ C0] __local_bh_enable_ip+0x100/0x140 [ 2083.777239][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 2083.777269][ C0] ? process_scheduled_works+0x97a/0x1630 [ 2083.777294][ C0] process_scheduled_works+0xc3d/0x1630 [ 2083.777334][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2083.777357][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2083.777387][ C0] ? assign_work+0x3af/0x5d0 [ 2083.777412][ C0] rescuer_thread+0x7c5/0x10e0 [ 2083.777442][ C0] ? rescuer_thread+0xb8/0x10e0 [ 2083.777478][ C0] kthread+0x38b/0x480 [ 2083.777496][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 2083.777521][ C0] ? __pfx_kthread+0x10/0x10 [ 2083.777539][ C0] ret_from_fork+0x514/0xb70 [ 2083.777557][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2083.777574][ C0] ? __switch_to+0xc89/0x1420 [ 2083.777600][ C0] ? __pfx_kthread+0x10/0x10 [ 2083.777619][ C0] ret_from_fork_asm+0x1a/0x30 [ 2083.777655][ C0]