last executing test programs: 5m38.469552415s ago: executing program 3 (id=2944): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r2, 0x0, 0x4, 0x3, &(0x7f0000000a80)="e39ce6", 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) socket$inet(0x2, 0x2, 0x0) 5m37.570263852s ago: executing program 3 (id=2948): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000240)=r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async, rerun: 64) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (rerun: 64) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000}, {0x0, 0x0, 0x6}], 0x2, 0xbff, 0x38, 0x0, 0x0, 0x40}) 5m36.841752868s ago: executing program 3 (id=2950): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x20000) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000c02da86710009050602", @ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="72a810b2e77799deb7307fe4273f59859a1971aa5c70cd103b284972f167dcbe44731594f3ed6db585c55c3c778aca8fdd9830eb8b80ed9ab1c1d2223b2ac16dfdec82882477b9a59fd9c696d720a3cb43f5fc4a4bb0d23a3e9e35"], 0x0) 5m35.57343636s ago: executing program 3 (id=2955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x34, 0x1, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @uid}, @nested={0x28, 0xd6, 0x0, 0x1, [@nested={0x24, 0x8f, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0x8, 0x125, 0x0, 0x0, @uid}, @nested={0x4, 0x19}, @nested={0x4, 0x44}, @nested={0x4, 0x67}, @nested={0x4, 0x13d}, @generic="ffeed8b9"]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40881}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000000}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x4000) 5m35.441363149s ago: executing program 3 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @empty, 0x8}, 0x1c) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0xf, 0x2}, @timestamp, @mss={0x2, 0x746adc75}, @timestamp], 0x4) signalfd4(r4, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m34.930511133s ago: executing program 3 (id=2961): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x200, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffefffff}, {0x6789, 0x400ffff}, {}, {0x1}, {}, {0x0, 0x9}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x3}], 0x12, 0x0, 0x0, 0x8000000}) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x107, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff275ad4949e0200473e00f90066000006019078ac1e0001ac1414bb83078eac14143a000400907800000000450b0004006700893101000200000000ac141406940401000713d0ac1414bb0a0101017f000005ac1414014428915000000001000000060000000600000009008987b44138edd7baa1ab15a0ff00000a0000000e0000000400000048ffffffff442cd4f1ac1e000100000006ac1414aa581811dd64010102000000090000000000000002640101000000008083038e890708ffffffff44f30c130a01010000000000ac1e010100000006861a0000000005043c1e07103aea1f952c2f34b019d624885bb4830766ac1e00018913e5e0000001e0000002ac1414aa7f"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000580)={0x2, @raw_data="3f53a4d1ae3922a529a2fc6ef43689f4c9a5d258af16baada9f3af65d5765333bc7a28de07e4a0cbcb8c53d62b21589a1149279bea1189d69c62bb1cfd7d825cca42a73aa0ca5ee3c5e91ff82dc576eac620d1ddff00cc3325dbde63c417cd0392733925882224cba715b7f0df77e6207058140ee6beb184d75f1f3bd43e32463c0756a23a1bfb397e73ad6276a7cd6b6c36d6b2e130b78ef9a7219bc7ed8fbb137f22c372f32a19a906809466e6506d21f133fb659226bda8380612bf8e2f21fdc1b0a813438df2"}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000040)={0x9, {0xb5, 0x4, 0xb, 0x7}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 5m19.826055965s ago: executing program 32 (id=2961): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x200, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffefffff}, {0x6789, 0x400ffff}, {}, {0x1}, {}, {0x0, 0x9}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x3}], 0x12, 0x0, 0x0, 0x8000000}) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x107, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000580)={0x2, @raw_data="3f53a4d1ae3922a529a2fc6ef43689f4c9a5d258af16baada9f3af65d5765333bc7a28de07e4a0cbcb8c53d62b21589a1149279bea1189d69c62bb1cfd7d825cca42a73aa0ca5ee3c5e91ff82dc576eac620d1ddff00cc3325dbde63c417cd0392733925882224cba715b7f0df77e6207058140ee6beb184d75f1f3bd43e32463c0756a23a1bfb397e73ad6276a7cd6b6c36d6b2e130b78ef9a7219bc7ed8fbb137f22c372f32a19a906809466e6506d21f133fb659226bda8380612bf8e2f21fdc1b0a813438df2"}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000040)={0x9, {0xb5, 0x4, 0xb, 0x7}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 3m21.459421917s ago: executing program 0 (id=3441): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f00001ed000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000002c0)=0x5ce3d9a8, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8806, &(0x7f00000001c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000600)=""/4099, 0x1003, 0x110) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "980aeb5ccbfd2e027500fcab434a457f"}, 0x11, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000040000100fcff07000400008001000000a5c104d9d678cac136f8c6a4c9eeadb560427af3ecc2a19c438d62e67c1e1effde0000000b068ee615697ce3c0a198dee27e6135e9aa36757dc416d3f14b833b5886f4b3358f00"/101], 0x14}}, 0x4008094) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x10000, 0x928}}) 3m19.841678032s ago: executing program 0 (id=3447): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x800, 0x70bd2c, 0x25dfdbff, {0x80, 0x80, 0x10, 0x6, 0xff, 0x2, 0x0, 0x2, 0x5000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000010) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x5d, 0x6d, 0x10, 0x6cd, 0x11c, 0x9a2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x3, 0x47, 0x3d, 0x6f, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xfe, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x5, 0x7f, 0x2}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x0, 0x3, 0xac}}]}}]}}]}}, 0x0) 3m18.151315665s ago: executing program 0 (id=3452): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) gettid() r3 = getpid() syz_open_procfs(r3, &(0x7f00000001c0)='timers\x00') socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) clock_gettime(0x9, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x943103, 0x103, 0x11}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0xfffffec8, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0) 3m16.600534564s ago: executing program 0 (id=3456): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$isdn(0x22, 0x2, 0x22) close(r4) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1f8, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x1561, 0x6, 0x0, 0x6, 0x1, 0x6, 0x1000, 0xde, r2, 0x0, 0x8001, 0x80000000}}, {0x1, 0x3, 0x14c, 0x32540194, ' \xa6N\xd8\xfe\x01k\xcb\xff\xb2\x9b{\xc2\x00\x87\x80\x8e?\xfb>?\v#\xe6\x8cS\x02\x1fzO\xeb\xef#Qw\xdd\xc2x}\x15\x9b\xcd\xe3\xf1DA\x99\xac\xdd\xae<\xde <\x1f0Y\x98\xa1\xcf\xad|`\x1bg\xa4\xe0\xdd!\xb8o\x1d\xca\xc9\xe7\xb4\x15\xc7\t\x0f\"\x846\xc1\xccBx/\xd3R\xdb\x9e\x7fj\xfd0Xl\xb4\x85u\x8e2\x02u{\xca\xae\x93}G#\xbcM@pDt\x17\xff\xff\xf4k\xdb\x7f\xbd\xbd\xde\x06\xd6\xc7\xd0]\xfer \xff\xff\xa7\xbd\xc5b(x\x93w\x0eT\xafd\xe0\x85=\xb6\xd9\xcb\xea\xed\x17\x8f\x06!\xa5?.%\xb6\x1d\xf2\x16 \xb9\x14\xda\x87q\x9c\x8b\xf9/\xac\xd7\xb0w\xd1\xfd\xd4\xdbj\x97V\xa2\r\xa2r\x1b\x9c\xf0DH\xf4\x1ax\xde\x8d\xc6\xde]\xe5\xe4\x03\x9e\a\xdaM\xbf=\xc7pJ{\xb3\xeb[\xc6h\xe6p3\xfe\xebj\x1d\xd9D\x8a\x1f\x03\xcc\xb9\xad\x9c\x8c\xf8\x8a\xbd\x15\xcc\ak\xf5hq\x87\xb8\x92\x808\xf2\xa1\xa6\f\x10\xb8B\xce%MjI?\xdf\xbe=\xb5|P\aQ\xe4\xab\x00\xe3<\x19\xbc\x80\xac\xab\xa3\x1d\xbaw\xa4\x12\x8c\x01N\x92\xa6,AJ\xd3SJm\x92\x88\x98W]\xc4\xa6>F\x84\x1a\xa9$\a\xf6\t\xdc\xbd\xd9\x97\xb4\b}\xeeu'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x701, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200d, 0x60181}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x4000800) 3m15.982586074s ago: executing program 0 (id=3458): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f00001ed000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000002c0)=0x5ce3d9a8, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "980aeb5ccbfd2e027500fcab434a457f"}, 0x11, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @empty, @empty, 0x700, 0x20, 0x0, 0x928}}) 3m15.494312845s ago: executing program 0 (id=3460): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xf) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x4044057) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={0x0}) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) 3m14.494086699s ago: executing program 33 (id=3460): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xf) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x4044057) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={0x0}) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) 2m30.073626741s ago: executing program 4 (id=3612): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020000000000000000000010902240001000000f60904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x73f, 0x5, 0x1}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff2}, {0xb, 0xffe0}, {0xfff1, 0x1307ae493569ce23}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r10, &(0x7f0000000180)=0xfe5f, 0x12) 2m25.747640741s ago: executing program 4 (id=3626): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000d0000000850000007a000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.542073697s ago: executing program 4 (id=3627): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x7042ab7c6493c79c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x40000000000, 0x28901) syz_usb_connect(0x4, 0x5f, &(0x7f0000000140)=ANY=[@ANYRES8=r5], 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0xe, [0x4, 0xa, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x6, 0x6, 0x7ff, 0x4, 0xfc, 0x3ff, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x3, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x2, 0x3ff, 0x3, 0x14dc, 0x1, 0x405, 0x100004, 0x3, 0x22, 0x0, 0x8c, 0x1, 0x7, 0x5, 0x4, 0x5, 0x8, 0x80000000, 0x1005, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0xe0a, 0x8000, 0xf667, 0xfffffffc, 0x5, 0x8, 0x7f, 0x6, 0xc8, 0x0, 0x0, 0xc3, 0x4, 0x10, 0x10001, 0x1, 0x5, 0x1, 0x5, 0x83, 0xe39, 0xcf, 0x10, 0x404, 0x41267e2a, 0x7, 0xe1d, 0x71c9, 0x3, 0x323, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x9, 0x8, 0xc, 0xc, 0x4, 0x8, 0xffffffc0, 0x1, 0x4, 0x5, 0x5, 0x4e27, 0x6fb26e6, 0x0, 0x8, 0x3, 0x100009, 0x9b7, 0x1, 0x80000001, 0x7b, 0xea, 0x6, 0x80000000, 0x2, 0x7, 0x4da8e6f3, 0x4, 0x10001, 0x8, 0x69e4, 0xd08a, 0xfffffff4, 0xfe], "81be740924d2e750097e7928e499c6c74ccfe9134767046ad485ecb22b963519b784ba7509ded29466e9ee30a6c4e51b5795b65c07e2bba6d08f2ecec6b3b0d0aaf707bff22fc2bdd0676c020d98f2936679e91e8e96bf04a7024dfc71602bcd"}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc044, 0x0) r7 = syz_io_uring_setup(0xd69, &(0x7f0000000380)={0x0, 0x59a2, 0x20, 0x0, 0xa1c}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r10, 0x4b30, 0x7) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000280)=0xc0) 2m22.317886239s ago: executing program 4 (id=3639): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) gettid() connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x4, 0x0, 0x0) 2m21.366819483s ago: executing program 1 (id=3643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48020000}, 0x94) 2m21.32241064s ago: executing program 1 (id=3644): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000a00)=r4, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {0x4}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r6, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r9, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x744c, &(0x7f0000000480)={0x0, 0xa799, 0x10, 0x2, 0x2f2}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 2m19.951918453s ago: executing program 6 (id=3650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x40005) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x0, 0x50, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000000)={r6}) (async) r7 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2m19.819632354s ago: executing program 1 (id=3651): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40090) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40090) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/51, 0x33}], 0x5, &(0x7f0000002700)=""/110, 0x6e}, 0x60}, {{&(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002800)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/157, 0x9d}, {&(0x7f0000002940)=""/59, 0x3b}, {&(0x7f0000002980)=""/59, 0x3b}], 0x4, &(0x7f0000002a00)=""/22, 0x16}, 0xb}], 0x2, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/51, 0x33}], 0x5, &(0x7f0000002700)=""/110, 0x6e}, 0x60}, {{&(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002800)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/157, 0x9d}, {&(0x7f0000002940)=""/59, 0x3b}, {&(0x7f0000002980)=""/59, 0x3b}], 0x4, &(0x7f0000002a00)=""/22, 0x16}, 0xb}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) (async) r4 = socket(0x1000000010, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4, 0x6, @private0, 0xb}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x3, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r9, r10, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0xa0f5, 0xf49, 0x1, 0x1, 0x5, 0x412f, 0xe154, 0x1200, 0x7f, 0x6, 0xffffffff, "7f26d000"}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x4, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r11, r12, 0x1000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x7f}, &(0x7f0000000540)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x7f}, &(0x7f0000000540)=0x8) 2m19.674325415s ago: executing program 6 (id=3654): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) unshare(0x4020400) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001400)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0xff, 0x5, 0x0, 0x96}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) r2 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m19.606310523s ago: executing program 6 (id=3655): r0 = socket(0x22, 0x2, 0x4) accept4$unix(r0, 0x0, 0x0, 0x80800) 2m19.567628325s ago: executing program 1 (id=3656): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r1], 0x5c}, 0x1, 0xba01}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x7, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x700, 0x8024, 0x5, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x7, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x700, 0x8024, 0x5, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800060}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x40, 0x28, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x16e18ff4c35b9d21, 0x5}, {0xa, 0xd}, {0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1000}}}, @TCA_RATE={0x6, 0x5, {0x4, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x20002011) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) (async) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x4}) fcntl$lock(r5, 0x6, &(0x7f0000002400)={0x1, 0x1, 0x2, 0x5}) fcntl$lock(r5, 0x6, &(0x7f0000000140)={0x2, 0x0, 0x8, 0xfffffffffffffffb}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x108, &(0x7f0000001500)=ANY=[@ANYBLOB="0201aa"]) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) 2m19.477332486s ago: executing program 6 (id=3658): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x8000}, 0xf) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0) 2m19.444466949s ago: executing program 4 (id=3659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904ad710100fb1a00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x160, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x401, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0xfffffffd, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x80, "6fc3070b4f8f7330202b93875f2d67a6a77871d3deea63c88762c678ad93d881e7a57e95"}}]}, 0x160}}, 0x804) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m19.377471877s ago: executing program 2 (id=3661): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x7e, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0x84, 0x8}}}}}, 0x0) 2m19.321472283s ago: executing program 2 (id=3662): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f8000000850000007a000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m19.28728141s ago: executing program 6 (id=3663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x2, 0x53650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa267, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x3], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x10) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a00090507"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) (async) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) (async) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x2, 0x53650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa267, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x3], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x10) (async) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a00090507"], 0x0) (async) 2m19.181830414s ago: executing program 2 (id=3664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x703040, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1030b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r8, 0xc0045405, &(0x7f0000000040)=0xa5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f0000000440)=@userptr={0x0, 0xa, 0x4, 0x0, 0x18aec3a0, {}, {0x1, 0xc, 0x6, 0x3, 0x2, 0x7, 'wCZb'}, 0x6, 0x2, {&(0x7f0000000400)}, 0x3}) 2m18.140604516s ago: executing program 2 (id=3665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/59, 0x3b}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000000280)='a', 0x1, 0x5}]) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000100)={{r1}, {@val={r3}, @actul_num={@val=0x2b, 0x101000000000, 0x4b}}}) ioctl$TCXONC(r1, 0x540a, 0x0) 2m17.809251754s ago: executing program 5 (id=3668): r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/212, 0xd4}], 0x2}, 0x40000000) (async) futex(&(0x7f0000000240)=0x2, 0x100, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000340)=0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r2, &(0x7f0000000380)={0xd9a3, 0xffffffffffffff5f, 0x3, 0x6, 0x8, 0x86100, 0x400, 0xa, 0xfffffff9}) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x340, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "49d13835d999cb63245ce9f7924c6c5cb543d229b11382812814d4446880"}}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "a5e713da4ac8ba94f09e3a0ef6dad4966e23cd480a7b668a2b86907b375cb8765ae9eb4b2e5367a67aba8c72ab87572cbf33135c777e0c0d24bf543cd378bb9d7527b2a006989fee76135840b48fdd2695403ff755a02b381d0c334098aebd4b3354b8ce936dd4cc12278af3bfef52a3ea8f91fe5572a02510e9888bf71d5f25c908dbb236ee50df24185ba91912b58eb73151e7242586413b4fa2b7a94c8d32bc73a3749277cd5d2e4517f134f55b915e7731f4d5af7b42a434f4ec0c378b261ff0ae7fd902fc5d081dc647bd4166889ca11116e969ebb39efa6dda45cb7a1954c1dd6eebc0a343979a646fc421383716"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xec6b}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "c9281fcad47f5167d87e8bdb1864efb3e748fb32e7ef42668b1fc82d9c75211a42b9f6fb36e5cb73d9fc367f00e1"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "149a1aba314085e45e5ab4b2fb031b8faab60afbb5c223b417c477b6acd9aa33d440911acd2549759899ce980e04f4188a91771bc1d917a15ffa18c9ee9e2cab1bd4f29bacf337bb3901072df4a23eb4dccc09ceb452d2edf51ec48038f40f1b2e9d2ac1f8563fb3aad21284de923f894307eb83040aad59a5dc39149fc0f862f9ff9a7e03394b4267939a0e4603ad49028209bccdcb6bb47a140fb9a42410b4f38d26be36a196f6ed5cf3f534b5ab3de1701f6cb923e1c29e3418"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1e44800}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040040) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x40050}, 0x100000c0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f00000009c0)={0x40, 0xa, 0x64, {0x64, 0x3, "6ace579dd03044898091780dc50f04b0b84b59311be8fe79fa41125bcf988ed139cea9bbc31a4a8d87ff3cfad115ce8cef8fa9d7ef84908b306cbd70114b82b736e26659c7a225abda8ea0cd575539c4f87bd83da874fe3b123df7cadae39cd3f7c6"}}, &(0x7f0000000a40)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "aa6ce56e575bceefc671b52cf388de91f465f1be6054b9f6218dd4ef1d27e2f4107192decdb5843ee901"}}, &(0x7f0000000a80)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x6, "86779474"}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "f83f9001"}, @local=@item_012={0x1, 0x2, 0x4, '\t'}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0xfd8}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x1, 0xd3, "15ff9c176c5b5c23ec1bddd4cca4b33dad74265c328a2f0ce2ff63d30e91a88b733b865fddda124a2c289aefa4a170de919fe62fdc34bcaa2e92fd219b794521ee6bca0bd58681f1e9009256afbcc6819f5e015d47d2d8ababe2e2a837a3a764dc3896d3cb2613f51cc8519650f6fd6f934cc56421965d79cdc148f36f57ceb0f3dd58e67dc5c46688252d842532340b40e11837ea290ff914c9d368a3f0b52bd53293b75fc36e6d7822567502631a8f38dd170a4368a35ccc70b5cdb6d58c9ca25371e40410f71d5f02932e80750f00248f01"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000cc0)={0x20, 0x1, 0x48, "dabcfe2650921a1a2c6f9a25603c612a9c5566c39946b4af86bf377c6fb3abcd11464643123c05035a02faa2e717a17f6e896fa169f4529e0c37bc7cd64c75716bcc33b803437ae7"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x8}}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x88, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000fc0), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000010c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x8805) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x64, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3de}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x5104}, 0x4000040) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x205c2, 0x0) (async) read$FUSE(r3, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000032c0)=0x4) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x3c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x3c}}, 0x8800) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x15}}}}, [@NL80211_ATTR_FILS_KEK={0x3b, 0xf2, "ca1d57ebfff3adcb101343bf1d59de2cd265f96bffe366097efae3cd6e779a79e1f63140364afff1cf624687ff0a79a28047e3c13cb363"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c810}, 0x8040) (async) r9 = syz_open_procfs(r8, &(0x7f0000003540)='net/stat\x00') ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000003580)=0x200) (async) pipe(&(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f0000003680)={0x16, 0x98, 0xfa00, {&(0x7f0000003640)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7f030, @empty, 0xff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r10, &(0x7f0000003740)={0x11, 0x10, 0xfa00, {&(0x7f0000003600), r11}}, 0x18) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000003780)=0x100000000, 0x0, 0x4) 2m17.738863416s ago: executing program 5 (id=3669): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x2004c004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x45, 0x8000, 0x0, 0x80000000000009, 0x2, 0xfffffdffffffffff, 0xfa0f, 0x1}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8004, 0x7, 0x1000, 0x81, 0xfffffe0020000001, 0x5, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) (async) r5 = socket(0x9, 0x2, 0x3) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) getsockopt$packet_buf(r5, 0x107, 0x16, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "560700000045d1c42317afad7d48ed51000000000000000100"}) (async) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) 2m17.649918328s ago: executing program 5 (id=3670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000010000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m17.581404162s ago: executing program 1 (id=3671): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume_offset', 0x1a3001, 0x18) pwrite64(r0, &(0x7f0000000300)="9e", 0x1, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8f5b}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x3c}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) finit_module(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2m17.468566294s ago: executing program 5 (id=3672): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x898, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r12, 0xc2604110, &(0x7f0000000280)={0x0, [[0x400007ff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x2], [0x4, 0x40000000, 0xfffffffd, 0x80000, 0x0, 0x6], [0x0, 0x20000232, 0x6, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x400000, 0x3}, {0x0, 0x3}, {0xfffffffe}, {}, {}, {0x0, 0x80}, {0x7, 0x40004000}, {0x6}]}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0xfff2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x6, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0xab8, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) close(0x3) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) (async) r13 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r13, 0xc02054a5, 0x0) (async, rerun: 64) write$P9_RVERSION(r13, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async, rerun: 64) ioctl$SNDCTL_DSP_SETTRIGGER(r13, 0x40045010, &(0x7f0000000100)=0x9) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5522, 0x0) (async, rerun: 64) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) (rerun: 64) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 2m17.322289696s ago: executing program 5 (id=3673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000009bff0000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100008500000069000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) pipe2(&(0x7f0000000000), 0x800) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f00000000c0)=[@cr4={0x1, 0x100070}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1b9200, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m16.700415565s ago: executing program 2 (id=3674): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000002010000850000007a000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.30878637s ago: executing program 1 (id=3675): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}], 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000640)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="c5", @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000d000000080026000816"], 0x40}}, 0x200040b4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, &(0x7f00000001c0)) ptrace$cont(0x1f, 0x0, 0x6, 0x4) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x60200, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f7e2058408780d3e483ab2724d948b50c120d223d37ab456ec0c1970570804a01d", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=r2], 0x138}, 0x1, 0x0, 0x0, 0x20044805}, 0x4) socket(0x10, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000300)='batadv\x00', 0x7) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 2m16.228091711s ago: executing program 2 (id=3676): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1a, 0x2, 0x2b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_io_uring_setup(0xec5, &(0x7f0000000500), &(0x7f0000000080)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xc1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) process_mrelease(r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1d8, 0x230, 0x242, 0x1d8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4e21, 0x0, 0x3, 0x4e24, 0x4, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x2c, 0x3, 0x7, 0x281, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x48050) r8 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(r8) kcmp(r9, r8, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000014) 2m16.227712697s ago: executing program 5 (id=3677): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x0, 0x1da) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000140)={0x4, 0x5, 0x7, 0x40e1, 0x15, '\x00\x00\x00\t\x00'}) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d02, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002380)=0x0) getgroups(0x1, &(0x7f00000023c0)=[0x0]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002400)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000002500)=0xe8) r13 = getegid() statx(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0, 0x1, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f00000046c0)={0x338, 0x0, r5, [{{0x6, 0x1, 0x6, 0xd0, 0x0, 0x4, {0x3, 0x7, 0x1, 0x2, 0x1, 0x8e, 0x5, 0x9b, 0x0, 0xd000, 0x401, 0x0, r6, 0x101, 0x3d9}}, {0x6, 0xf08, 0xf, 0x1000, '/dev/dri/card#\x00'}}, {{0x4, 0x3, 0x2, 0x7ff, 0x3, 0x3, {0x1, 0x3, 0x0, 0x3, 0x9, 0x27, 0x1, 0x9, 0x0, 0xc000, 0x9, r7, r8, 0x7, 0x8}}, {0x1, 0x1000, 0x9, 0x2, '/dev/kvm\x00'}}, {{0x5, 0x0, 0x8, 0xffffffffffffffca, 0x5, 0x4, {0x2, 0x100, 0x4, 0x101, 0xfffffffffffffff8, 0x2, 0x7, 0xaaf5, 0x0, 0x4000, 0xd58, r10, r11, 0x3, 0xfffffffd}}, {0x5, 0xd, 0x9, 0x6, '/dev/kvm\x00'}}, {{0x3, 0x1, 0x8, 0x7, 0xe776, 0x1, {0x2, 0x1, 0x1, 0x503, 0x9, 0x2, 0xb3, 0x5, 0x80000000, 0xa000, 0x9, r12, r13, 0x3, 0x9ad}}, {0x3, 0x2, 0x0, 0x3}}, {{0x3, 0x0, 0x10001, 0x3, 0x0, 0x9, {0x0, 0xfffffffffffffffc, 0x1, 0x6, 0x100000000, 0xfff, 0x7, 0x7, 0x9, 0x8000, 0x1, r14, r15, 0xa, 0x2da6}}, {0x5, 0x5, 0x0, 0xe}}]}, 0x338) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1c4, 0x0, 0xfffffffffffffffc}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) 2m16.033858786s ago: executing program 6 (id=3678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="89dc019c9f323daeed8af18a43a259e7cbc90f9aacb8de54123c03038ae0bac4bedc36072a027968080d28b2ce9829878afaeaba4696e81a1b0e967d09845a820da997976c9e4fb1faba4f39d6b1051849ccb24c187bffbed6ecd2a21db39a13aad7ff09081dd09fdb0650a199f41f9efb1a8366e90084663858ca14f9798a6c793bb04dfe1778d1aa21d63d6328e07b3468d5340ec65989eeb94bb59473", 0x9e}, {&(0x7f0000000100)="3aff69feef9cfd", 0x7}, {&(0x7f0000000140)="f58680db2387ff7a9e47a2a0d59ea0e0c4aeb01b18803cf4f457174b6d13a9bddf42a3856f0fb69595bfa60e8627b108f15605a46cdb90b520a97acc0764b9ad339dfb5f1e640c8a968bb4d11a5708bfedb135e4f98124ac61c595f5ae7588f0f00345d2205172e6b3cb6702db6ea75e2b5c9b58909256355a151f31b8b14faa6f9fee1eb2d6afc9334f73f7b950a1f82c74d4c87c4c41ed3e5c84f559db3c99c373e1b9a997607f81eb2da927903cbeebc5b6afd57c28efc49ae72fdb50", 0xbe}], 0x3, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x38}}], 0x1, 0x20000080) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x531b3984}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x42}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) connect$tipc(0xffffffffffffffff, &(0x7f0000000480)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x39c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x358, 0x3, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "be49b9c70d6a4892f67696c5a5e94e047c522b5610bea903eb7ebc4fd8c7edacbadd6d9a296ab5c9140cf57ff3d1a03e08f93f430f222970706736fd3bf4047198f1afc8676f015e6ba4cc02e50b27757c3ba0636d7eb259c8b929fc6eae373a0c4fb76505789b2fc9ab27bb7938d8e5643590be4bec5d2ea3c5096de2e229aff40879f05d24fd4331e055d7fd553e6fd6bc1567ee110cd92b8723e47c4adecc47b730c58b2318f84f7b2e62c233c72679e60d10b7470e4fc54d48b2c9f27d2c6538f7dbd3f325601b273f8f42452c55292f1cd0c96caf9ece8731f4d95d299f92f60d6a770c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "d9cfa3654475c2682b10b41c03b2beddc877fb08bb85cf14a4f047a816df0afbc474896f31505b89265731e9755035ac88a763a44e567c4cbfb3ffcaae95c9b124cf6e2479461a7b5d9e734cbbaf26fb042e17f8227f15ce458c11fa6a0ee5a59dc1494c51bd437cb1b95501607e05e1a4958541b338346966a5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "beade01d32360e40c4263e7316013b00eacb02b6fe7261a99f746debd568c2130bf89a7285b9144590860e9320"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x39c}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000940)={{0xd000, 0xe000, 0xf, 0x8, 0x7, 0x9, 0x9, 0xe, 0xe, 0x5, 0x4, 0x54}, {0xdddd1000, 0x30000, 0xa, 0x4, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0xe, 0x80}, {0x2000, 0xe000, 0xf, 0x9, 0x8, 0x1, 0xd, 0x1, 0xe, 0xe, 0x10, 0x3}, {0x43000, 0x1, 0xb, 0x9, 0xf5, 0x7f, 0x4, 0x8, 0x2, 0x1, 0x0, 0x3}, {0x4000, 0x10000, 0xb, 0x1, 0xf9, 0x2, 0x40, 0x80, 0x7, 0xd4, 0x6, 0x8}, {0x3000, 0xeeef0000, 0x4, 0xff, 0x6, 0x81, 0x7, 0x9, 0x7, 0x3, 0x6, 0x2}, {0x25000, 0xd000, 0x3, 0x2, 0x6c, 0x18, 0x9, 0x0, 0x1, 0xe, 0x5, 0x7}, {0xeeeea000, 0x1, 0x10, 0xe, 0x9, 0x7, 0x4, 0xe, 0x9, 0x9, 0x8}, {0xdddd0000, 0x401}, {0x4, 0x2}, 0x40000000, 0x0, 0x30000, 0x200a0, 0x3, 0xe480, 0x0, [0x100000001, 0x4, 0x9, 0x7]}) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000b00)) mknodat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x800, 0x1000) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x7) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000b80)={0x2, 0x100, 0x76}) r6 = memfd_secret(0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2080, 0x0) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) futimesat(r7, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c80)={{0x77359400}, {r8, r9/1000+60000}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000cc0)={0x80, 0xcd5f, 0x1, 0x0, 0x80}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet(r0, &(0x7f0000000d00)=""/244, 0xf4, 0x20, &(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000e40)={r5}) clock_gettime(0x0, &(0x7f0000007b00)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000007900)=[{{&(0x7f0000000e80)=@nl=@proc, 0x80, &(0x7f0000002380)=[{&(0x7f0000000f00)=""/194, 0xc2}, {&(0x7f0000001000)=""/227, 0xe3}, {&(0x7f0000001100)=""/231, 0xe7}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/115, 0x73}, {&(0x7f00000012c0)=""/143, 0x8f}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x7, &(0x7f0000002400)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003400)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000003480)=""/4096, 0x1000}], 0x1}, 0x2}, {{&(0x7f00000044c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004540)=""/197, 0xc5}, {&(0x7f0000004640)=""/169, 0xa9}, {&(0x7f0000004700)=""/134, 0x86}, {&(0x7f00000047c0)=""/7, 0x7}, {&(0x7f0000004800)=""/166, 0xa6}, {&(0x7f00000048c0)=""/17, 0x11}], 0x6, &(0x7f0000004980)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004a00)=""/90, 0x5a}, {&(0x7f0000004a80)=""/13, 0xd}, {&(0x7f0000004ac0)=""/45, 0x2d}], 0x3}, 0x40000000}, {{&(0x7f0000004b40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004bc0)=""/170, 0xaa}, {&(0x7f0000004c80)=""/181, 0xb5}, {&(0x7f0000004d40)=""/107, 0x6b}, {&(0x7f0000004dc0)=""/65, 0x41}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/179, 0xb3}], 0x6}, 0x9}, {{&(0x7f0000005f80)=@nfc_llcp, 0x80, &(0x7f0000006080)=[{&(0x7f0000006000)=""/103, 0x67}], 0x1, &(0x7f00000060c0)=""/68, 0x44}, 0xffff7bae}, {{&(0x7f0000006140)=@un=@abs, 0x80, &(0x7f00000063c0)=[{&(0x7f00000061c0)=""/221, 0xdd}, {&(0x7f00000062c0)=""/12, 0xc}, {&(0x7f0000006300)=""/115, 0x73}, {&(0x7f0000006380)=""/28, 0x1c}], 0x4, &(0x7f0000006400)=""/127, 0x7f}, 0x8}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000006480)=""/244, 0xf4}, {&(0x7f0000006580)=""/111, 0x6f}, {&(0x7f0000006600)=""/22, 0x16}, {&(0x7f0000006640)=""/104, 0x68}, {&(0x7f00000066c0)=""/152, 0x98}, {&(0x7f0000006780)=""/146, 0x92}, {&(0x7f0000006840)=""/49, 0x31}], 0x7, &(0x7f0000006900)=""/4096, 0x1000}, 0x86eb}], 0x8, 0x40010063, &(0x7f0000007b40)={r10, r11+60000000}) flock(r6, 0x9) io_setup(0x6, &(0x7f0000007b80)) 2m8.933043298s ago: executing program 4 (id=3679): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a840, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0x88, 0x1c, 0x80}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x8, 0xc8f3, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1, 0x1, 0xffffffff}}) 0s ago: executing program 34 (id=3678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="89dc019c9f323daeed8af18a43a259e7cbc90f9aacb8de54123c03038ae0bac4bedc36072a027968080d28b2ce9829878afaeaba4696e81a1b0e967d09845a820da997976c9e4fb1faba4f39d6b1051849ccb24c187bffbed6ecd2a21db39a13aad7ff09081dd09fdb0650a199f41f9efb1a8366e90084663858ca14f9798a6c793bb04dfe1778d1aa21d63d6328e07b3468d5340ec65989eeb94bb59473", 0x9e}, {&(0x7f0000000100)="3aff69feef9cfd", 0x7}, {&(0x7f0000000140)="f58680db2387ff7a9e47a2a0d59ea0e0c4aeb01b18803cf4f457174b6d13a9bddf42a3856f0fb69595bfa60e8627b108f15605a46cdb90b520a97acc0764b9ad339dfb5f1e640c8a968bb4d11a5708bfedb135e4f98124ac61c595f5ae7588f0f00345d2205172e6b3cb6702db6ea75e2b5c9b58909256355a151f31b8b14faa6f9fee1eb2d6afc9334f73f7b950a1f82c74d4c87c4c41ed3e5c84f559db3c99c373e1b9a997607f81eb2da927903cbeebc5b6afd57c28efc49ae72fdb50", 0xbe}], 0x3, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x38}}], 0x1, 0x20000080) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x531b3984}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x42}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) connect$tipc(0xffffffffffffffff, &(0x7f0000000480)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x39c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x358, 0x3, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "be49b9c70d6a4892f67696c5a5e94e047c522b5610bea903eb7ebc4fd8c7edacbadd6d9a296ab5c9140cf57ff3d1a03e08f93f430f222970706736fd3bf4047198f1afc8676f015e6ba4cc02e50b27757c3ba0636d7eb259c8b929fc6eae373a0c4fb76505789b2fc9ab27bb7938d8e5643590be4bec5d2ea3c5096de2e229aff40879f05d24fd4331e055d7fd553e6fd6bc1567ee110cd92b8723e47c4adecc47b730c58b2318f84f7b2e62c233c72679e60d10b7470e4fc54d48b2c9f27d2c6538f7dbd3f325601b273f8f42452c55292f1cd0c96caf9ece8731f4d95d299f92f60d6a770c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "d9cfa3654475c2682b10b41c03b2beddc877fb08bb85cf14a4f047a816df0afbc474896f31505b89265731e9755035ac88a763a44e567c4cbfb3ffcaae95c9b124cf6e2479461a7b5d9e734cbbaf26fb042e17f8227f15ce458c11fa6a0ee5a59dc1494c51bd437cb1b95501607e05e1a4958541b338346966a5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "beade01d32360e40c4263e7316013b00eacb02b6fe7261a99f746debd568c2130bf89a7285b9144590860e9320"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xf}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x39c}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000940)={{0xd000, 0xe000, 0xf, 0x8, 0x7, 0x9, 0x9, 0xe, 0xe, 0x5, 0x4, 0x54}, {0xdddd1000, 0x30000, 0xa, 0x4, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0xe, 0x80}, {0x2000, 0xe000, 0xf, 0x9, 0x8, 0x1, 0xd, 0x1, 0xe, 0xe, 0x10, 0x3}, {0x43000, 0x1, 0xb, 0x9, 0xf5, 0x7f, 0x4, 0x8, 0x2, 0x1, 0x0, 0x3}, {0x4000, 0x10000, 0xb, 0x1, 0xf9, 0x2, 0x40, 0x80, 0x7, 0xd4, 0x6, 0x8}, {0x3000, 0xeeef0000, 0x4, 0xff, 0x6, 0x81, 0x7, 0x9, 0x7, 0x3, 0x6, 0x2}, {0x25000, 0xd000, 0x3, 0x2, 0x6c, 0x18, 0x9, 0x0, 0x1, 0xe, 0x5, 0x7}, {0xeeeea000, 0x1, 0x10, 0xe, 0x9, 0x7, 0x4, 0xe, 0x9, 0x9, 0x8}, {0xdddd0000, 0x401}, {0x4, 0x2}, 0x40000000, 0x0, 0x30000, 0x200a0, 0x3, 0xe480, 0x0, [0x100000001, 0x4, 0x9, 0x7]}) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000b00)) mknodat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x800, 0x1000) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x7) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000b80)={0x2, 0x100, 0x76}) r6 = memfd_secret(0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2080, 0x0) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) futimesat(r7, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c80)={{0x77359400}, {r8, r9/1000+60000}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000cc0)={0x80, 0xcd5f, 0x1, 0x0, 0x80}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet(r0, &(0x7f0000000d00)=""/244, 0xf4, 0x20, &(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000e40)={r5}) clock_gettime(0x0, &(0x7f0000007b00)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000007900)=[{{&(0x7f0000000e80)=@nl=@proc, 0x80, &(0x7f0000002380)=[{&(0x7f0000000f00)=""/194, 0xc2}, {&(0x7f0000001000)=""/227, 0xe3}, {&(0x7f0000001100)=""/231, 0xe7}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/115, 0x73}, {&(0x7f00000012c0)=""/143, 0x8f}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x7, &(0x7f0000002400)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003400)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000003480)=""/4096, 0x1000}], 0x1}, 0x2}, {{&(0x7f00000044c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004540)=""/197, 0xc5}, {&(0x7f0000004640)=""/169, 0xa9}, {&(0x7f0000004700)=""/134, 0x86}, {&(0x7f00000047c0)=""/7, 0x7}, {&(0x7f0000004800)=""/166, 0xa6}, {&(0x7f00000048c0)=""/17, 0x11}], 0x6, &(0x7f0000004980)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004a00)=""/90, 0x5a}, {&(0x7f0000004a80)=""/13, 0xd}, {&(0x7f0000004ac0)=""/45, 0x2d}], 0x3}, 0x40000000}, {{&(0x7f0000004b40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004bc0)=""/170, 0xaa}, {&(0x7f0000004c80)=""/181, 0xb5}, {&(0x7f0000004d40)=""/107, 0x6b}, {&(0x7f0000004dc0)=""/65, 0x41}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/179, 0xb3}], 0x6}, 0x9}, {{&(0x7f0000005f80)=@nfc_llcp, 0x80, &(0x7f0000006080)=[{&(0x7f0000006000)=""/103, 0x67}], 0x1, &(0x7f00000060c0)=""/68, 0x44}, 0xffff7bae}, {{&(0x7f0000006140)=@un=@abs, 0x80, &(0x7f00000063c0)=[{&(0x7f00000061c0)=""/221, 0xdd}, {&(0x7f00000062c0)=""/12, 0xc}, {&(0x7f0000006300)=""/115, 0x73}, {&(0x7f0000006380)=""/28, 0x1c}], 0x4, &(0x7f0000006400)=""/127, 0x7f}, 0x8}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000006480)=""/244, 0xf4}, {&(0x7f0000006580)=""/111, 0x6f}, {&(0x7f0000006600)=""/22, 0x16}, {&(0x7f0000006640)=""/104, 0x68}, {&(0x7f00000066c0)=""/152, 0x98}, {&(0x7f0000006780)=""/146, 0x92}, {&(0x7f0000006840)=""/49, 0x31}], 0x7, &(0x7f0000006900)=""/4096, 0x1000}, 0x86eb}], 0x8, 0x40010063, &(0x7f0000007b40)={r10, r11+60000000}) flock(r6, 0x9) io_setup(0x6, &(0x7f0000007b80)) kernel console output (not intermixed with test programs): setting 6 endpoint 0x82 has invalid maxpacket 1096, setting to 64 [ 1153.656860][ T8241] cdc_wdm 2-1:1.0: skipping garbage [ 1153.668436][ T5829] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1153.679966][ T8241] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1153.685857][ T8241] cdc_wdm 2-1:1.0: Unknown control protocol [ 1153.697955][ T5829] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.721352][ T5829] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1153.728128][T18143] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1153.740807][ T5829] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1153.750696][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.759059][T18143] usb 5-1: device descriptor read/8, error -71 [ 1153.767013][ T5829] usb 6-1: Product: syz [ 1153.772964][ T5829] usb 6-1: Manufacturer: syz [ 1153.777547][ T5829] usb 6-1: SerialNumber: syz [ 1153.789822][T19390] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1153.797930][T19390] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1153.997864][T18143] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 1154.018407][T18143] usb 5-1: device descriptor read/8, error -71 [ 1154.066444][ T5829] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1154.402812][T18143] usb usb5-port1: unable to enumerate USB device [ 1154.404375][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1154.404391][ T30] audit: type=1800 audit(1770245541.327:919): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3438" name="bus" dev="ramfs" ino=99247 res=0 errno=0 [ 1154.472344][ C0] wdm_int_callback: 1185 callbacks suppressed [ 1154.472364][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.485008][ C0] wdm_int_callback: 1185 callbacks suppressed [ 1154.485024][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.497844][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.504445][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.510692][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.517284][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.523635][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.530302][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.536555][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.543137][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.549498][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.556073][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.562302][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.568886][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.575186][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.581848][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.588272][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.594869][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.601185][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1154.607762][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1154.615096][ T796] usb 2-1: USB disconnect, device number 54 [ 1154.615158][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1154.732952][ T5829] usb 6-1: USB disconnect, device number 25 [ 1154.936399][T19413] program syz.5.3443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1155.877765][ T796] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1156.072243][T19422] sg_write: data in/out 411065/130 bytes for SCSI command 0x89-- guessing data in; [ 1156.072243][T19422] program syz.5.3446 not setting count and/or reply_len properly [ 1156.143410][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.182365][ T796] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1156.204092][T19428] xt_connbytes: Forcing CT accounting to be enabled [ 1156.235245][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1156.347791][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1156.357575][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1156.428011][T16221] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1156.488759][ T796] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1156.498143][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1156.506209][ T796] usb 5-1: Product: syz [ 1156.557821][ T796] usb 5-1: Manufacturer: syz [ 1156.585602][ T796] usb 5-1: SerialNumber: syz [ 1156.624996][T16221] usb 1-1: Using ep0 maxpacket: 16 [ 1156.632476][T16221] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 1156.645272][T16221] usb 1-1: config 0 has no interface number 0 [ 1156.654050][ T796] usb 5-1: config 0 descriptor?? [ 1156.676961][T16221] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1156.706442][T16221] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1156.747157][T16221] usb 1-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=9a.2b [ 1156.766809][T16221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.788866][T16221] usb 1-1: Product: syz [ 1156.797328][T16221] usb 1-1: Manufacturer: syz [ 1156.842114][T16221] usb 1-1: SerialNumber: syz [ 1156.868609][T16221] usb 1-1: config 0 descriptor?? [ 1156.888735][T16221] keyspan 1-1:0.140: Keyspan 1 port adapter converter detected [ 1156.905019][ T796] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1156.916673][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 84 [ 1156.929734][ T796] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1156.946280][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 81 [ 1157.075888][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 82 [ 1157.095255][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 1 [ 1157.103289][ T796] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1157.111024][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 2 [ 1157.119141][ T796] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1157.132486][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 83 [ 1157.148887][T16221] keyspan 1-1:0.140: found no endpoint descriptor for endpoint 3 [ 1157.156821][ T796] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1157.194781][T16221] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1157.244439][T16221] usb 1-1: USB disconnect, device number 83 [ 1157.278306][T16221] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1157.322235][T16221] keyspan 1-1:0.140: device disconnected [ 1157.700448][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3451'. [ 1157.748045][ T796] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1158.478723][ T796] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1158.512332][ T796] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1158.550621][ T796] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1159.080288][ T8241] usb 5-1: USB disconnect, device number 75 [ 1159.585067][T19474] delete_channel: no stack [ 1159.652763][ T30] audit: type=1326 audit(1770245546.577:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30b639aeb9 code=0x0 [ 1159.736592][T19474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1160.261349][T16221] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1160.447839][T16221] usb 5-1: Using ep0 maxpacket: 32 [ 1160.487016][T16221] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1160.504365][T16221] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.559992][T16221] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1160.571882][T16221] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=255 [ 1160.611753][T16221] usb 5-1: Product: syz [ 1160.647445][T16221] usb 5-1: SerialNumber: syz [ 1160.700021][T16221] usb 5-1: config 0 descriptor?? [ 1160.789416][T16221] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1160.969971][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.411960][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.738574][ T796] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1161.798284][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1161.811098][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1161.811283][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.849413][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1161.894645][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1161.902369][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1161.909415][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 1161.929830][ T796] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1161.943182][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.951382][ T796] usb 2-1: Product: syz [ 1161.958039][ T796] usb 2-1: Manufacturer: syz [ 1161.962811][ T796] usb 2-1: SerialNumber: syz [ 1161.988550][ T796] usb 2-1: config 0 descriptor?? [ 1162.207170][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1162.231375][T19492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.242423][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.248857][T19492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.296845][ T796] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1162.316757][ T796] gspca_sunplus: reg_w_riv err -71 [ 1162.322877][ T796] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1162.477804][ T796] usb 2-1: USB disconnect, device number 55 [ 1162.484095][ T8241] usb 5-1: USB disconnect, device number 76 [ 1162.621166][T16221] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1162.783709][T16221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.818432][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1162.837935][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1162.868355][T16221] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1162.923350][ T12] bridge0: port 3(batadv0) entered disabled state [ 1162.981463][T16221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1163.031628][ T12] bridge_slave_1: left allmulticast mode [ 1163.059875][T16221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1163.074247][ T12] bridge_slave_1: left promiscuous mode [ 1163.138053][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.158326][T16221] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1163.208820][ T12] bridge_slave_0: left allmulticast mode [ 1163.263097][T19521] openvswitch: netlink: Flow key attr not present in new flow. [ 1163.322241][ T12] bridge_slave_0: left promiscuous mode [ 1163.334360][T16221] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1163.337890][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.356770][T16221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1163.366766][T16221] usb 3-1: Product: syz [ 1163.400742][T16221] usb 3-1: Manufacturer: syz [ 1163.434606][ T30] audit: type=1326 audit(1770245550.337:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19522 comm="syz.5.3469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33c499aeb9 code=0x0 [ 1163.465530][T16221] usb 3-1: SerialNumber: syz [ 1163.498229][T16221] usb 3-1: config 0 descriptor?? [ 1163.580977][ T30] audit: type=1326 audit(1770245550.517:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e7499aeb9 code=0x0 [ 1163.716097][T16221] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1163.733434][T16221] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1163.915483][T16221] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1163.928901][T16221] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1163.950748][ T5823] Bluetooth: hci1: command tx timeout [ 1164.017309][T16221] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1164.538594][T16221] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1164.579585][T16221] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1164.617935][T16221] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1164.634198][T16221] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1164.964957][T19549] binder: 19543:19549 ioctl c00c620f 0 returned -14 [ 1164.973319][T19549] openvswitch: netlink: IP tunnel dst address not specified [ 1165.412011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.428901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.442418][ T12] bond0 (unregistering): Released all slaves [ 1165.605174][ T12] bond1 (unregistering): Released all slaves [ 1165.726222][ T12] bond2 (unregistering): Released all slaves [ 1165.741568][T19501] chnl_net:caif_netlink_parms(): no params data found [ 1165.852736][ T8241] usb 3-1: USB disconnect, device number 79 [ 1166.053149][ T5823] Bluetooth: hci1: command tx timeout [ 1166.247792][T16221] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1166.389042][T19570] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 1166.436379][T16221] usb 2-1: config 2 has an invalid interface number: 211 but max is 0 [ 1166.448751][T16221] usb 2-1: config 2 has no interface number 0 [ 1166.454956][T16221] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1166.508085][T16221] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1166.527785][ T796] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1166.553334][T16221] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1166.577789][T16221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.588409][T19501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.595589][T19501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.613126][T19501] bridge_slave_0: entered allmulticast mode [ 1166.614379][T16221] usb 2-1: Product: syz [ 1166.636346][T19501] bridge_slave_0: entered promiscuous mode [ 1166.648130][T16221] usb 2-1: Manufacturer: syz [ 1166.653123][T16221] usb 2-1: SerialNumber: syz [ 1166.662511][T19561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1166.673798][ T796] usb 3-1: device descriptor read/64, error -71 [ 1166.686488][T16221] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 1166.698976][T16221] em28xx 2-1:2.211: Device initialization failed. [ 1166.706026][T16221] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 1166.714854][ T12] hsr_slave_0: left promiscuous mode [ 1166.721211][ T12] hsr_slave_1: left promiscuous mode [ 1166.732719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.745692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.759829][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.767310][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.789626][ T12] veth1_macvtap: left promiscuous mode [ 1166.795183][ T12] veth0_macvtap: left promiscuous mode [ 1166.802093][ T12] veth1_vlan: left promiscuous mode [ 1166.807517][ T12] veth0_vlan: left promiscuous mode [ 1166.857902][T13081] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1166.897879][ T5829] usb 2-1: USB disconnect, device number 56 [ 1166.928117][ T796] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1166.978869][ T12] team0 (unregistering): Port device batadv1 removed [ 1167.011825][T13081] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1167.021557][T13081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.029953][T13081] usb 5-1: Product: syz [ 1167.035200][T13081] usb 5-1: Manufacturer: syz [ 1167.044510][T13081] usb 5-1: SerialNumber: syz [ 1167.082010][ T796] usb 3-1: device descriptor read/64, error -71 [ 1167.204779][ T796] usb usb3-port1: attempt power cycle [ 1167.389611][T13081] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1167.453810][T13081] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1167.474633][T13081] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1167.502890][T13081] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1167.518516][T13081] usb 5-1: USB disconnect, device number 77 [ 1167.561707][ T796] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1167.618625][ T796] usb 3-1: device descriptor read/8, error -71 [ 1167.729097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1167.887766][ T796] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1168.008134][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1168.008661][ T796] usb 3-1: device descriptor read/8, error -71 [ 1168.108237][ T5823] Bluetooth: hci1: command tx timeout [ 1168.145598][ T796] usb usb3-port1: unable to enumerate USB device [ 1168.767919][T13081] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1168.807091][T19501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.814622][T19501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.822474][T19501] bridge_slave_1: entered allmulticast mode [ 1168.830697][T19501] bridge_slave_1: entered promiscuous mode [ 1168.868880][T19501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.895222][T19501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.942995][T13081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.973909][T13081] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1168.989870][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1169.011181][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1169.034256][T19501] team0: Port device team_slave_0 added [ 1169.057939][T19501] team0: Port device team_slave_1 added [ 1169.067956][T13081] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1169.109436][T13081] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1169.127823][T13081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1169.155567][T19501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.164641][T13081] usb 5-1: Product: syz [ 1169.180868][T19501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.207344][T13081] usb 5-1: Manufacturer: syz [ 1169.212352][T13081] usb 5-1: SerialNumber: syz [ 1169.253681][T13081] usb 5-1: config 0 descriptor?? [ 1169.287343][T19501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.397976][T19501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.408057][T19501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.440242][T19615] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 1169.461531][T19501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.511492][T13081] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1169.530488][T13081] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1169.642418][T19501] hsr_slave_0: entered promiscuous mode [ 1169.657498][T19501] hsr_slave_1: entered promiscuous mode [ 1169.665658][T19501] debugfs: 'hsr0' already exists in 'hsr' [ 1169.678025][T19501] Cannot create hsr debugfs directory [ 1169.689416][T14915] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1169.710969][T13081] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1169.733697][T13081] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1169.766580][T13081] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1169.869699][T14915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1169.878424][T14915] usb 3-1: not running at top speed; connect to a high speed hub [ 1169.888458][T14915] usb 3-1: config 127 has an invalid interface number: 95 but max is 2 [ 1169.897475][T14915] usb 3-1: config 127 has an invalid interface number: 117 but max is 2 [ 1169.926229][T14915] usb 3-1: config 127 has an invalid interface number: 52 but max is 2 [ 1169.960633][T14915] usb 3-1: config 127 has no interface number 0 [ 1170.132142][T14915] usb 3-1: config 127 has no interface number 1 [ 1170.148886][T14915] usb 3-1: config 127 has no interface number 2 [ 1170.165610][T14915] usb 3-1: config 127 interface 95 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1170.186335][T14915] usb 3-1: config 127 interface 95 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1170.203360][ T5823] Bluetooth: hci1: command tx timeout [ 1170.225847][T14915] usb 3-1: config 127 interface 95 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1170.259350][T14915] usb 3-1: config 127 interface 95 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1170.311138][T14915] usb 3-1: config 127 interface 95 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1170.338131][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1170.380237][T14915] usb 3-1: config 127 interface 95 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1170.392336][T14915] usb 3-1: config 127 interface 117 altsetting 245 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1170.450544][T14915] usb 3-1: config 127 interface 117 altsetting 245 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1170.465415][T14915] usb 3-1: config 127 interface 117 altsetting 245 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1170.494773][T14915] usb 3-1: config 127 interface 52 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1170.498831][T13081] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1170.540951][T14915] usb 3-1: config 127 interface 52 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1170.560435][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1170.586920][T14915] usb 3-1: config 127 interface 52 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1170.617869][T14915] usb 3-1: config 127 interface 52 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1170.636792][T13081] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1170.646089][T14915] usb 3-1: config 127 interface 52 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1170.666231][T14915] usb 3-1: config 127 interface 52 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1170.687779][T14915] usb 3-1: config 127 interface 52 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1170.754734][T14915] usb 3-1: config 127 interface 95 has no altsetting 0 [ 1170.788638][T14915] usb 3-1: config 127 interface 117 has no altsetting 0 [ 1170.812016][T14915] usb 3-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=b2.40 [ 1170.821741][T14915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.831862][T14915] usb 3-1: Product: 줕 [ 1170.846741][T14915] usb 3-1: Manufacturer: á Œ [ 1170.867570][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1170.881185][T14915] usb 3-1: SerialNumber: ﬖç—쳯䰯峭á‘æ¿·æˆé½¿çŒ²è©“镃欇䙘礦懕ãŒì¥Ÿç–´ì®ƒè½á•´ [ 1171.160312][T14915] sisusb 3-1:127.95: Invalid USB2VGA device [ 1171.169702][T14915] sisusb 3-1:127.95: probe with driver sisusb failed with error -22 [ 1171.196462][T14915] sisusb 3-1:127.117: Invalid USB2VGA device [ 1171.211087][T14915] sisusb 3-1:127.117: probe with driver sisusb failed with error -22 [ 1171.214820][T19501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1171.272110][T14915] sisusb 3-1:127.52: Invalid USB2VGA device [ 1171.284340][T14915] sisusb 3-1:127.52: probe with driver sisusb failed with error -22 [ 1171.343176][T14915] usb 3-1: USB disconnect, device number 84 [ 1171.403531][T19501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1171.462865][T19501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1171.525627][T19501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1171.659470][T19501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.683715][T19501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.703626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.710831][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.732281][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.739461][ T8290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.777813][ T8241] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1171.943391][ T8241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1171.962932][ T8241] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 1171.974957][ T8241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.995923][ T8241] usb 6-1: Product: syz [ 1172.003179][T14915] usb 5-1: USB disconnect, device number 78 [ 1172.007860][ T8241] usb 6-1: Manufacturer: syz [ 1172.014306][T19501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.025979][ T8241] usb 6-1: SerialNumber: syz [ 1172.099018][ T8241] usb 6-1: config 0 descriptor?? [ 1172.206843][T19671] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1172.226336][T19671] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1172.245482][T19671] veth0_to_bridge: entered allmulticast mode [ 1172.290724][T19671] veth0_to_bridge: entered promiscuous mode [ 1172.373365][T19671] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1172.377776][ T5829] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1172.427817][T19671] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1172.435865][T19671] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1172.545277][ T8241] usb 6-1: USB disconnect, device number 26 [ 1172.565109][T19501] veth0_vlan: entered promiscuous mode [ 1172.647156][ T5829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1172.661609][T17660] udevd[17660]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.669327][T19501] veth1_vlan: entered promiscuous mode [ 1172.759760][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.782538][ T5829] usb 2-1: Product: syz [ 1172.786753][ T5829] usb 2-1: Manufacturer: syz [ 1172.794258][ T5829] usb 2-1: SerialNumber: syz [ 1172.855684][ T5829] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1172.924208][T18143] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1173.015648][T19501] veth0_macvtap: entered promiscuous mode [ 1173.077165][T19501] veth1_macvtap: entered promiscuous mode [ 1173.107754][T14915] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1173.168322][T19501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.213714][T19501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.281272][ T8290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.295217][ T8290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.306550][ T8290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.307745][T14915] usb 5-1: Using ep0 maxpacket: 16 [ 1173.317594][ T8290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.353885][T19690] netlink: 'syz.5.3495': attribute type 10 has an invalid length. [ 1173.383867][T14915] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1173.469092][T14915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.497861][ T5888] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1173.510434][T14915] usb 5-1: Product: syz [ 1173.514675][T14915] usb 5-1: Manufacturer: syz [ 1173.553808][T14915] usb 5-1: SerialNumber: syz [ 1173.584715][T14915] usb 5-1: config 0 descriptor?? [ 1173.622488][T14915] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1173.662076][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.676499][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1173.688124][ T8302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.714932][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1173.727940][ T8302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.755914][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1173.794458][ T8302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.806768][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1173.808895][ T8302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.897783][T16221] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1173.919090][ T5888] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1173.930053][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1173.947891][ T5888] usb 3-1: Product: syz [ 1173.958921][ T5888] usb 3-1: Manufacturer: syz [ 1174.054783][T14915] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1174.073699][ T5888] usb 3-1: SerialNumber: syz [ 1174.087880][T16221] usb 6-1: Using ep0 maxpacket: 16 [ 1174.105555][T16221] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 1174.123749][T16221] usb 6-1: config 0 has no interface number 0 [ 1174.139179][T16221] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1174.171490][ T5888] usb 3-1: config 0 descriptor?? [ 1174.188575][T18143] usb 2-1: Service connection timeout for: 256 [ 1174.197903][T18143] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1174.229802][T16221] usb 6-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1174.264898][T16221] usb 6-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 1174.275835][T18143] ath9k_htc: Failed to initialize the device [ 1174.287317][T18143] usb 2-1: ath9k_htc: USB layer deinitialized [ 1174.294499][T16221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.346263][T16221] usb 6-1: Product: syz [ 1174.358906][T16221] usb 6-1: Manufacturer: syz [ 1174.368602][T16221] usb 6-1: SerialNumber: syz [ 1174.451971][ T5888] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1174.464607][ T5888] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1174.492009][T16221] usb 6-1: config 0 descriptor?? [ 1174.497930][T19694] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1174.515822][T16221] ftdi_sio 6-1:0.39: FTDI USB Serial Device converter detected [ 1174.543854][T16221] usb 6-1: Detected SIO [ 1174.557799][T16221] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1174.644719][T19705] kvm: kvm [19704]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2000000 [ 1174.647351][ T5888] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1174.703333][ T5888] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1174.711454][T16221] usb 6-1: USB disconnect, device number 27 [ 1174.727449][ T5888] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1174.744554][T16221] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1174.772861][T16221] ftdi_sio 6-1:0.39: device disconnected [ 1174.954582][T19682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.985724][T19682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.115157][ T5829] usb 5-1: USB disconnect, device number 79 [ 1175.123649][ T5829] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1175.143566][ T5829] visor 5-1:0.0: device disconnected [ 1175.194801][ T5888] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1175.205795][ T5888] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1175.225670][ T5888] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1175.235142][ T5888] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1175.261439][ T5888] usb 3-1: USB disconnect, device number 85 [ 1175.738260][ T5888] usb 2-1: USB disconnect, device number 57 [ 1175.840422][T19734] netlink: 'syz.4.3505': attribute type 10 has an invalid length. [ 1176.147797][ T5888] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1176.308227][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 1176.316742][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1176.326487][ T5888] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 1176.335392][ T5888] usb 2-1: config 7 has no interface number 0 [ 1176.345818][ T5888] usb 2-1: string descriptor 0 read error: -22 [ 1176.346688][T19740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1176.353272][ T5888] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1176.377896][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.596627][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1176.672757][ T5829] usb 2-1: USB disconnect, device number 58 [ 1176.935840][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1176.950200][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1176.970403][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1177.096254][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1177.122065][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1177.157545][ T9] usb 6-1: Product: syz [ 1177.181017][ T9] usb 6-1: Manufacturer: syz [ 1177.211616][ T9] usb 6-1: SerialNumber: syz [ 1177.270024][ T9] usb 6-1: config 0 descriptor?? [ 1177.380632][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 1177.397244][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1177.431318][ T9] usb 6-1: selecting invalid altsetting 0 [ 1177.640309][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.642251][T14915] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1177.646762][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.778010][T14915] usb 2-1: device descriptor read/64, error -71 [ 1178.028510][T14915] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1178.178410][T14915] usb 2-1: device descriptor read/64, error -71 [ 1178.288126][T14915] usb usb2-port1: attempt power cycle [ 1178.380132][T19745] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 1178.622849][T19745] usb 6-1: device firmware changed [ 1178.635138][ T9] usb 6-1: USB disconnect, device number 28 [ 1178.680014][T14915] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1178.729867][T14915] usb 2-1: device descriptor read/8, error -71 [ 1178.867939][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1178.987894][T14915] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1179.028430][T14915] usb 2-1: device descriptor read/8, error -71 [ 1179.148218][T14915] usb usb2-port1: unable to enumerate USB device [ 1179.217804][ T9] usb 6-1: device not accepting address 29, error -71 [ 1179.328162][T19788] netlink: 'syz.2.3519': attribute type 10 has an invalid length. [ 1179.558618][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1179.707866][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1179.721761][ T9] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1179.731119][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.739201][ T9] usb 6-1: Product: syz [ 1179.743384][ T9] usb 6-1: Manufacturer: syz [ 1179.748115][ T9] usb 6-1: SerialNumber: syz [ 1179.754610][ T9] usb 6-1: config 0 descriptor?? [ 1179.976381][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1180.287830][T14915] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1180.459531][T14915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.469809][T14915] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1180.479410][T14915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.495770][T14915] usb 3-1: config 0 descriptor?? [ 1180.757833][ T5829] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1180.909643][ T5829] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1180.915505][T19799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.920063][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.928199][T19799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.946194][ T5829] usb 2-1: config 0 descriptor?? [ 1180.953345][T19799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.961112][T19799] bridge0: port 1() entered disabled state [ 1180.962095][ T5829] cp210x 2-1:0.0: cp210x converter detected [ 1180.969223][T19799] bridge0: entered promiscuous mode [ 1181.018822][T14915] nintendo 0003:057E:200E.0047: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 1181.095264][T14915] nintendo 0003:057E:200E.0047: Failed charging grip handshake [ 1181.111737][T14915] nintendo 0003:057E:200E.0047: Failed to initialize controller; ret=-110 [ 1181.125215][T14915] nintendo 0003:057E:200E.0047: probe - fail = -110 [ 1181.132248][T14915] nintendo 0003:057E:200E.0047: probe with driver nintendo failed with error -110 [ 1181.177076][ T5829] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1181.235993][ T5829] usb 3-1: USB disconnect, device number 86 [ 1181.381337][T19802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.390325][T19802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.409465][T13081] usb 2-1: USB disconnect, device number 63 [ 1181.425805][T13081] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1181.438381][T13081] cp210x 2-1:0.0: device disconnected [ 1181.453922][ T9] gspca_sunplus: reg_r err -71 [ 1181.463852][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1181.493233][ T9] usb 6-1: USB disconnect, device number 30 [ 1181.549377][T19810] netlink: 'syz.6.3524': attribute type 2 has an invalid length. [ 1181.977747][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1182.020214][T13081] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1182.212263][T19820] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1182.236519][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.248844][T13081] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.249534][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1182.268615][T13081] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1182.284758][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.301464][T13081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1182.361840][ T9] usb 5-1: config 0 descriptor?? [ 1182.439328][T13081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1182.480342][T13081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1182.651323][T13081] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1182.684071][T13081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1182.843230][T13081] usb 3-1: Product: syz [ 1182.858566][T13081] usb 3-1: Manufacturer: syz [ 1182.867051][ T9] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 1182.898688][T13081] usb 3-1: SerialNumber: syz [ 1182.903318][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0048/input/input66 [ 1183.091591][T13081] usb 3-1: config 0 descriptor?? [ 1183.329667][T13081] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1183.340796][T13081] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1183.371578][ T9] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1183.438035][ T9] usb 5-1: USB disconnect, device number 80 [ 1183.566447][T19837] fuse: Bad value for 'fd' [ 1183.585084][T19837] ipip0: entered promiscuous mode [ 1183.590251][T19837] ipip0: entered allmulticast mode [ 1183.718329][T13081] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1183.744482][T13081] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1183.805649][T13081] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1183.905020][T19832] fido_id[19832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1184.223190][T19848] program syz.4.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.427262][T13081] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1184.437079][T13081] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1184.597853][T13081] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1184.606712][T13081] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1185.310546][T19874] netlink: 'syz.1.3538': attribute type 10 has an invalid length. [ 1185.326096][T19874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3538'. [ 1185.681900][T19897] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1186.254244][ T9] usb 3-1: USB disconnect, device number 87 [ 1186.548128][T13081] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1186.729086][T13081] usb 6-1: device descriptor read/64, error -71 [ 1186.847221][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1186.988029][T13081] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1187.007781][ T9] usb 3-1: device descriptor read/64, error -71 [ 1187.128619][T13081] usb 6-1: device descriptor read/64, error -71 [ 1187.250957][T13081] usb usb6-port1: attempt power cycle [ 1187.275545][ T9] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1187.448951][ T9] usb 3-1: device descriptor read/64, error -71 [ 1187.503572][ T30] audit: type=1326 audit(1770245574.437:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.557396][ T30] audit: type=1326 audit(1770245574.437:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.583938][ T9] usb usb3-port1: attempt power cycle [ 1187.590552][ T30] audit: type=1326 audit(1770245574.437:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.600055][T13081] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1187.645430][ T30] audit: type=1326 audit(1770245574.437:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7495b78e code=0x7ffc0000 [ 1187.678573][T13081] usb 6-1: device descriptor read/8, error -71 [ 1187.693978][ T30] audit: type=1326 audit(1770245574.437:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.742490][ T30] audit: type=1326 audit(1770245574.437:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.772324][ T30] audit: type=1326 audit(1770245574.437:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.796870][ T30] audit: type=1326 audit(1770245574.437:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.895968][ T30] audit: type=1326 audit(1770245574.437:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1187.947833][ T9] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1187.956574][T13081] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1187.967032][ T30] audit: type=1326 audit(1770245574.437:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19941 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7499aeb9 code=0x7ffc0000 [ 1188.012251][ T9] usb 3-1: device descriptor read/8, error -71 [ 1188.018505][T13081] usb 6-1: device descriptor read/8, error -71 [ 1188.128664][T13081] usb usb6-port1: unable to enumerate USB device [ 1188.228330][ T5895] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1188.287791][ T9] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1188.330845][ T9] usb 3-1: device descriptor read/8, error -71 [ 1188.407956][ T5895] usb 5-1: descriptor type invalid, skip [ 1188.422179][ T5895] usb 5-1: descriptor type invalid, skip [ 1188.442610][ T9] usb usb3-port1: unable to enumerate USB device [ 1188.450752][ T5895] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1188.461300][ T5895] usb 5-1: language id specifier not provided by device, defaulting to English [ 1188.475012][ T5895] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 1188.490192][T19966] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1188.500551][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.509246][ T5895] usb 5-1: Product: Г [ 1188.519896][ T5895] usb 5-1: SerialNumber: 榔ↈá¨ä躵޺鋜戾ॽ [ 1188.528997][T19966] IPVS: length: 153 != 24 [ 1188.632141][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1188.794074][T19974] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1188.829558][ T5895] usbhid 5-1:1.0: can't add hid device: -71 [ 1188.853874][ T5895] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1188.891130][T19974] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1188.910279][ T5895] usb 5-1: USB disconnect, device number 81 [ 1189.664165][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1190.337740][ T9] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1190.495439][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.509353][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1190.537468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1190.564004][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1190.582835][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1190.614943][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1190.634161][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1190.664516][ T9] usb 5-1: Product: syz [ 1190.671769][ T9] usb 5-1: Manufacturer: syz [ 1190.686036][ T9] usb 5-1: SerialNumber: syz [ 1190.703032][ T9] usb 5-1: config 0 descriptor?? [ 1190.943107][ T9] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1190.969764][ T9] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1191.174395][ T9] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1191.185978][ T9] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1191.202998][ T9] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1191.224784][T20015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3562'. [ 1191.725813][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1191.740122][ T9] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1191.760768][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1191.782792][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1191.800270][ T9] usb 5-1: USB disconnect, device number 82 [ 1192.230552][T20034] tipc: Started in network mode [ 1192.235468][T20034] tipc: Node identity 7f000001, cluster identity 4711 [ 1192.246879][T20034] tipc: Enabling of bearer rejected, failed to enable media [ 1192.274152][T20034] netlink: 39 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1192.284536][T20034] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1192.306723][T20034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1192.318980][T20034] tipc: Enabled bearer , priority 10 [ 1192.489623][T20024] hsr0: entered promiscuous mode [ 1192.495048][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1192.542834][T20024] hsr_slave_0: left promiscuous mode [ 1192.561895][T20024] hsr_slave_1: left promiscuous mode [ 1192.968362][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1193.152402][T20043] syzkaller1: entered promiscuous mode [ 1193.164524][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1193.176074][T20043] syzkaller1: entered allmulticast mode [ 1193.357235][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1193.365357][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1193.373002][ T9] usb 2-1: can't read configurations, error -61 [ 1193.431403][T16221] tipc: Node number set to 2130706433 [ 1193.487739][T13081] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1193.537816][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1193.629307][T13081] usb 3-1: device descriptor read/64, error -71 [ 1193.690339][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1193.701078][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1193.710143][ T9] usb 2-1: can't read configurations, error -61 [ 1193.726912][ T9] usb usb2-port1: attempt power cycle [ 1193.847799][ T5895] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1193.867795][T13081] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1193.998330][T13081] usb 3-1: device descriptor read/64, error -71 [ 1194.004670][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 1194.011647][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.022644][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.045380][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1194.073894][ T5895] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1194.084794][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1194.096815][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.108088][T13081] usb usb3-port1: attempt power cycle [ 1194.109041][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1194.122151][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1194.130200][ T9] usb 2-1: can't read configurations, error -61 [ 1194.133488][ T5895] usb 6-1: config 0 descriptor?? [ 1194.263361][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1194.288564][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1194.296458][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1194.304489][ T9] usb 2-1: can't read configurations, error -61 [ 1194.311222][ T9] usb usb2-port1: unable to enumerate USB device [ 1194.447937][T13081] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1194.468296][T13081] usb 3-1: device descriptor read/8, error -71 [ 1194.565348][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.572957][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.580475][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.588263][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.595485][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.603033][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.610822][ T5895] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 1194.622046][ T5895] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0049/input/input67 [ 1194.639155][ T5895] microsoft 0003:045E:07DA.0049: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1194.718016][T13081] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1194.738448][T13081] usb 3-1: device descriptor read/8, error -71 [ 1194.768817][ T5895] usb 6-1: USB disconnect, device number 35 [ 1194.848370][T13081] usb usb3-port1: unable to enumerate USB device [ 1195.367937][ T5895] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1195.529233][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.539468][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1195.552052][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1195.563845][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1195.567821][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1195.573966][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1195.599772][ T5895] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1195.608953][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1195.617036][ T5895] usb 5-1: Product: syz [ 1195.621284][ T5895] usb 5-1: Manufacturer: syz [ 1195.625892][ T5895] usb 5-1: SerialNumber: syz [ 1195.632740][ T5895] usb 5-1: config 0 descriptor?? [ 1195.732431][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1195.744077][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.761886][ T9] usb 6-1: config 0 descriptor?? [ 1195.769405][ T9] cp210x 6-1:0.0: cp210x converter detected [ 1195.845843][ T5895] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1195.854248][ T5895] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1195.931524][T20068] input: syz0 as /devices/virtual/input/input68 [ 1195.972280][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1195.980657][ T9] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1195.988825][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 1196.011575][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1196.044053][ T5895] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1196.052059][ T5895] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1196.064737][ T5895] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1196.732516][ T5895] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1196.745919][ T5895] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1196.763059][ T5895] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1197.022923][ T5895] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1197.903014][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 1197.903035][ T30] audit: type=1800 audit(1770245584.837:1144): pid=20092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3584" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=103747 res=0 errno=0 [ 1198.353294][ T5895] usb 6-1: USB disconnect, device number 36 [ 1198.370686][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1198.388239][ T5895] cp210x 6-1:0.0: device disconnected [ 1199.188095][T13081] usb 5-1: USB disconnect, device number 83 [ 1200.201941][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1201.269612][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1201.617332][T20155] veth1_to_bond: entered allmulticast mode [ 1201.638448][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1201.951449][ T9] usb 2-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 1201.968628][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1202.067961][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1202.090528][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1202.128025][ T9] usb 2-1: Product: syz [ 1202.143919][ T9] usb 2-1: Manufacturer: syz [ 1202.157407][ T9] usb 2-1: SerialNumber: syz [ 1202.360105][T13081] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1202.392329][T20149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1202.541237][T13081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.554023][T13081] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1202.574190][ T9] usb 2-1: USB disconnect, device number 68 [ 1202.619325][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1202.642069][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1202.687589][T13081] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1202.726752][T13081] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1202.736386][T13081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1202.751345][T13081] usb 5-1: Product: syz [ 1202.761213][T13081] usb 5-1: Manufacturer: syz [ 1202.772073][T13081] usb 5-1: SerialNumber: syz [ 1202.786488][T13081] usb 5-1: config 0 descriptor?? [ 1202.914642][T16221] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1203.003861][T13081] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1203.012008][T13081] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1203.093287][T16221] usb 3-1: Using ep0 maxpacket: 8 [ 1203.101735][T16221] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1203.111185][T16221] usb 3-1: config 0 has no interface number 0 [ 1203.120184][T16221] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1203.145348][T16221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.165110][T16221] usb 3-1: Product: syz [ 1203.175650][T16221] usb 3-1: Manufacturer: syz [ 1203.184810][T16221] usb 3-1: SerialNumber: syz [ 1203.203912][T16221] usb 3-1: config 0 descriptor?? [ 1203.220674][T13081] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1203.234445][T16221] redrat3 3-1:0.31: Couldn't find all endpoints [ 1203.251133][T13081] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1203.320953][T13081] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1203.852246][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1203.863516][T13081] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1203.898424][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1203.916906][T13081] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1204.025396][T13081] usb 5-1: USB disconnect, device number 84 [ 1204.651698][T20155] veth1_to_bond: left allmulticast mode [ 1205.107744][ T796] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1205.300797][ T796] usb 5-1: config 8 has an invalid interface number: 104 but max is 0 [ 1205.319342][ T796] usb 5-1: config 8 has no interface number 0 [ 1205.340939][ T796] usb 5-1: config 8 interface 104 has no altsetting 0 [ 1205.358102][ T796] usb 5-1: New USB device found, idVendor=19d2, idProduct=a778, bcdDevice=96.b0 [ 1205.371706][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.778278][ T796] usb 5-1: string descriptor 0 read error: -71 [ 1205.791725][ T796] usb 5-1: bad CDC descriptors [ 1205.854668][ T796] usb 5-1: USB disconnect, device number 85 [ 1206.354382][T20204] loop2: detected capacity change from 0 to 7 [ 1206.361223][T20204] Dev loop2: unable to read RDB block 7 [ 1206.368186][T20204] loop2: AHDI p2 p3 [ 1206.374472][T20204] loop2: partition table partially beyond EOD, truncated [ 1206.382083][T20204] loop2: p3 start 335544320 is beyond EOD, truncated [ 1206.407756][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1206.502722][ T5888] usb 3-1: USB disconnect, device number 96 [ 1206.535445][ T5195] Dev loop2: unable to read RDB block 7 [ 1206.541521][ T5195] loop2: AHDI p2 p3 [ 1206.551774][ T5195] loop2: partition table partially beyond EOD, truncated [ 1206.569416][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1206.578110][ T5195] loop2: p3 start 335544320 is beyond EOD, truncated [ 1206.594222][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.637373][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1206.678078][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.695739][ T9] usb 5-1: config 0 descriptor?? [ 1206.706793][T20211] loop8: detected capacity change from 0 to 8 [ 1206.722589][T17659] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1206.731962][T17659] loop8: partition table partially beyond EOD, truncated [ 1206.742030][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1206.752339][T17659] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1206.780639][T20211] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1206.797754][T20211] loop8: partition table partially beyond EOD, truncated [ 1206.809001][T20211] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1206.998477][ T796] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1207.137772][ T796] usb 3-1: device descriptor read/64, error -71 [ 1207.230842][T20222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1207.337866][ T5888] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1207.427800][ T796] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1207.435706][ T9] gspca_spca501: reg write: error -110 [ 1207.442351][ T9] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1207.450143][ T9] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 1207.936670][ T796] usb 3-1: device descriptor read/64, error -71 [ 1208.000730][ T5888] usb 2-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 1208.011905][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1208.078342][ T796] usb usb3-port1: attempt power cycle [ 1208.092645][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1208.116650][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1208.141846][ T5888] usb 2-1: Product: syz [ 1208.164821][ T5888] usb 2-1: Manufacturer: syz [ 1208.176485][ T5888] usb 2-1: SerialNumber: syz [ 1208.397276][T20218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1208.417878][ T796] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1208.452806][ T796] usb 3-1: device descriptor read/8, error -71 [ 1208.478434][ T5888] usb 2-1: USB disconnect, device number 69 [ 1208.727721][ T796] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1208.775189][ T796] usb 3-1: device descriptor read/8, error -71 [ 1208.889147][ T796] usb usb3-port1: unable to enumerate USB device [ 1209.795282][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1210.104209][ T9] usb 5-1: USB disconnect, device number 86 [ 1210.478984][T20257] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3625'. [ 1210.681163][ T5829] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1211.141437][ T5829] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1211.167489][ T5829] usb 5-1: config 0 has no interface number 0 [ 1211.206275][ T5829] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1211.243239][ T5829] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1211.259345][ T5829] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1211.272600][ T5829] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1211.284299][ T5829] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1211.344414][ T5829] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1211.397756][ T5829] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1211.427094][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.446863][ T5829] usb 5-1: config 0 descriptor?? [ 1211.490065][T20256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.497445][T20256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.523513][ T5829] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1211.652059][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1211.829876][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1211.863371][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1211.875834][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1211.896992][ T9] usb 6-1: Product: syz [ 1211.906228][ T9] usb 6-1: Manufacturer: syz [ 1211.922510][ T9] usb 6-1: SerialNumber: syz [ 1212.146660][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1212.568843][ T9] usb 6-1: USB disconnect, device number 37 [ 1213.519641][T13081] usb 5-1: USB disconnect, device number 87 [ 1213.548876][T13081] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1213.587991][T20285] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1213.600460][T20285] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1213.867853][ T796] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1213.957816][T13081] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1214.029395][ T796] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1214.039208][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.064728][ T796] usb 6-1: config 0 has no interface number 0 [ 1214.077855][ T796] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1214.089981][ T796] usb 6-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.112564][ T796] usb 6-1: config 0 interface 110 has no altsetting 0 [ 1214.141012][ T796] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1214.152737][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.163104][ T796] usb 6-1: Product: syz [ 1214.163651][T13081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.167826][ T796] usb 6-1: Manufacturer: syz [ 1214.184131][ T796] usb 6-1: SerialNumber: syz [ 1214.208272][ T796] usb 6-1: config 0 descriptor?? [ 1214.213368][T13081] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1214.239647][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1214.271389][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1214.293379][T13081] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1214.310224][T13081] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1214.319790][T13081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1214.328211][T20301] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1214.337400][T13081] usb 5-1: Product: syz [ 1214.347866][T13081] usb 5-1: Manufacturer: syz [ 1214.352490][T13081] usb 5-1: SerialNumber: syz [ 1214.370150][T13081] usb 5-1: config 0 descriptor?? [ 1214.449301][ T796] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -22 [ 1214.586783][T13081] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1214.598060][T13081] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1214.769650][T20314] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1214.788127][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1214.807326][T13081] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1214.816057][T13081] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1214.867981][T13081] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1215.236401][ T5895] usb 6-1: USB disconnect, device number 38 [ 1215.291078][T20321] x_tables: duplicate underflow at hook 2 [ 1215.398908][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1215.426679][T13081] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1215.660175][T13081] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1215.683400][T13081] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1215.803572][T20327] program syz.6.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1215.881533][ T5895] usb 5-1: USB disconnect, device number 88 [ 1216.403519][T20357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1216.696027][T20374] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1216.720756][ T796] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1216.736097][ T30] audit: type=1326 audit(1770245603.667:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.757741][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1216.771108][T20376] input: syz0 as /devices/virtual/input/input69 [ 1216.779379][ T30] audit: type=1326 audit(1770245603.667:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.804441][ T30] audit: type=1326 audit(1770245603.667:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.841467][ T30] audit: type=1326 audit(1770245603.667:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.866513][ T30] audit: type=1326 audit(1770245603.667:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.877854][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 1216.890714][ T30] audit: type=1326 audit(1770245603.697:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1216.927999][T20381] gtp0: entered promiscuous mode [ 1216.933457][T20381] gtp0: entered allmulticast mode [ 1216.998651][ T30] audit: type=1326 audit(1770245603.697:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1217.000338][ T796] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.022091][ T30] audit: type=1326 audit(1770245603.697:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1217.055766][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1217.055818][ T30] audit: type=1326 audit(1770245603.697:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1217.098009][ T30] audit: type=1326 audit(1770245603.697:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20375 comm="syz.6.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f59f9aeb9 code=0x7ffc0000 [ 1217.135605][ T9] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 1217.226381][ T9] usb 5-1: config 0 has no interface number 0 [ 1217.310545][ T9] usb 5-1: config 0 interface 173 altsetting 113 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.329590][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1217.350661][ T9] usb 5-1: config 0 interface 173 has no altsetting 0 [ 1217.358453][ T796] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1217.376101][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.391050][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1217.416803][ T796] usb 2-1: Product: syz [ 1217.421450][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.432495][ T796] usb 2-1: Manufacturer: syz [ 1217.437174][ T796] usb 2-1: SerialNumber: syz [ 1217.445273][ T9] usb 5-1: config 0 descriptor?? [ 1217.454088][ T796] usb 2-1: config 0 descriptor?? [ 1217.674025][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1217.686150][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1217.695533][ T796] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 1217.708423][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1217.719122][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1217.729008][ T9] usb 5-1: media controller created [ 1217.743401][ T796] imon:send_packet: packet tx failed (-71) [ 1217.779132][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1217.799420][ T796] imon 2-1:0.0: panel buttons/knobs setup failed [ 1217.889853][T20359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.909324][T20359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.927688][ T796] rc_core: IR keymap rc-imon-pad not found [ 1217.933560][ T796] Registered IR keymap rc-empty [ 1217.940209][ T796] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1217.970094][ T796] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1217.980766][ T796] imon:send_packet: packet tx failed (-71) [ 1218.010375][ T796] imon 2-1:0.0: remote input dev register failed [ 1218.020481][ T796] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1218.041372][ T796] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1218.048243][ T796] imon:imon_probe: failed to initialize context! [ 1218.054777][ T796] imon 2-1:0.0: unable to register, err -19 [ 1218.081854][ T796] usb 2-1: USB disconnect, device number 70 [ 1218.504699][T20414] random: crng reseeded on system resumption [ 1218.590948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.603395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.615957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.628871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.641347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.653719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.666094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.678499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.691040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.703278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.780163][ T9] stb0899_attach: Driver disabled by Kconfig [ 1218.825594][ T9] az6027: no front-end attached [ 1218.825594][ T9] [ 1219.899880][ T9] az6027: usb out operation failed. (-71) [ 1219.921759][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1219.961728][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 1223.597854][ C0] net_ratelimit: 24961 callbacks suppressed [ 1223.597870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.616016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.628369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.640525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.652661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.664905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.677073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.689364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.701519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.709890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1225.089625][ C1] sched: DL replenish lagged too much [ 1228.607740][ C0] net_ratelimit: 27677 callbacks suppressed [ 1228.607758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.607768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.608239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.614143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.626047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.638506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.650560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.662625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.674899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.687038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.617682][ C1] net_ratelimit: 17127 callbacks suppressed [ 1233.617708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.617791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.624943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.636256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.648968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.660172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.673059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.684108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.696901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.707879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.627748][ C0] net_ratelimit: 20298 callbacks suppressed [ 1238.627771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.628432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1238.634178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.646334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.658278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.671810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1238.683348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.695169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.707121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.720152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1239.538948][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.557498][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.637974][ C0] net_ratelimit: 20328 callbacks suppressed [ 1243.638000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.638142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1243.644395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.656410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.668525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.681654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1243.692742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.704867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.716951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.738845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1248.647672][ C0] net_ratelimit: 23576 callbacks suppressed [ 1248.647672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1248.647693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.653885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.666118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.678788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1248.689756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.701788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.713844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.728802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1248.737574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.657870][ C0] net_ratelimit: 20179 callbacks suppressed [ 1253.657892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.658579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1253.664307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.676282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.688504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.701511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1253.712456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.724523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.736759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.749915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1258.667979][ C0] net_ratelimit: 20732 callbacks suppressed [ 1258.668001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.668712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1258.674220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.686225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.698376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.711274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1258.722173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.734344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.746579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.759534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1263.677827][ C0] net_ratelimit: 23458 callbacks suppressed [ 1263.677854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.678307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1263.684116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.696397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.708336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.721762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1263.732417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.744509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.756862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.769454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1268.687843][ C0] net_ratelimit: 18977 callbacks suppressed [ 1268.687869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.688810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1268.694354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.706303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.718395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.731514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1268.742516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.754298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.766463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.779506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1273.697710][ C0] net_ratelimit: 20074 callbacks suppressed [ 1273.697733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.697864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.704004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.717484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1273.728056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.740554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.752559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.765492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1273.776486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.788309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.707867][ C0] net_ratelimit: 20094 callbacks suppressed [ 1278.707889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.708000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1278.714274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.726087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.738151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.751026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1278.762142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.773917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.785860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.798731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1283.717632][ C0] net_ratelimit: 19639 callbacks suppressed [ 1283.717662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.718071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1283.723871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.735874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.748005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.760793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1283.771821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.788048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.795786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.808804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1288.727945][ C0] net_ratelimit: 21338 callbacks suppressed [ 1288.727967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.728243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1288.734143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.746167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.758266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.777808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1288.781905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.793847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.805919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.818667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1293.737619][ C0] net_ratelimit: 24170 callbacks suppressed [ 1293.737639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.738198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1293.743822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.755823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.767970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.787803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1293.791656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.803586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.815633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.828451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1298.747713][ C0] net_ratelimit: 23644 callbacks suppressed [ 1298.747740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.748542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1298.753968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.765984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.778116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.791294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1298.802579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.814565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.826637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.839895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1301.212487][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.229144][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.757680][ C1] net_ratelimit: 19835 callbacks suppressed [ 1303.757707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.757924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.764827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1303.775832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.787846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.799903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.812666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1303.823580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.835574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.847689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.767691][ C0] net_ratelimit: 20157 callbacks suppressed [ 1308.767720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.768607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1308.773944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.785935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.798077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.810837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1308.821799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.833786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.845913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.859333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1313.777884][ C0] net_ratelimit: 23603 callbacks suppressed [ 1313.777910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.778651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1313.784308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.797018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.809387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.822469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1313.833828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.846338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.858677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.871699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1318.787878][ C0] net_ratelimit: 23624 callbacks suppressed [ 1318.787900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.788737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1318.794226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.806137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.818269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.838319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1318.842204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.854058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.865958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.878907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1323.797837][ C0] net_ratelimit: 24047 callbacks suppressed [ 1323.797860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.798275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1323.804097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.816625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.828705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.847792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1323.852387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.864337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.876395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.889133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1328.807734][ C0] net_ratelimit: 23510 callbacks suppressed [ 1328.807762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.808024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1328.814084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.826195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.838260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.851090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1328.862016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.877811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.886192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.898831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1333.817830][ C0] net_ratelimit: 23273 callbacks suppressed [ 1333.817859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.818214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1333.824442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.836413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.848424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.861536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1333.872646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.884392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.896379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.909297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1338.827622][ C0] net_ratelimit: 23554 callbacks suppressed [ 1338.827648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.828306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1338.833992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.845927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.857961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.877962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1338.882140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.893996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.906141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.919157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1343.837706][ C0] net_ratelimit: 18192 callbacks suppressed [ 1343.837733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.838121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1343.844118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.856196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.868212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.881011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1343.892134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.904251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.916541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.929427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1348.847923][ C0] net_ratelimit: 18189 callbacks suppressed [ 1348.847950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.848520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1348.854180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.866312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.878459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.891284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1348.902217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.914514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.927495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.940482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1353.857766][ C0] net_ratelimit: 19825 callbacks suppressed [ 1353.857793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.858177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1353.864065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.876204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.888445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.902110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1353.913564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.925671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.937929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.950490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1358.867693][ C0] net_ratelimit: 21521 callbacks suppressed [ 1358.867715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.868197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1358.874024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.885832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.898074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.910896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1358.921925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.933904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.945902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.958689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1363.877882][ C0] net_ratelimit: 23848 callbacks suppressed [ 1363.877904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.878113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.884258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.896279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1363.908065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.920096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.932047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.944758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.955864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.967763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1368.887618][ C0] net_ratelimit: 23741 callbacks suppressed [ 1368.887638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.888027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.893939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.905854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1368.917727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.930492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.941700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.954484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.965601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.977635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1373.897633][ C0] net_ratelimit: 22890 callbacks suppressed [ 1373.897659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.897770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1373.903916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.916840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.927994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.940845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.951932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.964049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1373.975915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.988600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.907627][ C0] net_ratelimit: 23034 callbacks suppressed [ 1378.907654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.908095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.913993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.926710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.937801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.949826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1378.961613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.978713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.985848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.998741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1380.047566][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1380.054554][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20436/1:b..l [ 1380.063346][ C0] rcu: (detected by 0, t=10503 jiffies, g=138645, q=413 ncpus=2) [ 1380.071168][ C0] task:syz.1.3675 state:R running task stack:25376 pid:20436 tgid:20430 ppid:15971 task_flags:0x400040 flags:0x00080002 [ 1380.086491][ C0] Call Trace: [ 1380.089795][ C0] [ 1380.092805][ C0] __schedule+0x14ea/0x5050 [ 1380.097313][ C0] ? pfn_valid+0xba/0x480 [ 1380.101642][ C0] ? __pfx___schedule+0x10/0x10 [ 1380.106530][ C0] ? lock_acquire+0x106/0x330 [ 1380.111221][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1380.116684][ C0] preempt_schedule_common+0x82/0xd0 [ 1380.121974][ C0] preempt_schedule_thunk+0x16/0x30 [ 1380.127221][ C0] _raw_spin_unlock+0x3f/0x50 [ 1380.131958][ C0] do_wp_page+0x4207/0x5990 [ 1380.136463][ C0] ? do_wp_page+0x3adf/0x5990 [ 1380.141136][ C0] ? ___pte_offset_map+0x29/0x240 [ 1380.146189][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1380.151048][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1380.156060][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1380.161431][ C0] handle_mm_fault+0x1520/0x32a0 [ 1380.166397][ C0] ? handle_mm_fault+0xee/0x32a0 [ 1380.171353][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1380.176762][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 1380.182055][ C0] do_user_addr_fault+0x75b/0x1360 [ 1380.187227][ C0] exc_page_fault+0x6a/0xc0 [ 1380.191737][ C0] asm_exc_page_fault+0x26/0x30 [ 1380.196572][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1380.202290][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 72 03 00 90 90 90 90 90 90 90 90 90 90 [ 1380.222012][ C0] RSP: 0018:ffffc9000bd878b8 EFLAGS: 00050202 [ 1380.228103][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000f4030 [ 1380.236169][ C0] RDX: ffff88802e34db80 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1380.244140][ C0] RBP: ffffc9000bd87a30 R08: ffffc9000bd87687 R09: 1ffff920017b0ed0 [ 1380.252274][ C0] R10: dffffc0000000000 R11: fffff520017b0ed1 R12: 1ffff920017b0f24 [ 1380.260241][ C0] R13: 0000000000000002 R14: 00002000000f4000 R15: dffffc0000000000 [ 1380.268325][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 1380.273105][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1380.278406][ C0] ? import_iovec+0x73/0xa0 [ 1380.282930][ C0] ___sys_recvmsg+0x215/0x590 [ 1380.287626][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1380.292829][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1380.298054][ C0] do_recvmmsg+0x334/0x800 [ 1380.302488][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1380.307521][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1380.312478][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1380.317494][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1380.323046][ C0] do_syscall_64+0xe2/0xf80 [ 1380.327558][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.333624][ C0] ? trace_irq_disable+0x37/0x100 [ 1380.338645][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1380.343348][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.349312][ C0] RIP: 0033:0x7f5e7499aeb9 [ 1380.353727][ C0] RSP: 002b:00007f5e75803028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1380.362128][ C0] RAX: ffffffffffffffda RBX: 00007f5e74c16090 RCX: 00007f5e7499aeb9 [ 1380.370106][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1380.378067][ C0] RBP: 00007f5e74a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1380.386040][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1380.394007][ C0] R13: 00007f5e74c16128 R14: 00007f5e74c16090 R15: 00007f5e74d3fa48 [ 1380.401991][ C0] [ 1380.405016][ C0] rcu: rcu_preempt kthread starved for 1752 jiffies! g138645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1380.416211][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1380.426174][ C0] rcu: RCU grace-period kthread stack dump: [ 1380.432064][ C0] task:rcu_preempt state:R running task stack:27512 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1380.445530][ C0] Call Trace: [ 1380.448823][ C0] [ 1380.451760][ C0] __schedule+0x14ea/0x5050 [ 1380.456273][ C0] ? __pfx___schedule+0x10/0x10 [ 1380.461121][ C0] ? schedule+0x90/0x360 [ 1380.465389][ C0] schedule+0x164/0x360 [ 1380.469555][ C0] schedule_timeout+0x158/0x2c0 [ 1380.474403][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1380.479775][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1380.485171][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1380.491080][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1380.496625][ C0] rcu_gp_fqs_loop+0x312/0x1560 [ 1380.501499][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1380.507674][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1380.513494][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1380.518696][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1380.524520][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1380.529127][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1380.534332][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1380.539258][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1380.544316][ C0] kthread+0x726/0x8b0 [ 1380.548401][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1380.553611][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.558193][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1380.563400][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.567997][ C0] ret_from_fork+0x51b/0xa40 [ 1380.572602][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1380.577707][ C0] ? __switch_to+0xc82/0x1410 [ 1380.582394][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.587010][ C0] ret_from_fork_asm+0x1a/0x30 [ 1380.591796][ C0] [ 1380.594800][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1380.601112][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1380.606332][ C1] NMI backtrace for cpu 1 [ 1380.606351][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.606372][ C1] Tainted: [L]=SOFTLOCKUP [ 1380.606378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1380.606388][ C1] RIP: 0010:ebt_do_table+0x3aa/0x2830 [ 1380.606410][ C1] Code: 89 84 24 90 00 00 00 4c 89 64 24 70 49 8d 44 24 28 48 89 84 24 18 01 00 00 31 ff 48 8b 74 24 18 e8 db ef 53 f7 4c 8b 74 24 28 <4c> 8b 64 24 20 44 89 ff 8b 5c 24 5c 89 de e8 43 ed 53 f7 41 39 df [ 1380.606430][ C1] RSP: 0000:ffffc90000a08540 EFLAGS: 00000246 [ 1380.606445][ C1] RAX: ffffffff8a708bb5 RBX: ffffc9000ca17040 RCX: 0000000000000100 [ 1380.606456][ C1] RDX: ffff88801cee5b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.606467][ C1] RBP: ffffc90000a08710 R08: 1ffff110164317cb R09: 1ffff11004f35ca8 [ 1380.606478][ C1] R10: dffffc0000000000 R11: ffffed1004f35ca9 R12: ffffc9000ca15000 [ 1380.606489][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.606499][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 1380.606511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.606522][ C1] CR2: 00007f0fd2e00000 CR3: 000000001ff6a000 CR4: 00000000003526f0 [ 1380.606535][ C1] Call Trace: [ 1380.606541][ C1] [ 1380.606551][ C1] ? common_startup_64+0x13e/0x147 [ 1380.606571][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1380.606595][ C1] ? __pfx_ebt_do_table+0x10/0x10 [ 1380.606610][ C1] ? stack_trace_save+0xa9/0x100 [ 1380.606631][ C1] ebt_broute+0x206/0x7c0 [ 1380.606649][ C1] ? kasan_save_free_info+0x46/0x50 [ 1380.606667][ C1] ? kmem_cache_free+0x195/0x610 [ 1380.606681][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 1380.606699][ C1] ? NF_HOOK+0x336/0x3c0 [ 1380.606715][ C1] ? __pfx_ebt_broute+0x10/0x10 [ 1380.606730][ C1] ? handle_softirqs+0x22a/0x7c0 [ 1380.606746][ C1] ? default_idle_call+0x72/0xb0 [ 1380.606763][ C1] ? do_idle+0x1bd/0x500 [ 1380.606775][ C1] ? cpu_startup_entry+0x43/0x60 [ 1380.606788][ C1] ? start_secondary+0x101/0x110 [ 1380.606807][ C1] ? common_startup_64+0x13e/0x147 [ 1380.606824][ C1] ? __pfx_ebt_broute+0x10/0x10 [ 1380.606841][ C1] br_handle_frame+0x1277/0x1510 [ 1380.606859][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1380.606874][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.606893][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1380.606906][ C1] __netif_receive_skb_core+0x98f/0x30a0 [ 1380.606923][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 1380.606949][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1380.606963][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 1380.606981][ C1] ? NF_HOOK+0x336/0x3c0 [ 1380.607001][ C1] ? process_backlog+0x3eb/0x1950 [ 1380.607020][ C1] ? process_backlog+0x3eb/0x1950 [ 1380.607034][ C1] ? process_backlog+0x3eb/0x1950 [ 1380.607050][ C1] ? process_backlog+0x3eb/0x1950 [ 1380.607065][ C1] process_backlog+0x76d/0x1950 [ 1380.607088][ C1] __napi_poll+0xae/0x340 [ 1380.607102][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1380.607119][ C1] net_rx_action+0x627/0xf70 [ 1380.607140][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1380.607183][ C1] handle_softirqs+0x22a/0x7c0 [ 1380.607198][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1380.607216][ C1] __irq_exit_rcu+0x5f/0x150 [ 1380.607228][ C1] irq_exit_rcu+0x9/0x30 [ 1380.607241][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1380.607256][ C1] [ 1380.607261][ C1] [ 1380.607267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.607283][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1380.607298][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 57 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1380.607310][ C1] RSP: 0000:ffffc90000197e20 EFLAGS: 00000242 [ 1380.607322][ C1] RAX: 0000000001f49c43 RBX: ffffffff8199570d RCX: 0000000080000001 [ 1380.607333][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc9605 RDI: ffffffff8c073a00 [ 1380.607344][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1380.607355][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1b70 [ 1380.607366][ C1] R13: 1ffff110039dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 1380.607379][ C1] ? do_idle+0x1bd/0x500 [ 1380.607395][ C1] default_idle+0x9/0x20 [ 1380.607410][ C1] default_idle_call+0x72/0xb0 [ 1380.607432][ C1] do_idle+0x1bd/0x500 [ 1380.607444][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1380.607460][ C1] ? __pfx_do_idle+0x10/0x10 [ 1380.607478][ C1] cpu_startup_entry+0x43/0x60 [ 1380.607491][ C1] start_secondary+0x101/0x110 [ 1380.607509][ C1] common_startup_64+0x13e/0x147 [ 1380.607532][ C1] [ 1383.917803][ C0] net_ratelimit: 17776 callbacks suppressed [ 1383.917830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.918041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.924050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.936160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1383.948013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.960869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1383.972049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.983836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.995875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.008732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.927753][ C0] net_ratelimit: 19702 callbacks suppressed [ 1388.927760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.927776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.934245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1388.946111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.958937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:d6:0f:ca:4e:af, vlan:0) [ 1388.970171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.981925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.994008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.006722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1389.027910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.286954][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1389.310353][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.