last executing test programs: 5m14.702449048s ago: executing program 2 (id=1134): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x3, 0x8, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, {[@noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 5m14.677460118s ago: executing program 2 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1, 0x0, 0x3) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3}}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc124b696d065d6e3c133f804cf378042f26c43f9", @ANYRESDEC, @ANYRES16=r0], 0xfc}}, 0x0) 5m14.434233284s ago: executing program 2 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fedbdf0d0d000065"], 0x14}}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, 0x3938700}, 0x0, 0xffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0xae0841, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x50, r7, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x100, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) 5m12.327738418s ago: executing program 2 (id=1141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000000200)=' ', 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73796abab137794b34472bb9c8cbc4137a203030303030303030303030303030303034303933df"], 0x2a, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000001180)) write$tun(0xffffffffffffffff, &(0x7f00000011c0)={@void, @void, @mpls={[{0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv4=@tipc={{0x11, 0x4, 0x3, 0x9, 0x77, 0x65, 0x0, 0x0, 0x6, 0x0, @empty, @local, {[@ssrr={0x89, 0x13, 0x6e, [@multicast2, @empty, @loopback, @multicast1]}, @timestamp={0x44, 0xc, 0xd1, 0x0, 0x5, [0x7, 0x7]}, @timestamp={0x44, 0x10, 0xff, 0x0, 0x0, [0xfffffff7, 0xe95, 0x6]}, @end]}}, @payload_mcast={{{{{{0x33, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x81, 0x0, 0x2, 0x4, 0x2, 0x1, 0x5, 0x6, 0x4, 0x4e20, 0x4e22}, 0x2}, 0x4, 0x2}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001140)=[@in6={0xa, 0x4e22, 0x8, @private2, 0x8}]}, &(0x7f0000000180)=0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5", 0x1) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r4, 0x7, 0x1) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001040)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r5) 5m11.005929681s ago: executing program 2 (id=1148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000f5ffffffffffffff00000001050016000200000014000700ff"], 0xa4}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcb, 0x0, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10, 0x7}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, 0x0, r4}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r11 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x2, 0x72}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/245) io_uring_enter(r5, 0x3516, 0x100000, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r3, 0x100000000) 5m10.747338367s ago: executing program 2 (id=1150): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00010028bd7000fedbdf2581808000000000070000000014000200000000000000000000000000000000011db34e6fbba512ea16264e588482c9ee94421a99cc414b2e2fc0f05353b0be6de74d615c373ac96f016bce19e44a62f65ca0cd754c5f88bc7e6f6c0b369a25a5c843d4c5d7751c6bf17d1b776a518cc2cb8485647977553505c15232237387230f6e8e005e98f95f24a1bf5b67cea77534a4d9783d98f3eb1285bab0"], 0x30}, 0x1, 0x0, 0x0, 0x4841}, 0x884) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5c6f135252ce000800006f0000002000"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x1, 0x7c1, 0x8001, 0x0, 0x13, "4cb8b210acdc716f64cf76062d59e56f2584c4"}) r7 = socket(0x22, 0x2, 0x4) getsockname(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0xae44, 0xbf14) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) 5m9.609432802s ago: executing program 32 (id=1150): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00010028bd7000fedbdf2581808000000000070000000014000200000000000000000000000000000000011db34e6fbba512ea16264e588482c9ee94421a99cc414b2e2fc0f05353b0be6de74d615c373ac96f016bce19e44a62f65ca0cd754c5f88bc7e6f6c0b369a25a5c843d4c5d7751c6bf17d1b776a518cc2cb8485647977553505c15232237387230f6e8e005e98f95f24a1bf5b67cea77534a4d9783d98f3eb1285bab0"], 0x30}, 0x1, 0x0, 0x0, 0x4841}, 0x884) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5c6f135252ce000800006f0000002000"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x1, 0x7c1, 0x8001, 0x0, 0x13, "4cb8b210acdc716f64cf76062d59e56f2584c4"}) r7 = socket(0x22, 0x2, 0x4) getsockname(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0xae44, 0xbf14) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) 1m24.494596084s ago: executing program 0 (id=1994): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa020044"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1m24.314501542s ago: executing program 0 (id=1997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc31984000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xf100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m24.14529267s ago: executing program 1 (id=1998): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5f, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14600000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m24.010105766s ago: executing program 0 (id=2000): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x100000000, 0x8, 0x100000001, 0x6, 0x9}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m23.881191224s ago: executing program 1 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0x10, 0x4, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) pivot_root(0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)="341428166612dc41", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0xc, 0x78, {0x78, 0x23, "c3200a07253f88b7ff362e7028e8ba8bc4b256eca9dd68f84fc2bbbd38650d649c054ecf6b7225e5920b372a4372d7bc6c568abfadf73dfdcae8953b4e70ba0341d82132b93d83ed3e53a9b469a83f17227b3250b90da9cd035e2a18791ce0df9a3cc097884abd9134379ada8b05a7ac0828cfc36dc5"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004825504"], &(0x7f0000000280)={0x0, 0xf, 0xae, {0x5, 0xf, 0xae, 0x1, [@generic={0xa9, 0x10, 0x3, "69095e7f63d2ecf83ece6d851fb4db3819e946d9d00690e25f48554babc660113c48ab9c2ac9e2d8c9b9eeb847af8460c05841194f69b97c787d10759e21caf04c3b6ab962aa42d32e18904b101a8c92bda92910add92bfe25d0ea3ce969ee449519795452e90d4010df0a524859303d02cd4eacf1c471a8425c355e1741656a1b095b031992a1d3b1070ade042cf967872a19b72b588fedf18d04f16a3d55e8eee737963993"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x188d3f88582f469f, 0x6, 0x6, "f5d7384e", "c3823fc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7e, 0x0, 0xc, 0xb2, 0x5, 0x14, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x86, "9cb228aeca155abfab6b0de84fcb32c490a804c0853b8ba91dfedbe3154ac4a15273e2969e0ff568fa901a4c1aabc40d4222f167fc614ba8a8b4959d3aa18a2aee553ed44742ce3c9b9a08f3389afafc6a281747d920321d2bd0e4e30aa21302c110334b743257abc3652a04cc6e5a0602956ca894f5843f9e352b92e5f7a7a6f6961e28a5cf"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x43}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x0, 0xd004e81ba0772d3, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xa4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5bd0"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "e84c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) 1m23.458348362s ago: executing program 3 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0x10, 0x4, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)="341428166612dc41", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0xc, 0x78, {0x78, 0x23, "c3200a07253f88b7ff362e7028e8ba8bc4b256eca9dd68f84fc2bbbd38650d649c054ecf6b7225e5920b372a4372d7bc6c568abfadf73dfdcae8953b4e70ba0341d82132b93d83ed3e53a9b469a83f17227b3250b90da9cd035e2a18791ce0df9a3cc097884abd9134379ada8b05a7ac0828cfc36dc5"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004825504"], &(0x7f0000000280)={0x0, 0xf, 0xae, {0x5, 0xf, 0xae, 0x1, [@generic={0xa9, 0x10, 0x3, "69095e7f63d2ecf83ece6d851fb4db3819e946d9d00690e25f48554babc660113c48ab9c2ac9e2d8c9b9eeb847af8460c05841194f69b97c787d10759e21caf04c3b6ab962aa42d32e18904b101a8c92bda92910add92bfe25d0ea3ce969ee449519795452e90d4010df0a524859303d02cd4eacf1c471a8425c355e1741656a1b095b031992a1d3b1070ade042cf967872a19b72b588fedf18d04f16a3d55e8eee737963993"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x188d3f88582f469f, 0x6, 0x6, "f5d7384e", "c3823fc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7e, 0x0, 0xc, 0xb2, 0x5, 0x14, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x86, "9cb228aeca155abfab6b0de84fcb32c490a804c0853b8ba91dfedbe3154ac4a15273e2969e0ff568fa901a4c1aabc40d4222f167fc614ba8a8b4959d3aa18a2aee553ed44742ce3c9b9a08f3389afafc6a281747d920321d2bd0e4e30aa21302c110334b743257abc3652a04cc6e5a0602956ca894f5843f9e352b92e5f7a7a6f6961e28a5cf"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x43}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x0, 0xd004e81ba0772d3, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xa4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5bd0"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "e84c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) 1m22.370300983s ago: executing program 5 (id=2006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYRESOCT=r1], 0xa0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x1, r8}) 1m21.174240042s ago: executing program 5 (id=2008): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) getsockname(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1m21.004890424s ago: executing program 0 (id=2009): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x88602, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x20000, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0x10001, 0x10000) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000000400)={{0x1, 0x3, 0xf, 0x7fff, 0x10, 0x5}, 0x92, [0x1, 0x2, 0xfad3, 0xb33977a, 0xffff8000, 0x5, 0xd1, 0x400, 0x2, 0xfffffff8, 0x80, 0xf817, 0xa, 0x0, 0x0, 0xd311, 0x7, 0x0, 0x0, 0x8, 0x2, 0x8, 0x0, 0x2, 0x74, 0xffffffff, 0x3, 0x6, 0x6, 0x2, 0x3, 0x5, 0x9, 0x1, 0x3, 0x11a9, 0x8, 0x4, 0x0, 0x401, 0xfff0000, 0x5, 0x8, 0x0, 0x6, 0xa, 0x7f, 0xbf1, 0x5, 0xf5, 0x3, 0xb, 0x6, 0x7, 0xd, 0x1, 0x8, 0xde, 0x4, 0x7, 0xfffffffc, 0x2, 0x3, 0x8, 0x8, 0x6, 0x3ff, 0x10001, 0xf, 0x82, 0x3, 0x0, 0x1, 0x2, 0x8, 0x7ff, 0x57e, 0xfffffffc, 0x6123e56, 0x0, 0x4, 0x10, 0xfffffffc, 0x7, 0x8, 0xab2, 0x6331, 0x2, 0x4, 0xcb58, 0xf, 0x5, 0xffff, 0x6, 0x7, 0x8, 0x30000, 0x7ff, 0x3, 0xc9, 0x3ff, 0x8001, 0x2f6400, 0x7ff, 0x3, 0x2, 0x0, 0xc19, 0x9, 0x3, 0xf, 0x7, 0x9, 0x4, 0x1111c000, 0x9b98463, 0x3, 0xffffffff, 0xa55, 0x13, 0x0, 0x1, 0xfffffff7, 0x6, 0x3, 0x7, 0x7fff, 0x5, 0x3, 0xc68b, 0xa59d, 0x1d75, 0x2, 0x3, 0x1, 0x3, 0x6795, 0xde07, 0xbc4, 0x0, 0x5, 0x2, 0x0, 0x81, 0x1, 0xafb3, 0x3, 0x6, 0x1, 0x1, 0x4, 0x8000, 0x6, 0x401, 0x7fffffff, 0x5, 0x80000001, 0xff, 0xfffffffa, 0x1, 0xffffff01, 0x0, 0x6, 0x0, 0x10000, 0x2, 0xc, 0x100, 0xb89, 0xb32e, 0xfff, 0x7f, 0x8000, 0xffff8001, 0xf666, 0x2, 0x6, 0xfffffff8, 0x8, 0x8, 0x8, 0x81, 0x1, 0x9, 0x3, 0x7fffffff, 0x2, 0x8, 0x9, 0x9, 0x75d16442, 0x5, 0x0, 0x0, 0x46b, 0xf7f2, 0x2, 0x9, 0x8, 0x40, 0x7, 0xbd, 0x6, 0x9, 0xf, 0x4, 0x4d, 0x8, 0x9e, 0x6, 0xfffffff7, 0x2, 0x4, 0x3e6, 0x4d, 0xfffff8a2, 0x7, 0x80000001, 0x3, 0x0, 0x4, 0x7, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0xc72, 0x2, 0xea92, 0x5, 0x2, 0x80000000, 0x5, 0x3, 0x8001, 0x2, 0x100, 0x1, 0x81, 0xb4d, 0xfffffffb, 0x6, 0xcd, 0x4b1, 0x4, 0x9, 0x1, 0xfffffffa, 0x1, 0xbfd0, 0x5, 0x401, 0x3, 0xd2ef, 0xd, 0x10001, 0x2, 0x80, 0xcc4, 0x7fffffff, 0x2, 0x1, 0x7, 0x0, 0x24, 0x400, 0x101, 0x58, 0xdf70, 0xf, 0x3dbb18df, 0x2075, 0x4, 0x401, 0x17b, 0x80, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0xffffffff, 0x8000, 0x162, 0x401, 0x3, 0x54b, 0xfffffff9, 0xc2, 0x8001, 0x5, 0x7f, 0x0, 0xc, 0x1, 0x1ff, 0x5, 0x7a, 0x6, 0x4000, 0x3ff, 0x4, 0xfffffff8, 0x5, 0x1, 0x6, 0x7, 0x200, 0x3, 0x4, 0x2, 0x2, 0x45, 0x11d5d3d6, 0x6, 0x7, 0x4, 0xff, 0x2, 0x0, 0x3, 0x67, 0x23, 0xffffffff, 0x8, 0x7, 0x5, 0x401, 0x4, 0x5d, 0x8, 0x5, 0x3, 0x200, 0x7, 0xffffcc68, 0x3, 0x8, 0xfffffffa, 0x6, 0x9, 0x2, 0x4, 0x7, 0x877, 0x3, 0x0, 0x8, 0x0, 0x81, 0x4, 0xff, 0x9, 0x5ea, 0x3, 0x8, 0x9, 0xfffffffb, 0x4d, 0x3, 0x8, 0x6a, 0x7ff, 0x3, 0x2, 0x400, 0xfff, 0x50, 0x7, 0x1, 0x5, 0x3, 0x971, 0x0, 0x3, 0xf3, 0x10, 0x1, 0x7, 0x6, 0xf97, 0xea93, 0x1, 0x6, 0x1, 0x1, 0x81, 0x8, 0x7f, 0x5, 0x29592098, 0xba1a, 0x67e0, 0x401, 0x4, 0x10, 0xfffffffb, 0x5, 0x9, 0xc6, 0x2, 0x4, 0xd78, 0x1, 0x40, 0x9, 0x5, 0xa18f, 0x8, 0x5, 0xfffffffd, 0x8, 0x5, 0x74, 0x8, 0x6, 0x5, 0x5, 0x3, 0x9, 0x862, 0x3660, 0x9, 0x1, 0x80000001, 0x7f, 0x6, 0x1, 0x3, 0x6, 0x4, 0x0, 0xffff8001, 0x4, 0x4, 0x8000, 0x3, 0x1, 0x3, 0xb, 0xfffffbc9, 0xb3a4, 0x3, 0x6, 0x6, 0xfffffffa, 0x8, 0x6, 0x4, 0x10000, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x8, 0x7fffffff, 0x0, 0x6, 0x8, 0x8, 0x6, 0xa413, 0x4, 0x7fffffff, 0x3, 0xe65, 0x0, 0x6, 0x2cf5a220, 0x3ee, 0x6, 0x7, 0xffffffff, 0x2, 0x8, 0x1, 0x6, 0x8, 0xbc1, 0x1000, 0x5f, 0x4, 0x3, 0x3, 0x7fffffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x6, 0x6, 0x1, 0x1, 0xa, 0x1, 0x6, 0x8, 0x6, 0x3, 0x9, 0xff, 0xffff5079, 0x5, 0x6, 0xfff, 0x644, 0xa5e, 0x5, 0x1, 0x7, 0x8, 0x3, 0x100, 0x1, 0x7fff, 0x6b, 0x2, 0x51, 0x2, 0x7eac, 0x3, 0x3ff, 0x9, 0x87fc, 0xb607, 0x2, 0x6, 0x7, 0x800, 0x6, 0x0, 0x49ad, 0x80000000, 0xfffffffb, 0x8, 0x23ceecd4, 0x4, 0xffff8001, 0x8, 0x83, 0x5f, 0x7ff, 0x3, 0xfffffffe, 0x800, 0x2, 0xd, 0x5, 0x4, 0x9, 0x67, 0x0, 0x2, 0x3, 0x2, 0x1, 0x2, 0xf, 0x7, 0x1, 0x4, 0x800, 0xfffffff8, 0x1, 0x3, 0x1, 0x3, 0x4, 0x1, 0x2, 0x100, 0xfffffff4, 0x1, 0x4, 0xff, 0xc, 0x5, 0x0, 0x3, 0x4, 0x1, 0x139e, 0x80000000, 0x2, 0x1, 0x80000001, 0x7, 0x9, 0x5, 0x8, 0x20, 0x9, 0x8, 0xa0d8, 0x3, 0xc, 0xfffffff9, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x5, 0x7, 0x4, 0x8, 0xb30b, 0x4, 0x6, 0x6, 0x8, 0x2, 0x2, 0x10, 0x49c0f593, 0x2, 0x3, 0x100, 0x7, 0x2, 0xfe, 0x8, 0x2, 0x21, 0x1, 0x5dab420a, 0x0, 0x8, 0x4251, 0x401, 0xfffeffff, 0x4, 0xbd9, 0x10001, 0x2, 0x8, 0x100, 0x7f, 0x2, 0x3, 0x7, 0x1, 0xffffffff, 0x5, 0x5, 0x9, 0x6, 0x2, 0x8, 0x63, 0x2a, 0x3, 0xb, 0x101, 0x2, 0x3, 0x89, 0x7, 0x7ff, 0x7ff, 0x406, 0xd, 0x1000, 0x3, 0xf8ec, 0x8, 0x800, 0x8, 0x0, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x4, 0x6e, 0x1, 0x9, 0x5, 0x9, 0xfffffffa, 0x3, 0x2, 0xc64, 0x10000, 0x3cea, 0x1000, 0x6, 0x3, 0xe, 0x8001, 0x6, 0x10, 0x80, 0x40, 0x200, 0x3, 0x75ed7b52, 0x5, 0x2851, 0x5, 0xd, 0xffffc000, 0x2, 0xbd90, 0xc, 0xd, 0x1ff, 0x1, 0x3, 0x4, 0x7b2, 0x100, 0x0, 0x589, 0x7, 0x3, 0x0, 0xe9, 0x1, 0xffff24af, 0x4bb, 0xa486, 0x5, 0x3, 0x6, 0x0, 0x2, 0x3, 0x0, 0x7, 0xe2c, 0x4, 0x0, 0xfffffffe, 0x1, 0x4, 0x0, 0xc9c, 0x3, 0x9, 0x5, 0x0, 0x6, 0x9, 0xc, 0x5, 0x2, 0x7, 0x8, 0x8fb4, 0x534, 0xfffffffe, 0x8, 0x8, 0x4, 0xfffffff2, 0x8, 0x5d, 0xce, 0x9, 0xc000000, 0x0, 0x1e284925, 0xb6, 0x39, 0x1, 0x7, 0x2, 0x1ff, 0x9c9, 0x9, 0xffffffff, 0x1, 0x8000, 0x91, 0x4, 0x4bd50707, 0x10, 0x3b, 0x10000, 0x8001, 0x80000000, 0x1, 0x6, 0x4, 0xe2, 0x66, 0x101, 0xb4, 0x1, 0x100, 0x7f, 0x4, 0xffff6d4f, 0xbc98, 0x3, 0xffff, 0x9d, 0xfffffff9, 0x5, 0x1, 0x75c, 0xc1, 0x7, 0x7, 0x947, 0x72a, 0x4, 0x9, 0x4, 0x5, 0x7, 0x6, 0x81, 0x365d730, 0x800, 0x942, 0x7, 0x10, 0x1, 0x2, 0x4, 0x1, 0x9, 0x5, 0x0, 0x6, 0x3, 0x1, 0x3, 0x8, 0x9, 0xffffffff, 0x9, 0xff, 0x9, 0x8, 0xe, 0x80, 0x8e84, 0x2, 0x1, 0x3, 0x24, 0x3, 0xcd8, 0x7, 0xceab, 0x401, 0x6, 0x0, 0x6, 0x7, 0x2219, 0x4, 0x2, 0x2, 0x80000000, 0x0, 0x5, 0x9, 0x9, 0x80000, 0x800, 0x10, 0x2084, 0x80000000, 0xb, 0x8, 0xe, 0x1, 0x8, 0x2, 0x4c, 0x1c4d06d7, 0x1, 0x0, 0x8, 0x700, 0x0, 0x35, 0x6, 0xfffffffc, 0x0, 0x5, 0x81, 0x4, 0x6, 0x81, 0x2, 0x4, 0x1, 0x5, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4cfe, 0x8d3, 0x4, 0x9, 0x9, 0x7ff, 0xfffffffa, 0x7, 0xc, 0x8, 0xc2ca, 0x6, 0x0, 0x7, 0xe6bc, 0x7ff, 0x8, 0xfffffffa, 0x1, 0xb1c, 0x5, 0x5, 0x7, 0x6, 0x1, 0x8, 0x10001, 0x5, 0x6, 0x100, 0x7f908c6c, 0x40, 0x6, 0xc, 0x4, 0x3, 0x5, 0x6, 0x4, 0x4, 0xffffffff, 0x11, 0x7, 0x9, 0xc, 0x8, 0x100, 0x3, 0x2, 0x8, 0x6, 0x7d, 0x1ff, 0xf86, 0x2, 0x6, 0xc, 0x8000, 0x0, 0x8, 0x9, 0x2, 0x7, 0x8, 0x7fffffff, 0x6, 0x4, 0x6, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x2, 0x3ff, 0x8000, 0x3, 0x9, 0x7ff, 0x7, 0xfffffffb, 0x2, 0x7f, 0x4, 0x83, 0x2, 0x5, 0x400, 0x8, 0x7, 0x0, 0xa0, 0x8000, 0x9, 0x3bb, 0x6, 0x5, 0x1, 0x6, 0x7, 0x0, 0xfa4, 0x4b, 0x5, 0x6, 0x1ff, 0x8, 0xb2a, 0x7, 0xffff3c13, 0x6, 0x2, 0xb9e, 0x0, 0x6]}) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000001c0)=0xc, 0x4) 1m20.105381071s ago: executing program 3 (id=2015): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)=ANY=[@ANYBLOB="1ce100e7"], 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x20008004) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000b10000400008000007"]) rename(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000300060000000014000100ff"], 0x30}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000400)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x40, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x2b, 0x80, [@private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @empty, @rand_addr=0x64010102, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote]}, @timestamp={0x44, 0x1c, 0x1d, 0x0, 0x8, [0x63, 0xf8b, 0x9, 0x80000000, 0xa, 0xe1e]}, @end]}}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x0) 1m19.734320798s ago: executing program 4 (id=2016): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002fcc00", 0xfffffeec, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x3e62cfad, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m19.732137475s ago: executing program 1 (id=2017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x28) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002000) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e254f77358d0b68e60dcd68090f25a798c9aa11941294a031c8ec13c911e980127d1cb7f5b964b5f650a59f0a76cb6b6dd07a3977db4e9dbd34b779b7ffda7eef21ee043887861df0807749d8c6b45e141742e785c62c7508bbef6f81b5d67", 0x5f}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpgrp(0x0) sched_setattr(r7, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0xfffffffe, 0x0, 0x1, 0xbf77, 0xfffffffffffffffe, 0x0, 0xfffffffe}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, &(0x7f0000000500)={0x0, 0x3938700}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0x370, 0xd0, 0x23000000, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 1m19.130204047s ago: executing program 5 (id=2018): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x2000, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "90be8bf4bd00000000000000000003000000001000"}}) 1m14.452946368s ago: executing program 3 (id=2019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m14.34837792s ago: executing program 4 (id=2020): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa020044"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1m14.000665519s ago: executing program 1 (id=2021): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f00000ffffff80000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m13.472024941s ago: executing program 3 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) io_uring_enter(r2, 0x6575, 0x996b, 0x4b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000010900020073797a32000000000900010073797a300000000008000540000000020c00098008000140000020"], 0xa0}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 1m12.89683034s ago: executing program 4 (id=2023): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 1m12.88303965s ago: executing program 0 (id=2024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000002d0000000800"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.605590724s ago: executing program 4 (id=2025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc31984000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x18, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m12.605373948s ago: executing program 1 (id=2026): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x70}, 0x1, 0x400000000000000}, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 1m12.341691233s ago: executing program 3 (id=2027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14004800100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m12.265393031s ago: executing program 5 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000180000000061193c000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m12.26496084s ago: executing program 4 (id=2029): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002fcc00", 0xfffffeec, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x3e62cfad, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x228, 0x0, 0x0, [{0x806, 0x5, 0xb, 0x2, '#,UK\x80j\x9bO\x8e,-'}, {0x2, 0x5, 0x1d8, 0x0, 'group\x1fidWtv\xf1@M\x13V\xb82\'\x1a\x00t\xae\x18&\xf8\x97\xbe4\xd5P\a\xf4I{\xea\xbf\x8c#\xad\xb9|\xd6\x01\x92a\xd5{\xde`U\xedxt\xd8\xdb\xeeS\xda\x81\xde\x83\xbf)\x8f,R_Hxj]&\xe7\x15\xfa\x02\x91\xa4\xa5\x971\n=\xc6%\xce{\xda\xd5\xd8\xf3\rTr\x8b\x95\xcc>\xaad\xb6\x9d\x13\x11<\xfb[\xd8\x01yG\xd4vt\x00\x02\xaej\x06\x12j&\x05\xb6W\x9b\xa7~2\'\xf2\xca\\\x94Q\"\xda\xfb\x1c\xba\xf7\xbc\v-\xbe[\x84\xfc\xbf*\xc4\x96\x93\xaaL^\xcf\xd6\xb3\\\xcd\x86\'\"fJ\x00j\xf3{\x02\xad\x14\xe2\xc6&\xe9\x18Y\xe8\fNO{\bV\x19\xdb<\x1f\x0e\x19\t\xe8\xed\xc7\xf6=\xa1\xe6Hj\xc2\x80@\to@|\xf9\xeb\x9b\xf4,\fl\x028\x9b\xe7\x05\x90\xb2\xe8N\x9cQ\x81\xf4r \xdd\xb4\xdaT\v\xcb\xbc\xa4\x88%\xb6~@\x1fkov\x9fr[\xca\xd8\x06)\x95\"ll\xd1\x9e\x8b\xf6]\x83b\xeatH \x04~G\xe5t\xe6\xfa\x81@\x8cB\xd6r\xdf\xf1\xd0\xb6Y1\xa2^#\xf6t\x93?\xa8S\x05\xb6J[\x9dJ~\xa4(t(\x80\x85\xc0\x00$\x16\xa0\xbc\xe7V\xc1\xc1\x17\xaeZ\xad\xdf,\xba\xd0\x11\xda\xe3c\x965\x0f\t5Z?\b\xaf\xc5\xc3M\x1e\x1bu\xf3\x06$\' u\xb9\x8f\xa9U\x8c\xd4\xe4\x02\x04\xa6\x83\x16\xea\x1ap<,\xd0\x00\xc7CP!\xe9$y\xde\xa4\x81q\xb6\x89%\xc4\xf9K\xc7&Z3\x84\\Q\xc7\xceo8\xe9\xaa\x89\xc5\x03\xde\xcdn\x7fl\x90\x1b\xec5\x12p&m\x8d\xd1\xce\x86$\xady\xe7-\xf2Q\xf2\x1e?\x8e\x83\xb9s\xea\x04j\xa8o\xe0L\xce5b\x94\x9d\x8b\xeaB\xe5\xb7\x02\x8b\xbd\xd9\x9cd\x13\xf5X\x0e\xda}*\xa0\\\x8d\xd5'}]}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m12.115986458s ago: executing program 1 (id=2030): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808002100000000000000080001fe9300100000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d000100000000090400050503000d0009210002080122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) listxattr(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setresuid(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff89}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000008c0)=0x3ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x8) io_uring_setup(0xd06, &(0x7f0000000600)={0x0, 0x1f04, 0x10, 0x0, 0xb6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000740)={0x9, 0x0, [{0x8080000, 0xef, &(0x7f0000000080)=""/239}, {0xeeef0000, 0xd9, &(0x7f00000002c0)=""/217}, {0x2, 0x3d, &(0x7f0000000180)=""/61}, {0xf000, 0x71, &(0x7f00000001c0)=""/113}, {0x80a0000, 0x8a, &(0x7f00000003c0)=""/138}, {0x1, 0x96, &(0x7f0000000480)=""/150}, {0xeeef0000, 0x9c, &(0x7f0000000580)=""/156}, {0x4000, 0xa5, &(0x7f0000000640)=""/165}, {0x8000000, 0x38, &(0x7f0000000700)=""/56}]}) 1m11.959517776s ago: executing program 3 (id=2031): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000600)={0xef27c000, 0x39b000, 0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), 0x0}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a0000000000010902240001000000000904000001030000000921070000002204000905810300"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x8a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x10, 0x9}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0xd, 0x7f, 0x10, 0xd}, 0xdb, &(0x7f00000000c0)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x2, "e39c841b906990f0a3b016b0d84290dd49d13803b812c8da7216b883d353d49a06e06a0121c1508618e073aece76898f7362bd7c4c6239ff4e28caaba428a73d83b07e5017dc5d4c1bd93c52759c423475efd7c5c017cacfc3c82192c563d7d0b2dc1f86b5978c45e0dc5128964d36c03bd51013517f1de8672f2c8a41b4c550ce6e6de5b27588ac98d388fb30c92d87e68ac51d09254bfbef782cb9b12e5f4ee6a94ec74a412d498db829c7fd7a9315e9c6a21ec395e95f1bc3e6cc1d4223e4a47f02577a1eb81e75d747b251fbd1414e3d13"}]}, 0x7, [{0x78, &(0x7f0000000240)=@string={0x78, 0x3, "0a07bd9c1befd8f78396868e8366aec5b0b8905623e674abd13838f8eeccfa3c15c7e81e392c5aaa6962bc38e8e834515f03a14741901e9c2b6b34786884932c3e2a5dd624f7c3d25e74abff9de060520f6ea6ecdb4549f64bef6ee410f673679868ca9ec0b4a770f807c62a1243b44f01ecdda12ede"}}, {0x2a, &(0x7f00000001c0)=@string={0x2a, 0x3, "1d32608a0321cb339ff4a901210ba1e6cd88757c42afcbe603f0b2857907d604519213e1e66c49cf"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x439}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "76025ac3109f40c43d1de78b341db2a7c0782af5fc41b2a0530b4cbd019e49dfb958505ae904d00df1cc674f141d14aff9a839efbaf9a74acb2a836b764f"}}, {0x45, &(0x7f0000000500)=ANY=[@ANYBLOB="4503f8f1068f3084ba1b7089c68c3c30d0294ace7d7b6ba86b6d9441534ca1b6f54989d5ca40eedd94ec1c10944dd1880ba31d2769b6fa304b120a353055300c10d6e12c7f2e"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x2f, &(0x7f0000000400)=@string={0x2f, 0x3, "99f8dd3825e0180bfb70084b985383c179670516410fb08546992586ae160fc91ac0764c312c7b7b0bca63f05a"}}]}) 1m11.836367566s ago: executing program 5 (id=2032): syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000020940010cf1003559fea010203010901000000000904d70001f646ca0009050b102000016408"], 0x0) 1m11.228594505s ago: executing program 0 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0x10, 0x4, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)="341428166612dc41", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0xc, 0x78, {0x78, 0x23, "c3200a07253f88b7ff362e7028e8ba8bc4b256eca9dd68f84fc2bbbd38650d649c054ecf6b7225e5920b372a4372d7bc6c568abfadf73dfdcae8953b4e70ba0341d82132b93d83ed3e53a9b469a83f17227b3250b90da9cd035e2a18791ce0df9a3cc097884abd9134379ada8b05a7ac0828cfc36dc5"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004825504"], &(0x7f0000000280)={0x0, 0xf, 0xae, {0x5, 0xf, 0xae, 0x1, [@generic={0xa9, 0x10, 0x3, "69095e7f63d2ecf83ece6d851fb4db3819e946d9d00690e25f48554babc660113c48ab9c2ac9e2d8c9b9eeb847af8460c05841194f69b97c787d10759e21caf04c3b6ab962aa42d32e18904b101a8c92bda92910add92bfe25d0ea3ce969ee449519795452e90d4010df0a524859303d02cd4eacf1c471a8425c355e1741656a1b095b031992a1d3b1070ade042cf967872a19b72b588fedf18d04f16a3d55e8eee737963993"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x188d3f88582f469f, 0x6, 0x6, "f5d7384e", "c3823fc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7e, 0x0, 0xc, 0xb2, 0x5, 0x14, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x86, "9cb228aeca155abfab6b0de84fcb32c490a804c0853b8ba91dfedbe3154ac4a15273e2969e0ff568fa901a4c1aabc40d4222f167fc614ba8a8b4959d3aa18a2aee553ed44742ce3c9b9a08f3389afafc6a281747d920321d2bd0e4e30aa21302c110334b743257abc3652a04cc6e5a0602956ca894f5843f9e352b92e5f7a7a6f6961e28a5cf"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x43}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x0, 0xd004e81ba0772d3, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xa4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5bd0"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "e84c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) 1m10.95517785s ago: executing program 4 (id=2034): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x88602, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x20000, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0x10001, 0x10000) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000000400)={{0x1, 0x3, 0xf, 0x7fff, 0x10, 0x5}, 0x92, [0x1, 0x2, 0xfad3, 0xb33977a, 0xffff8000, 0x5, 0xd1, 0x400, 0x2, 0xfffffff8, 0x80, 0xf817, 0xa, 0x0, 0x0, 0xd311, 0x7, 0x0, 0x0, 0x8, 0x2, 0x8, 0x0, 0x2, 0x74, 0xffffffff, 0x3, 0x6, 0x6, 0x2, 0x3, 0x5, 0x9, 0x1, 0x3, 0x11a9, 0x8, 0x4, 0x0, 0x401, 0xfff0000, 0x5, 0x8, 0x0, 0x6, 0xa, 0x7f, 0xbf1, 0x5, 0xf5, 0x3, 0xb, 0x6, 0x7, 0xd, 0x1, 0x8, 0xde, 0x4, 0x7, 0xfffffffc, 0x2, 0x3, 0x8, 0x8, 0x6, 0x3ff, 0x10001, 0xf, 0x82, 0x3, 0x0, 0x1, 0x2, 0x8, 0x7ff, 0x57e, 0xfffffffc, 0x6123e56, 0x0, 0x4, 0x10, 0xfffffffc, 0x7, 0x8, 0xab2, 0x6331, 0x2, 0x4, 0xcb58, 0xf, 0x5, 0xffff, 0x6, 0x7, 0x8, 0x30000, 0x7ff, 0x3, 0xc9, 0x3ff, 0x8001, 0x2f6400, 0x7ff, 0x3, 0x2, 0x0, 0xc19, 0x9, 0x3, 0xf, 0x7, 0x9, 0x4, 0x1111c000, 0x9b98463, 0x3, 0xffffffff, 0xa55, 0x13, 0x0, 0x1, 0xfffffff7, 0x6, 0x3, 0x7, 0x7fff, 0x5, 0x3, 0xc68b, 0xa59d, 0x1d75, 0x2, 0x3, 0x1, 0x3, 0x6795, 0xde07, 0xbc4, 0x0, 0x5, 0x2, 0x0, 0x81, 0x1, 0xafb3, 0x3, 0x6, 0x1, 0x1, 0x4, 0x8000, 0x6, 0x401, 0x7fffffff, 0x5, 0x80000001, 0xff, 0xfffffffa, 0x1, 0xffffff01, 0x0, 0x6, 0x0, 0x10000, 0x2, 0xc, 0x100, 0xb89, 0xb32e, 0xfff, 0x7f, 0x8000, 0xffff8001, 0xf666, 0x2, 0x6, 0xfffffff8, 0x8, 0x8, 0x8, 0x81, 0x1, 0x9, 0x3, 0x7fffffff, 0x2, 0x8, 0x9, 0x9, 0x75d16442, 0x5, 0x0, 0x0, 0x46b, 0xf7f2, 0x2, 0x9, 0x8, 0x40, 0x7, 0xbd, 0x6, 0x9, 0xf, 0x4, 0x4d, 0x8, 0x9e, 0x6, 0xfffffff7, 0x2, 0x4, 0x3e6, 0x4d, 0xfffff8a2, 0x7, 0x80000001, 0x3, 0x0, 0x4, 0x7, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0xc72, 0x2, 0xea92, 0x5, 0x2, 0x80000000, 0x5, 0x3, 0x8001, 0x2, 0x100, 0x1, 0x81, 0xb4d, 0xfffffffb, 0x6, 0xcd, 0x4b1, 0x4, 0x9, 0x1, 0xfffffffa, 0x1, 0xbfd0, 0x5, 0x401, 0x3, 0xd2ef, 0xd, 0x10001, 0x2, 0x80, 0xcc4, 0x7fffffff, 0x2, 0x1, 0x7, 0x0, 0x24, 0x400, 0x101, 0x58, 0xdf70, 0xf, 0x3dbb18df, 0x2075, 0x4, 0x401, 0x17b, 0x80, 0x4, 0x7, 0x9, 0x5, 0x7, 0x8, 0xffffffff, 0x8000, 0x162, 0x401, 0x3, 0x54b, 0xfffffff9, 0xc2, 0x8001, 0x5, 0x7f, 0x0, 0xc, 0x1, 0x1ff, 0x5, 0x7a, 0x6, 0x4000, 0x3ff, 0x4, 0xfffffff8, 0x5, 0x1, 0x6, 0x7, 0x200, 0x3, 0x4, 0x2, 0x2, 0x45, 0x11d5d3d6, 0x6, 0x7, 0x4, 0xff, 0x2, 0x0, 0x3, 0x67, 0x23, 0xffffffff, 0x8, 0x7, 0x5, 0x401, 0x4, 0x5d, 0x8, 0x5, 0x3, 0x200, 0x7, 0xffffcc68, 0x3, 0x8, 0xfffffffa, 0x6, 0x9, 0x2, 0x4, 0x7, 0x877, 0x3, 0x0, 0x8, 0x0, 0x81, 0x4, 0xff, 0x9, 0x5ea, 0x3, 0x8, 0x9, 0xfffffffb, 0x4d, 0x3, 0x8, 0x6a, 0x7ff, 0x3, 0x2, 0x400, 0xfff, 0x50, 0x7, 0x1, 0x5, 0x3, 0x971, 0x0, 0x3, 0xf3, 0x10, 0x1, 0x7, 0x6, 0xf97, 0xea93, 0x1, 0x6, 0x1, 0x1, 0x81, 0x8, 0x7f, 0x5, 0x29592098, 0xba1a, 0x67e0, 0x401, 0x4, 0x10, 0xfffffffb, 0x5, 0x9, 0xc6, 0x2, 0x4, 0xd78, 0x1, 0x40, 0x9, 0x5, 0xa18f, 0x8, 0x5, 0xfffffffd, 0x8, 0x5, 0x74, 0x8, 0x6, 0x5, 0x5, 0x3, 0x9, 0x862, 0x3660, 0x9, 0x1, 0x80000001, 0x7f, 0x6, 0x1, 0x3, 0x6, 0x4, 0x0, 0xffff8001, 0x4, 0x4, 0x8000, 0x3, 0x1, 0x3, 0xb, 0xfffffbc9, 0xb3a4, 0x3, 0x6, 0x6, 0xfffffffa, 0x8, 0x6, 0x4, 0x10000, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x8, 0x7fffffff, 0x0, 0x6, 0x8, 0x8, 0x6, 0xa413, 0x4, 0x7fffffff, 0x3, 0xe65, 0x0, 0x6, 0x2cf5a220, 0x3ee, 0x6, 0x7, 0xffffffff, 0x2, 0x8, 0x1, 0x6, 0x8, 0xbc1, 0x1000, 0x5f, 0x4, 0x3, 0x3, 0x7fffffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x6, 0x6, 0x1, 0x1, 0xa, 0x1, 0x6, 0x8, 0x6, 0x3, 0x9, 0xff, 0xffff5079, 0x5, 0x6, 0xfff, 0x644, 0xa5e, 0x5, 0x1, 0x7, 0x8, 0x3, 0x100, 0x1, 0x7fff, 0x6b, 0x2, 0x51, 0x2, 0x7eac, 0x3, 0x3ff, 0x9, 0x87fc, 0xb607, 0x2, 0x6, 0x7, 0x800, 0x6, 0x0, 0x49ad, 0x80000000, 0xfffffffb, 0x8, 0x23ceecd4, 0x4, 0xffff8001, 0x8, 0x83, 0x5f, 0x7ff, 0x3, 0xfffffffe, 0x800, 0x2, 0xd, 0x5, 0x4, 0x9, 0x67, 0x0, 0x2, 0x3, 0x2, 0x1, 0x2, 0xf, 0x7, 0x1, 0x4, 0x800, 0xfffffff8, 0x1, 0x3, 0x1, 0x3, 0x4, 0x1, 0x2, 0x100, 0xfffffff4, 0x1, 0x4, 0xff, 0xc, 0x5, 0x0, 0x3, 0x4, 0x1, 0x139e, 0x80000000, 0x2, 0x1, 0x80000001, 0x7, 0x9, 0x5, 0x8, 0x20, 0x9, 0x8, 0xa0d8, 0x3, 0xc, 0xfffffff9, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x5, 0x7, 0x4, 0x8, 0xb30b, 0x4, 0x6, 0x6, 0x8, 0x2, 0x2, 0x10, 0x49c0f593, 0x2, 0x3, 0x100, 0x7, 0x2, 0xfe, 0x8, 0x2, 0x21, 0x1, 0x5dab420a, 0x0, 0x8, 0x4251, 0x401, 0xfffeffff, 0x4, 0xbd9, 0x10001, 0x2, 0x8, 0x100, 0x7f, 0x2, 0x3, 0x7, 0x1, 0xffffffff, 0x5, 0x5, 0x9, 0x6, 0x2, 0x8, 0x63, 0x2a, 0x3, 0xb, 0x101, 0x2, 0x3, 0x89, 0x7, 0x7ff, 0x7ff, 0x406, 0xd, 0x1000, 0x3, 0xf8ec, 0x8, 0x800, 0x8, 0x0, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x4, 0x6e, 0x1, 0x9, 0x5, 0x9, 0xfffffffa, 0x3, 0x2, 0xc64, 0x10000, 0x3cea, 0x1000, 0x6, 0x3, 0xe, 0x8001, 0x6, 0x10, 0x80, 0x40, 0x200, 0x3, 0x75ed7b52, 0x5, 0x2851, 0x5, 0xd, 0xffffc000, 0x2, 0xbd90, 0xc, 0xd, 0x1ff, 0x1, 0x3, 0x4, 0x7b2, 0x100, 0x0, 0x589, 0x7, 0x3, 0x0, 0xe9, 0x1, 0xffff24af, 0x4bb, 0xa486, 0x5, 0x3, 0x6, 0x0, 0x2, 0x3, 0x0, 0x7, 0xe2c, 0x4, 0x0, 0xfffffffe, 0x1, 0x4, 0x0, 0xc9c, 0x3, 0x9, 0x5, 0x0, 0x6, 0x9, 0xc, 0x5, 0x2, 0x7, 0x8, 0x8fb4, 0x534, 0xfffffffe, 0x8, 0x8, 0x4, 0xfffffff2, 0x8, 0x5d, 0xce, 0x9, 0xc000000, 0x0, 0x1e284925, 0xb6, 0x39, 0x1, 0x7, 0x2, 0x1ff, 0x9c9, 0x9, 0xffffffff, 0x1, 0x8000, 0x91, 0x4, 0x4bd50707, 0x10, 0x3b, 0x10000, 0x8001, 0x80000000, 0x1, 0x6, 0x4, 0xe2, 0x66, 0x101, 0xb4, 0x1, 0x100, 0x7f, 0x4, 0xffff6d4f, 0xbc98, 0x3, 0xffff, 0x9d, 0xfffffff9, 0x5, 0x1, 0x75c, 0xc1, 0x7, 0x7, 0x947, 0x72a, 0x4, 0x9, 0x4, 0x5, 0x7, 0x6, 0x81, 0x365d730, 0x800, 0x942, 0x7, 0x10, 0x1, 0x2, 0x4, 0x1, 0x9, 0x5, 0x0, 0x6, 0x3, 0x1, 0x3, 0x8, 0x9, 0xffffffff, 0x9, 0xff, 0x9, 0x8, 0xe, 0x80, 0x8e84, 0x2, 0x1, 0x3, 0x24, 0x3, 0xcd8, 0x7, 0xceab, 0x401, 0x6, 0x0, 0x6, 0x7, 0x2219, 0x4, 0x2, 0x2, 0x80000000, 0x0, 0x5, 0x9, 0x9, 0x80000, 0x800, 0x10, 0x2084, 0x80000000, 0xb, 0x8, 0xe, 0x1, 0x8, 0x2, 0x4c, 0x1c4d06d7, 0x1, 0x0, 0x8, 0x700, 0x0, 0x35, 0x6, 0xfffffffc, 0x0, 0x5, 0x81, 0x4, 0x6, 0x81, 0x2, 0x4, 0x1, 0x5, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4cfe, 0x8d3, 0x4, 0x9, 0x9, 0x7ff, 0xfffffffa, 0x7, 0xc, 0x8, 0xc2ca, 0x6, 0x0, 0x7, 0xe6bc, 0x7ff, 0x8, 0xfffffffa, 0x1, 0xb1c, 0x5, 0x5, 0x7, 0x6, 0x1, 0x8, 0x10001, 0x5, 0x6, 0x100, 0x7f908c6c, 0x40, 0x6, 0xc, 0x4, 0x3, 0x5, 0x6, 0x4, 0x4, 0xffffffff, 0x11, 0x7, 0x9, 0xc, 0x8, 0x100, 0x3, 0x2, 0x8, 0x6, 0x7d, 0x1ff, 0xf86, 0x2, 0x6, 0xc, 0x8000, 0x0, 0x8, 0x9, 0x2, 0x7, 0x8, 0x7fffffff, 0x6, 0x4, 0x6, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x2, 0x3ff, 0x8000, 0x3, 0x9, 0x7ff, 0x7, 0xfffffffb, 0x2, 0x7f, 0x4, 0x83, 0x2, 0x5, 0x400, 0x8, 0x7, 0x0, 0xa0, 0x8000, 0x9, 0x3bb, 0x6, 0x5, 0x1, 0x6, 0x7, 0x0, 0xfa4, 0x4b, 0x5, 0x6, 0x1ff, 0x8, 0xb2a, 0x7, 0xffff3c13, 0x6, 0x2, 0xb9e, 0x0, 0x6]}) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000001c0)=0xc, 0x4) 1m6.16449904s ago: executing program 5 (id=2035): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 0s ago: executing program 33 (id=2030): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808002100000000000000080001fe9300100000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d000100000000090400050503000d0009210002080122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) listxattr(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setresuid(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff89}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000008c0)=0x3ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x8) io_uring_setup(0xd06, &(0x7f0000000600)={0x0, 0x1f04, 0x10, 0x0, 0xb6}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000740)={0x9, 0x0, [{0x8080000, 0xef, &(0x7f0000000080)=""/239}, {0xeeef0000, 0xd9, &(0x7f00000002c0)=""/217}, {0x2, 0x3d, &(0x7f0000000180)=""/61}, {0xf000, 0x71, &(0x7f00000001c0)=""/113}, {0x80a0000, 0x8a, &(0x7f00000003c0)=""/138}, {0x1, 0x96, &(0x7f0000000480)=""/150}, {0xeeef0000, 0x9c, &(0x7f0000000580)=""/156}, {0x4000, 0xa5, &(0x7f0000000640)=""/165}, {0x8000000, 0x38, &(0x7f0000000700)=""/56}]}) kernel console output (not intermixed with test programs): ite+0x10/0x10 [ 607.841376][T12195] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 607.841400][T12195] vfs_write+0x2bc/0xd10 [ 607.841430][T12195] ? fdget_pos+0x247/0x310 [ 607.841460][T12195] ? __pfx_vfs_write+0x10/0x10 [ 607.841487][T12195] ? __fget_files+0x2a/0x420 [ 607.841508][T12195] ? __fget_files+0x39d/0x420 [ 607.841525][T12195] ? __fget_files+0x2a/0x420 [ 607.841555][T12195] ksys_write+0x19d/0x2d0 [ 607.841581][T12195] ? __pfx_ksys_write+0x10/0x10 [ 607.841612][T12195] ? do_syscall_64+0xb6/0x230 [ 607.841647][T12195] do_syscall_64+0xf3/0x230 [ 607.841673][T12195] ? clear_bhb_loop+0x45/0xa0 [ 607.841699][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.841719][T12195] RIP: 0033:0x7f544978bc1f [ 607.841742][T12195] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 607.841760][T12195] RSP: 002b:00007f544a60f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 607.841782][T12195] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f544978bc1f [ 607.841797][T12195] RDX: 0000000000000001 RSI: 00007f544a60f0a0 RDI: 0000000000000004 [ 607.841810][T12195] RBP: 00007f544a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 607.841824][T12195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 607.841837][T12195] R13: 0000000000000000 R14: 00007f54499a5fa0 R15: 00007f5449acfa28 [ 607.841870][T12195] [ 608.067297][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.073613][T11931] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 608.287136][T11931] usb 6-1: no configurations [ 608.292982][T11931] usb 6-1: can't read configurations, error -22 [ 608.344099][T11931] usb usb6-port1: attempt power cycle [ 608.763753][T11931] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 608.786336][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 609.025673][T11931] usb 6-1: no configurations [ 609.237235][T11931] usb 6-1: can't read configurations, error -22 [ 609.376235][T11931] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 609.406364][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 609.412897][T11931] usb 6-1: no configurations [ 609.418323][T11931] usb 6-1: can't read configurations, error -22 [ 609.445479][T11931] usb usb6-port1: unable to enumerate USB device [ 609.487465][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 609.516200][ T976] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 609.525868][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.697919][ T976] usb 2-1: Product: syz [ 609.707831][ T976] usb 2-1: Manufacturer: syz [ 609.719311][ T976] usb 2-1: SerialNumber: syz [ 609.745416][ T976] usb 2-1: config 0 descriptor?? [ 609.763763][ T976] hub 2-1:0.0: bad descriptor, ignoring hub [ 609.778895][ T976] hub 2-1:0.0: probe with driver hub failed with error -5 [ 609.801585][ T976] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.994092][ T9] usb 2-1: USB disconnect, device number 9 [ 610.317003][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.366469][ T976] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 610.548171][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 610.564197][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.575754][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.662207][ T976] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 610.689364][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.732081][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1750'. [ 611.075504][ T976] usb 6-1: config 0 descriptor?? [ 611.185800][T12237] FAULT_INJECTION: forcing a failure. [ 611.185800][T12237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.208959][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz.0.1753 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 611.208991][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.209006][T12237] Call Trace: [ 611.209016][T12237] [ 611.209024][T12237] dump_stack_lvl+0x241/0x360 [ 611.209060][T12237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.209100][T12237] ? __pfx__printk+0x10/0x10 [ 611.209139][T12237] should_fail_ex+0x424/0x570 [ 611.209163][T12237] _copy_to_user+0x31/0xb0 [ 611.209201][T12237] simple_read_from_buffer+0xc4/0x170 [ 611.209234][T12237] proc_fail_nth_read+0x1ef/0x260 [ 611.209259][T12237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.209283][T12237] ? rw_verify_area+0x246/0x630 [ 611.209304][T12237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.209326][T12237] vfs_read+0x21f/0xb90 [ 611.209353][T12237] ? __pfx___mutex_lock+0x10/0x10 [ 611.209379][T12237] ? __pfx_vfs_read+0x10/0x10 [ 611.209404][T12237] ? __fget_files+0x2a/0x420 [ 611.209424][T12237] ? __fget_files+0x39d/0x420 [ 611.209441][T12237] ? __fget_files+0x2a/0x420 [ 611.209468][T12237] ksys_read+0x19d/0x2d0 [ 611.209492][T12237] ? __pfx_ksys_read+0x10/0x10 [ 611.209520][T12237] ? do_syscall_64+0xb6/0x230 [ 611.209548][T12237] do_syscall_64+0xf3/0x230 [ 611.209573][T12237] ? clear_bhb_loop+0x45/0xa0 [ 611.209597][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.209617][T12237] RIP: 0033:0x7f710ed8bb7c [ 611.209637][T12237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.209654][T12237] RSP: 002b:00007f710fc71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.209675][T12237] RAX: ffffffffffffffda RBX: 00007f710efa5fa0 RCX: 00007f710ed8bb7c [ 611.209689][T12237] RDX: 000000000000000f RSI: 00007f710fc710a0 RDI: 0000000000000004 [ 611.209702][T12237] RBP: 00007f710fc71090 R08: 0000000000000000 R09: 0000000000000000 [ 611.209714][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.209726][T12237] R13: 0000000000000000 R14: 00007f710efa5fa0 R15: 00007f710f0cfa28 [ 611.209756][T12237] [ 611.696307][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 611.759214][ T976] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.003E/input/input82 [ 611.788727][ T976] sony 0003:054C:03D5.003E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 611.840354][ T976] usb 6-1: USB disconnect, device number 47 [ 611.856390][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 611.863877][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 611.995118][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 612.007715][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.015771][ T9] usb 2-1: Product: syz [ 612.020393][ T9] usb 2-1: Manufacturer: syz [ 612.025030][ T9] usb 2-1: SerialNumber: syz [ 612.034186][ T9] usb 2-1: config 0 descriptor?? [ 612.043985][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 612.533512][T12249] loop9: detected capacity change from 0 to 7 [ 612.568061][T12249] buffer_io_error: 4 callbacks suppressed [ 612.568088][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.616303][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.633753][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.650178][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.674048][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.703512][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.734092][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.787622][T12249] ldm_validate_partition_table(): Disk read failed. [ 612.859912][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.896380][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.909995][T12249] Buffer I/O error on dev loop9, logical block 0, async page read [ 612.929407][T12249] Dev loop9: unable to read RDB block 0 [ 612.935445][T12249] loop9: unable to read partition table [ 612.951645][T12249] loop9: partition table beyond EOD, truncated [ 612.962998][T12249] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 613.770983][T12269] usb usb8: usbfs: process 12269 (syz.5.1761) did not claim interface 0 before use [ 615.025185][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 615.226317][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 615.243433][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 615.406150][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 615.436761][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 615.453968][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.469733][ T10] usb 1-1: Product: syz [ 615.479992][ T10] usb 1-1: Manufacturer: syz [ 615.494128][ T10] usb 1-1: SerialNumber: syz [ 615.518412][ T10] usb 1-1: config 0 descriptor?? [ 615.578423][ T9] gspca_zc3xx: reg_r err -71 [ 615.583248][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 615.619524][ T9] usb 2-1: USB disconnect, device number 10 [ 615.637489][T12283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 615.658500][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 615.698193][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 615.739419][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 615.978812][T11931] usb 1-1: USB disconnect, device number 111 [ 616.386184][ T976] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 616.438105][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 616.531062][ T976] usb 4-1: device descriptor read/64, error -71 [ 616.557317][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 616.579110][ T5898] IPVS: starting estimator thread 0... [ 616.610387][T12313] xt_hashlimit: size too large, truncated to 1048576 [ 616.622302][T12313] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 616.694264][T12315] IPVS: using max 37 ests per chain, 88800 per kthread [ 616.719404][ T10] usb 2-1: config 0 has no interfaces? [ 616.745434][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 616.786208][ T976] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 616.800904][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.843420][ T10] usb 2-1: Product: syz [ 616.875487][ T10] usb 2-1: Manufacturer: syz [ 616.946145][ T976] usb 4-1: device descriptor read/64, error -71 [ 617.106899][ T976] usb usb4-port1: attempt power cycle [ 617.210876][ T10] usb 2-1: SerialNumber: syz [ 617.249615][ T10] usb 2-1: config 0 descriptor?? [ 617.446900][ T976] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 617.469622][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.471794][ T976] usb 4-1: device descriptor read/8, error -71 [ 617.484772][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.960958][ T976] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 617.990619][ T976] usb 4-1: device descriptor read/8, error -71 [ 618.107517][ T976] usb usb4-port1: unable to enumerate USB device [ 619.262453][ T976] usb 2-1: USB disconnect, device number 11 [ 619.499566][T11931] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 619.698559][T11931] usb 1-1: config 0 has no interfaces? [ 619.716663][T11931] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 619.728608][T11931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.739075][T11931] usb 1-1: Product: syz [ 619.743302][T11931] usb 1-1: Manufacturer: syz [ 620.166069][T11931] usb 1-1: SerialNumber: syz [ 620.649446][T11931] usb 1-1: config 0 descriptor?? [ 620.818261][ T30] audit: type=1326 audit(1744521281.761:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 620.878485][ T30] audit: type=1326 audit(1744521281.761:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 621.216235][ T30] audit: type=1326 audit(1744521281.761:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 621.797250][ T30] audit: type=1326 audit(1744521281.761:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 622.007834][ T30] audit: type=1326 audit(1744521281.761:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 622.160416][ T30] audit: type=1326 audit(1744521281.761:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 622.756322][ T30] audit: type=1326 audit(1744521281.761:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 622.950106][ T30] audit: type=1326 audit(1744521281.761:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 623.113996][ T30] audit: type=1326 audit(1744521281.761:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 623.432522][ T30] audit: type=1326 audit(1744521281.761:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544978d169 code=0x7ffc0000 [ 623.843953][ T10] usb 1-1: USB disconnect, device number 112 [ 624.367167][T12382] FAULT_INJECTION: forcing a failure. [ 624.367167][T12382] name failslab, interval 1, probability 0, space 0, times 0 [ 624.386106][T12382] CPU: 1 UID: 0 PID: 12382 Comm: syz.4.1794 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 624.386137][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 624.386151][T12382] Call Trace: [ 624.386160][T12382] [ 624.386169][T12382] dump_stack_lvl+0x241/0x360 [ 624.386208][T12382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.386239][T12382] ? __pfx__printk+0x10/0x10 [ 624.386273][T12382] ? __pfx___might_resched+0x10/0x10 [ 624.386301][T12382] should_fail_ex+0x424/0x570 [ 624.386321][T12382] should_failslab+0xac/0x100 [ 624.386343][T12382] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 624.386366][T12382] ? __alloc_skb+0x1c2/0x480 [ 624.386389][T12382] __alloc_skb+0x1c2/0x480 [ 624.386408][T12382] ? __pfx___alloc_skb+0x10/0x10 [ 624.386424][T12382] ? netlink_autobind+0xd6/0x2f0 [ 624.386446][T12382] ? netlink_autobind+0x2b0/0x2f0 [ 624.386472][T12382] netlink_sendmsg+0x638/0xcd0 [ 624.386503][T12382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.386528][T12382] ? aa_sock_msg_perm+0x91/0x160 [ 624.386554][T12382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.386574][T12382] __sock_sendmsg+0x221/0x270 [ 624.386597][T12382] ____sys_sendmsg+0x523/0x860 [ 624.386620][T12382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.386635][T12382] ? __fget_files+0x2a/0x420 [ 624.386651][T12382] ? __fget_files+0x2a/0x420 [ 624.386671][T12382] __sys_sendmsg+0x271/0x360 [ 624.386691][T12382] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.386757][T12382] ? do_syscall_64+0xb6/0x230 [ 624.386779][T12382] do_syscall_64+0xf3/0x230 [ 624.386797][T12382] ? clear_bhb_loop+0x45/0xa0 [ 624.386814][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.386828][T12382] RIP: 0033:0x7f559338d169 [ 624.386861][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.386874][T12382] RSP: 002b:00007f55911f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.386891][T12382] RAX: ffffffffffffffda RBX: 00007f55935a5fa0 RCX: 00007f559338d169 [ 624.386902][T12382] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 624.386912][T12382] RBP: 00007f55911f6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.386922][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.386931][T12382] R13: 0000000000000000 R14: 00007f55935a5fa0 R15: 00007f55936cfa28 [ 624.386953][T12382] [ 624.635505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.644633][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.047152][T12392] netlink: 'syz.4.1796': attribute type 5 has an invalid length. [ 625.099291][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1796'. [ 625.455996][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 626.386186][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 626.536374][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 626.547995][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 626.578117][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 626.592615][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.647104][ T10] usb 5-1: Product: syz [ 626.663327][ T10] usb 5-1: Manufacturer: syz [ 626.684683][ T10] usb 5-1: SerialNumber: syz [ 626.712448][ T10] usb 5-1: config 0 descriptor?? [ 626.729446][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 626.909866][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'. [ 626.938310][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.947493][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.546269][ T120] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 627.802040][ T120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.822524][ T120] usb 4-1: config 0 has no interfaces? [ 627.852842][ T120] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.053902][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.074880][ T120] usb 4-1: config 0 descriptor?? [ 628.084245][T12436] loop9: detected capacity change from 0 to 7 [ 628.094968][T12436] buffer_io_error: 4 callbacks suppressed [ 628.095013][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.112408][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.122525][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.132105][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.142645][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.151868][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.162371][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.190191][T12436] ldm_validate_partition_table(): Disk read failed. [ 628.226959][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.240415][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.264692][T12436] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.289262][T12436] Dev loop9: unable to read RDB block 0 [ 628.311895][T12436] loop9: unable to read partition table [ 628.336986][T12436] loop9: partition table beyond EOD, truncated [ 628.435037][T12436] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 629.508286][ T10] gspca_zc3xx: i2c_r status error 4e [ 629.681690][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1815'. [ 629.874675][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 629.874696][ T30] audit: type=1400 audit(1744521290.821:419): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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gspca_zc3xx: reg_r err -71 [ 630.085495][T12459] FAULT_INJECTION: forcing a failure. [ 630.085495][T12459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.122455][ T10] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 630.142027][ T10] usb 5-1: USB disconnect, device number 125 [ 630.148213][T12459] CPU: 0 UID: 0 PID: 12459 Comm: syz.5.1818 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 630.148240][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.148253][T12459] Call Trace: [ 630.148262][T12459] [ 630.148270][T12459] dump_stack_lvl+0x241/0x360 [ 630.148306][T12459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.148335][T12459] ? __pfx__printk+0x10/0x10 [ 630.148375][T12459] should_fail_ex+0x424/0x570 [ 630.148401][T12459] _copy_from_user+0x2d/0xb0 [ 630.148432][T12459] copy_msghdr_from_user+0xb3/0x580 [ 630.148467][T12459] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 630.148494][T12459] ? __fget_files+0x2a/0x420 [ 630.148517][T12459] ? __fget_files+0x2a/0x420 [ 630.148545][T12459] __sys_sendmsg+0x20a/0x360 [ 630.148573][T12459] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.148646][T12459] ? do_syscall_64+0xb6/0x230 [ 630.148677][T12459] do_syscall_64+0xf3/0x230 [ 630.148711][T12459] ? clear_bhb_loop+0x45/0xa0 [ 630.148736][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.148757][T12459] RIP: 0033:0x7f726bd8d169 [ 630.148776][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.148795][T12459] RSP: 002b:00007f726cc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.148817][T12459] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8d169 [ 630.148833][T12459] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 630.148847][T12459] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 630.148860][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.148873][T12459] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 630.148904][T12459] [ 630.521449][ T5898] usb 4-1: USB disconnect, device number 113 [ 630.706277][ T120] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 630.869309][ T120] usb 2-1: not running at top speed; connect to a high speed hub [ 630.937945][ T120] usb 2-1: config 1 interface 0 altsetting 171 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.971671][ T120] usb 2-1: config 1 interface 0 altsetting 171 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.032295][ T120] usb 2-1: config 1 interface 0 altsetting 171 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.133351][ T120] usb 2-1: config 1 interface 0 has no altsetting 0 [ 631.149569][ T120] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 631.159216][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.168592][ T120] usb 2-1: Product: à°Œ [ 631.175106][ T120] usb 2-1: Manufacturer: 퀸蘤ã«â¶Žïˆì™¥â–·â‚¯é¡•ç ¤ç¬®ç©¥è•Ÿæº®ë°›àµ±é¿˜â¯¹ê½ŽãŒ’᧟⽜淥峣啙혈绸㳯ꗑꚼ亦å½ã³î³ªè™ ï¯²è ‡ä¾ è‰ƒì¼’뙃솭⮅맃废躋ㄸ䬇ൊᎿꥄ嶧若꿣ì´è‹¥ê·žê¾€ä¶£ä´ä‘Šá–¡îž˜ê¹§æ¤·á´‰å””摧巈è«â„ ãˆ£í’딜浟犚ﱜ [ 631.331414][ T120] usb 2-1: SerialNumber: syz [ 631.341919][T12461] program syz.0.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.685488][ T120] usbhid 2-1:1.0: can't add hid device: -71 [ 631.693915][ T120] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 631.704332][ T120] usb 2-1: USB disconnect, device number 12 [ 632.166968][ T7107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 632.296265][T12487] loop9: detected capacity change from 0 to 7 [ 632.318500][T12487] ldm_validate_partition_table(): Disk read failed. [ 632.372680][T12487] Dev loop9: unable to read RDB block 0 [ 632.430446][T12487] loop9: unable to read partition table [ 632.456339][T12487] loop9: partition table beyond EOD, truncated [ 632.496224][T12487] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 633.216433][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 633.578212][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 633.610066][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 633.643790][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.654233][ T5898] usb 2-1: Product: syz [ 633.662092][ T5898] usb 2-1: Manufacturer: syz [ 633.670845][ T5898] usb 2-1: SerialNumber: syz [ 633.807003][ T5898] usb 2-1: config 0 descriptor?? [ 633.967593][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 634.019373][ T5898] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 634.412883][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.627384][ T10] usb 4-1: config 0 has no interfaces? [ 634.633510][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 634.643820][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.662519][ T976] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 634.722576][ T10] usb 4-1: config 0 descriptor?? [ 634.876270][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 634.887056][ T976] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 635.025947][ T976] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 635.164467][ T976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.197595][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.776708][ T976] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 635.916342][ T976] usb 1-1: device descriptor read/64, error -71 [ 636.036312][T11931] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 636.166506][ T976] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 636.188162][T11931] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 636.197719][T11931] usb 5-1: config 0 has no interface number 0 [ 636.219386][T11931] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 636.253564][ T5898] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 636.278866][T11931] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 636.304048][T11931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.316321][ T976] usb 1-1: device descriptor read/64, error -71 [ 636.330156][T11931] usb 5-1: Product: syz [ 636.340046][T11931] usb 5-1: Manufacturer: syz [ 636.350528][T11931] usb 5-1: SerialNumber: syz [ 636.374590][T11931] usb 5-1: config 0 descriptor?? [ 636.390659][T12532] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 636.413974][T11931] usb-storage 5-1:0.20: USB Mass Storage device detected [ 636.436609][ T976] usb usb1-port1: attempt power cycle [ 636.451445][T11931] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 636.457829][ T10] usb 2-1: USB disconnect, device number 13 [ 636.620254][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.635565][T12532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.646262][T12532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 636.657333][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1840'. [ 636.672295][T11931] usb 5-1: USB disconnect, device number 126 [ 636.786588][ T976] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 636.833780][ T976] usb 1-1: device descriptor read/8, error -71 [ 636.988695][ T10] usb 4-1: USB disconnect, device number 114 [ 637.099033][ T976] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 637.170580][ T976] usb 1-1: device descriptor read/8, error -71 [ 637.415401][ T976] usb usb1-port1: unable to enumerate USB device [ 637.538325][T12545] loop9: detected capacity change from 0 to 7 [ 637.558785][T12545] buffer_io_error: 18 callbacks suppressed [ 637.558800][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.593713][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.612183][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.632283][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.652644][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.673083][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.679720][ T976] usb 6-1: USB disconnect, device number 48 [ 637.692394][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.705246][T12545] ldm_validate_partition_table(): Disk read failed. [ 637.713682][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.721908][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.730323][T12545] Buffer I/O error on dev loop9, logical block 0, async page read [ 637.738805][T12545] Dev loop9: unable to read RDB block 0 [ 637.744700][T12545] loop9: unable to read partition table [ 637.774948][T12545] loop9: partition table beyond EOD, truncated [ 637.789166][T12545] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 639.336600][T11931] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 639.506244][T11931] usb 6-1: Using ep0 maxpacket: 8 [ 639.513605][T11931] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.575787][T11931] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.608813][T11931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 639.615522][T11931] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 639.684944][T11931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.720596][T11931] usb 6-1: config 0 descriptor?? [ 639.950081][T12570] loop2: detected capacity change from 0 to 7 [ 639.967279][T12570] Dev loop2: unable to read RDB block 7 [ 639.985694][T12570] loop2: unable to read partition table [ 640.026614][T12570] loop2: partition table beyond EOD, truncated [ 640.083597][T12570] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 640.241187][T11931] smartjoyplus 0003:0B43:0003.003F: ignoring exceeding usage max [ 640.287083][T11931] smartjoyplus 0003:0B43:0003.003F: unbalanced collection at end of report description [ 640.327291][T11931] smartjoyplus 0003:0B43:0003.003F: parse failed [ 640.373151][T11931] smartjoyplus 0003:0B43:0003.003F: probe with driver smartjoyplus failed with error -22 [ 640.760967][T12599] loop9: detected capacity change from 0 to 7 [ 640.762009][T12599] ldm_validate_partition_table(): Disk read failed. [ 640.762348][T12599] Dev loop9: unable to read RDB block 0 [ 640.762618][T12599] loop9: unable to read partition table [ 640.762836][T12599] loop9: partition table beyond EOD, truncated [ 640.762860][T12599] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 640.919056][T11931] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 641.088593][T11931] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 641.088632][T11931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.088669][T11931] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 641.088694][T11931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.093064][T11931] usb 5-1: config 0 descriptor?? [ 641.093795][T12595] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 641.378969][ T976] usb 6-1: USB disconnect, device number 49 [ 641.512221][T11931] kye 0003:0458:5014.0040: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 641.517127][T11931] kye 0003:0458:5014.0040: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 641.517165][T11931] kye 0003:0458:5014.0040: tablet-enabling feature report not found [ 641.517183][T11931] kye 0003:0458:5014.0040: tablet enabling failed [ 641.562314][T12614] FAULT_INJECTION: forcing a failure. [ 641.562314][T12614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.562353][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.5.1868 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 641.562379][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 641.562393][T12614] Call Trace: [ 641.562402][T12614] [ 641.562411][T12614] dump_stack_lvl+0x241/0x360 [ 641.562450][T12614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.562482][T12614] ? __pfx__printk+0x10/0x10 [ 641.562526][T12614] should_fail_ex+0x424/0x570 [ 641.562556][T12614] _copy_from_iter+0x211/0x1c70 [ 641.562592][T12614] ? __build_skb_around+0x247/0x3d0 [ 641.562619][T12614] ? __alloc_skb+0x298/0x480 [ 641.562639][T12614] ? __pfx__copy_from_iter+0x10/0x10 [ 641.562671][T12614] ? __pfx___alloc_skb+0x10/0x10 [ 641.562696][T12614] ? skb_put+0x114/0x1f0 [ 641.562734][T12614] netlink_sendmsg+0x73c/0xcd0 [ 641.562780][T12614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.562817][T12614] ? aa_sock_msg_perm+0x91/0x160 [ 641.562855][T12614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.562885][T12614] __sock_sendmsg+0x221/0x270 [ 641.562918][T12614] ____sys_sendmsg+0x523/0x860 [ 641.562952][T12614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.562975][T12614] ? __fget_files+0x2a/0x420 [ 641.562998][T12614] ? __fget_files+0x2a/0x420 [ 641.563029][T12614] __sys_sendmsg+0x271/0x360 [ 641.563059][T12614] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.563140][T12614] ? do_syscall_64+0xb6/0x230 [ 641.563172][T12614] do_syscall_64+0xf3/0x230 [ 641.563200][T12614] ? clear_bhb_loop+0x45/0xa0 [ 641.563226][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.563248][T12614] RIP: 0033:0x7f726bd8d169 [ 641.563267][T12614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.563286][T12614] RSP: 002b:00007f726cc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.563309][T12614] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8d169 [ 641.563324][T12614] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 641.563338][T12614] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 641.563351][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.563364][T12614] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 641.563397][T12614] [ 641.717356][T11931] usb 5-1: USB disconnect, device number 127 [ 642.546246][T11931] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 642.714805][T11931] usb 6-1: Using ep0 maxpacket: 32 [ 642.717072][T11931] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 642.717093][T11931] usb 6-1: config 0 has no interface number 0 [ 642.717125][T11931] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 642.717145][T11931] usb 6-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 642.718982][T11931] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 642.719004][T11931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.719019][T11931] usb 6-1: Product: syz [ 642.719043][T11931] usb 6-1: Manufacturer: syz [ 642.719054][T11931] usb 6-1: SerialNumber: syz [ 642.720873][T11931] usb 6-1: config 0 descriptor?? [ 642.722538][T12616] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 642.724088][T11931] smsc95xx v2.0.0 [ 642.927645][T12616] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.137925][T11931] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 643.137963][T11931] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 643.295382][T12629] kvm: pic: non byte write [ 643.338465][T11931] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 643.338665][T11931] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 643.347083][T11931] usb 6-1: USB disconnect, device number 50 [ 643.840211][T12642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1877'. [ 644.127709][ T5898] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 644.294047][T12648] loop9: detected capacity change from 0 to 7 [ 644.304174][T12648] buffer_io_error: 18 callbacks suppressed [ 644.304194][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.324740][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.333933][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.342185][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 644.352540][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.364263][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.372706][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.384187][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.622052][ T5898] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 644.639369][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.641311][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 644.661968][ T5898] usb 1-1: config 0 descriptor?? [ 644.728074][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 645.064316][T12648] ldm_validate_partition_table(): Disk read failed. [ 645.071858][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 645.079926][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 645.088381][T12648] Buffer I/O error on dev loop9, logical block 0, async page read [ 645.096492][T12648] Dev loop9: unable to read RDB block 0 [ 645.102497][T12648] loop9: unable to read partition table [ 645.108638][T12648] loop9: partition table beyond EOD, truncated [ 645.116388][T12648] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 645.592833][ T5898] ft260 0003:0403:6030.0041: item fetching failed at offset 1/2 [ 645.653993][ T5898] ft260 0003:0403:6030.0041: failed to parse HID [ 645.676678][T12658] FAULT_INJECTION: forcing a failure. [ 645.676678][T12658] name failslab, interval 1, probability 0, space 0, times 0 [ 645.711153][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1884'. [ 645.763180][T12658] CPU: 0 UID: 0 PID: 12658 Comm: syz.1.1883 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 645.763211][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 645.763225][T12658] Call Trace: [ 645.763234][T12658] [ 645.763243][T12658] dump_stack_lvl+0x241/0x360 [ 645.763281][T12658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.763312][T12658] ? __pfx__printk+0x10/0x10 [ 645.763345][T12658] ? __pfx___might_resched+0x10/0x10 [ 645.763376][T12658] should_fail_ex+0x424/0x570 [ 645.763410][T12658] should_failslab+0xac/0x100 [ 645.763440][T12658] kmem_cache_alloc_noprof+0x78/0x390 [ 645.763469][T12658] ? skb_clone+0x20c/0x390 [ 645.763498][T12658] skb_clone+0x20c/0x390 [ 645.763525][T12658] nfnetlink_rcv+0x52b/0x28f0 [ 645.763547][T12658] ? __kernel_text_address+0xd/0x40 [ 645.763569][T12658] ? arch_stack_walk+0xff/0x150 [ 645.763610][T12658] ? stack_trace_save+0x11a/0x1d0 [ 645.763643][T12658] ? __pfx_stack_trace_save+0x10/0x10 [ 645.763686][T12658] ? stack_depot_save_flags+0x44/0x940 [ 645.763705][T12658] ? stack_trace_snprint+0x31/0xf0 [ 645.763732][T12658] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 645.763769][T12658] ? __lock_acquire+0xad5/0xd80 [ 645.763813][T12658] ? __lock_acquire+0xad5/0xd80 [ 645.763850][T12658] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.763881][T12658] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.763911][T12658] netlink_unicast+0x7f8/0x9a0 [ 645.763944][T12658] ? __pfx_netlink_unicast+0x10/0x10 [ 645.763971][T12658] ? skb_put+0x114/0x1f0 [ 645.763994][T12658] netlink_sendmsg+0x8c3/0xcd0 [ 645.764050][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.764085][T12658] ? aa_sock_msg_perm+0x91/0x160 [ 645.764120][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.764149][T12658] __sock_sendmsg+0x221/0x270 [ 645.764181][T12658] ____sys_sendmsg+0x523/0x860 [ 645.764217][T12658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.764238][T12658] ? __fget_files+0x2a/0x420 [ 645.764261][T12658] ? __fget_files+0x2a/0x420 [ 645.764289][T12658] __sys_sendmsg+0x271/0x360 [ 645.764318][T12658] ? __pfx___sys_sendmsg+0x10/0x10 [ 645.764404][T12658] ? do_syscall_64+0xb6/0x230 [ 645.764434][T12658] do_syscall_64+0xf3/0x230 [ 645.764460][T12658] ? clear_bhb_loop+0x45/0xa0 [ 645.764483][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.764503][T12658] RIP: 0033:0x7f544978d169 [ 645.764521][T12658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.764538][T12658] RSP: 002b:00007f544a60f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.764560][T12658] RAX: ffffffffffffffda RBX: 00007f54499a5fa0 RCX: 00007f544978d169 [ 645.764575][T12658] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 645.764589][T12658] RBP: 00007f544a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 645.764601][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.764614][T12658] R13: 0000000000000000 R14: 00007f54499a5fa0 R15: 00007f5449acfa28 [ 645.764645][T12658] [ 646.172136][ T5898] ft260 0003:0403:6030.0041: probe with driver ft260 failed with error -22 [ 646.838538][ T10] usb 1-1: USB disconnect, device number 117 [ 648.133613][T12693] loop9: detected capacity change from 0 to 7 [ 648.154362][T12693] ldm_validate_partition_table(): Disk read failed. [ 648.174281][T12693] Dev loop9: unable to read RDB block 0 [ 648.184059][T12693] loop9: unable to read partition table [ 648.203831][T12693] loop9: partition table beyond EOD, truncated [ 648.214324][T12693] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 648.226712][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 648.226725][T12697] FAULT_INJECTION: forcing a failure. [ 648.226725][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 648.226760][T12697] CPU: 1 UID: 0 PID: 12697 Comm: syz.5.1898 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 648.226784][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 648.226798][T12697] Call Trace: [ 648.226807][T12697] [ 648.226818][T12697] dump_stack_lvl+0x241/0x360 [ 648.226861][T12697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.226895][T12697] ? __pfx__printk+0x10/0x10 [ 648.226931][T12697] ? __pfx___might_resched+0x10/0x10 [ 648.226964][T12697] should_fail_ex+0x424/0x570 [ 648.226994][T12697] should_failslab+0xac/0x100 [ 648.227028][T12697] kmem_cache_alloc_noprof+0x78/0x390 [ 648.227058][T12697] ? skb_clone+0x20c/0x390 [ 648.227091][T12697] skb_clone+0x20c/0x390 [ 648.227121][T12697] nfnetlink_rcv+0x52b/0x28f0 [ 648.227150][T12697] ? __dev_queue_xmit+0x2f9/0x3f60 [ 648.227183][T12697] ? __dev_queue_xmit+0x2f9/0x3f60 [ 648.227208][T12697] ? __dev_queue_xmit+0x2f9/0x3f60 [ 648.227247][T12697] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 648.227271][T12697] ? lockdep_hardirqs_on+0x9d/0x150 [ 648.227299][T12697] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 648.227320][T12697] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 648.227359][T12697] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 648.227402][T12697] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 648.227425][T12697] ? __skb_clone+0x5c/0x6d0 [ 648.227458][T12697] ? rcu_is_watching+0x15/0xb0 [ 648.227489][T12697] ? rcu_read_unlock_special+0x49b/0x570 [ 648.227521][T12697] ? skb_clone+0x240/0x390 [ 648.227545][T12697] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 648.227579][T12697] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.227615][T12697] ? __rcu_read_unlock+0xa1/0x110 [ 648.227639][T12697] netlink_unicast+0x7f8/0x9a0 [ 648.227678][T12697] ? __pfx_netlink_unicast+0x10/0x10 [ 648.227713][T12697] ? skb_put+0x114/0x1f0 [ 648.227741][T12697] netlink_sendmsg+0x8c3/0xcd0 [ 648.227786][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.227824][T12697] ? aa_sock_msg_perm+0x91/0x160 [ 648.227871][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.227900][T12697] __sock_sendmsg+0x221/0x270 [ 648.227931][T12697] ____sys_sendmsg+0x523/0x860 [ 648.227963][T12697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.227983][T12697] ? __fget_files+0x2a/0x420 [ 648.228006][T12697] ? __fget_files+0x2a/0x420 [ 648.228034][T12697] __sys_sendmsg+0x271/0x360 [ 648.228062][T12697] ? __pfx___sys_sendmsg+0x10/0x10 [ 648.228138][T12697] ? do_syscall_64+0xb6/0x230 [ 648.228167][T12697] do_syscall_64+0xf3/0x230 [ 648.228193][T12697] ? clear_bhb_loop+0x45/0xa0 [ 648.228218][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.228239][T12697] RIP: 0033:0x7f726bd8d169 [ 648.228258][T12697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.228276][T12697] RSP: 002b:00007f726cc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.228317][T12697] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8d169 [ 648.228334][T12697] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 648.228349][T12697] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 648.228363][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.228377][T12697] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 648.228410][T12697] [ 648.647189][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1900'. [ 648.726226][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 648.738991][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.751551][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.813476][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.825396][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 648.844677][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 648.854996][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 648.905872][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.944482][ T10] usb 2-1: config 0 descriptor?? [ 649.448465][T12723] FAULT_INJECTION: forcing a failure. [ 649.448465][T12723] name failslab, interval 1, probability 0, space 0, times 0 [ 649.467573][ T5898] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 649.495568][T12723] CPU: 1 UID: 0 PID: 12723 Comm: syz.5.1906 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 649.495602][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.495616][T12723] Call Trace: [ 649.495624][T12723] [ 649.495634][T12723] dump_stack_lvl+0x241/0x360 [ 649.495673][T12723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.495698][T12723] ? __pfx__printk+0x10/0x10 [ 649.495730][T12723] ? __pfx___might_resched+0x10/0x10 [ 649.495766][T12723] should_fail_ex+0x424/0x570 [ 649.495793][T12723] should_failslab+0xac/0x100 [ 649.495825][T12723] __kmalloc_noprof+0xdf/0x4d0 [ 649.495846][T12723] ? nla_strdup+0x9e/0x140 [ 649.495862][T12723] ? __kasan_kmalloc+0x9d/0xb0 [ 649.495890][T12723] nla_strdup+0x9e/0x140 [ 649.495921][T12723] nf_tables_newtable+0x5c0/0x1e80 [ 649.495952][T12723] ? __lock_acquire+0xad5/0xd80 [ 649.495982][T12723] ? __pfx_nf_tables_newtable+0x10/0x10 [ 649.496027][T12723] ? __nla_parse+0x40/0x60 [ 649.496064][T12723] nfnetlink_rcv+0x12eb/0x28f0 [ 649.496124][T12723] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 649.496201][T12723] ? skb_clone+0x240/0x390 [ 649.496240][T12723] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.496275][T12723] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.496309][T12723] netlink_unicast+0x7f8/0x9a0 [ 649.496348][T12723] ? __pfx_netlink_unicast+0x10/0x10 [ 649.496378][T12723] ? skb_put+0x114/0x1f0 [ 649.496404][T12723] netlink_sendmsg+0x8c3/0xcd0 [ 649.496450][T12723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.496499][T12723] ? aa_sock_msg_perm+0x91/0x160 [ 649.496534][T12723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.496581][T12723] __sock_sendmsg+0x221/0x270 [ 649.496614][T12723] ____sys_sendmsg+0x523/0x860 [ 649.496648][T12723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.496679][T12723] ? __fget_files+0x2a/0x420 [ 649.496702][T12723] ? __fget_files+0x2a/0x420 [ 649.496731][T12723] __sys_sendmsg+0x271/0x360 [ 649.496760][T12723] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.496839][T12723] ? do_syscall_64+0xb6/0x230 [ 649.496870][T12723] do_syscall_64+0xf3/0x230 [ 649.496897][T12723] ? clear_bhb_loop+0x45/0xa0 [ 649.496923][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.496944][T12723] RIP: 0033:0x7f726bd8d169 [ 649.496973][T12723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.496990][T12723] RSP: 002b:00007f726cc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.497011][T12723] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8d169 [ 649.497024][T12723] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 649.497037][T12723] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 649.497049][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.497067][T12723] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 649.497114][T12723] [ 649.789548][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 650.041067][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 650.050057][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 650.066173][ T5898] usb 4-1: device descriptor read/64, error -71 [ 650.121347][ T10] usb 2-1: USB disconnect, device number 14 [ 650.316360][ T5898] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 650.404869][T12731] bridge0: port 3(veth0_to_bridge) entered blocking state [ 650.433099][T12731] bridge0: port 3(veth0_to_bridge) entered disabled state [ 650.443384][T12731] veth0_to_bridge: entered allmulticast mode [ 650.457985][ T5898] usb 4-1: device descriptor read/64, error -71 [ 650.478351][T12731] veth0_to_bridge: entered promiscuous mode [ 650.511522][T12731] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.591961][ T5898] usb usb4-port1: attempt power cycle [ 650.607441][T12731] bridge0: port 3(veth0_to_bridge) entered blocking state [ 650.614731][T12731] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 650.976338][ T5898] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 651.001159][ T5898] usb 4-1: device descriptor read/8, error -71 [ 651.276209][ T5898] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 651.296154][T12756] loop9: detected capacity change from 0 to 7 [ 651.302736][T12756] buffer_io_error: 18 callbacks suppressed [ 651.302749][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.309289][ T5898] usb 4-1: device descriptor read/8, error -71 [ 651.341091][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.369835][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.386244][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 651.427023][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.437294][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.453467][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.479069][ T5898] usb usb4-port1: unable to enumerate USB device [ 651.488873][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.507314][T12756] ldm_validate_partition_table(): Disk read failed. [ 651.527109][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.553228][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.573677][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 651.590086][T12756] Dev loop9: unable to read RDB block 0 [ 651.776617][T12756] loop9: unable to read partition table [ 651.782696][T12756] loop9: partition table beyond EOD, truncated [ 651.789562][T12756] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 651.906567][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 651.952417][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 651.989588][ T10] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 652.158104][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.246823][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.298015][T12764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1921'. [ 652.532551][ T976] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 652.769873][T12770] xt_hashlimit: invalid interval [ 652.808216][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.835820][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.889181][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.954496][ T976] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.004815][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.091314][ T976] usb 1-1: config 0 descriptor?? [ 653.395425][ T976] usbhid 1-1:0.0: can't add hid device: -71 [ 653.421035][ T976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 653.849553][ T976] usb 1-1: USB disconnect, device number 118 [ 653.872656][ T5852] udevd[5852]: setting owner of /dev/bus/usb/001/118 to uid=0, gid=0 failed: No such file or directory [ 655.636346][ T10] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 655.649500][ T5898] usb 2-1: USB disconnect, device number 15 [ 655.796331][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 655.805483][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.831913][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.859457][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.890317][ T10] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 655.929221][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.953244][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 655.974290][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.996429][ T10] usb 1-1: config 0 descriptor?? [ 656.918203][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 656.925051][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 657.039811][ T10] usb 1-1: USB disconnect, device number 119 [ 657.577908][T12831] FAULT_INJECTION: forcing a failure. [ 657.577908][T12831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.600896][T12831] CPU: 0 UID: 0 PID: 12831 Comm: syz.5.1941 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 657.600928][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.600942][T12831] Call Trace: [ 657.600951][T12831] [ 657.600961][T12831] dump_stack_lvl+0x241/0x360 [ 657.601001][T12831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.601032][T12831] ? __pfx__printk+0x10/0x10 [ 657.601074][T12831] should_fail_ex+0x424/0x570 [ 657.601103][T12831] _copy_to_user+0x31/0xb0 [ 657.601136][T12831] simple_read_from_buffer+0xc4/0x170 [ 657.601173][T12831] proc_fail_nth_read+0x1ef/0x260 [ 657.601200][T12831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.601226][T12831] ? rw_verify_area+0x246/0x630 [ 657.601250][T12831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.601286][T12831] vfs_read+0x21f/0xb90 [ 657.601314][T12831] ? __pfx___mutex_lock+0x10/0x10 [ 657.601342][T12831] ? __pfx_vfs_read+0x10/0x10 [ 657.601369][T12831] ? __fget_files+0x2a/0x420 [ 657.601390][T12831] ? __fget_files+0x39d/0x420 [ 657.601413][T12831] ? __fget_files+0x2a/0x420 [ 657.601443][T12831] ksys_read+0x19d/0x2d0 [ 657.601468][T12831] ? __pfx_ksys_read+0x10/0x10 [ 657.601499][T12831] ? do_syscall_64+0xb6/0x230 [ 657.601528][T12831] do_syscall_64+0xf3/0x230 [ 657.601554][T12831] ? clear_bhb_loop+0x45/0xa0 [ 657.601578][T12831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.601599][T12831] RIP: 0033:0x7f726bd8bb7c [ 657.601617][T12831] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 657.601636][T12831] RSP: 002b:00007f726cc0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 657.601658][T12831] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8bb7c [ 657.601673][T12831] RDX: 000000000000000f RSI: 00007f726cc0a0a0 RDI: 0000000000000004 [ 657.601687][T12831] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 657.601700][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.601713][T12831] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 657.601745][T12831] [ 657.817566][ T976] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 658.066713][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 658.098398][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 658.109474][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.119301][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 658.130277][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 658.177422][ T976] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 658.187457][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.195955][ T976] usb 4-1: Product: syz [ 658.200432][ T976] usb 4-1: Manufacturer: syz [ 658.206266][ T976] usb 4-1: SerialNumber: syz [ 658.217867][ T976] usb 4-1: config 0 descriptor?? [ 658.240640][ T976] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 658.296430][ T976] cyphidcom ttyUSB0: required endpoint is missing [ 658.316101][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 658.422720][T12837] FAULT_INJECTION: forcing a failure. [ 658.422720][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 658.447208][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.478657][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.5.1943 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 658.478690][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 658.478702][T12837] Call Trace: [ 658.478710][T12837] [ 658.478716][T12837] dump_stack_lvl+0x241/0x360 [ 658.478745][T12837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.478766][T12837] ? __pfx__printk+0x10/0x10 [ 658.478787][T12837] ? __debug_object_init+0x284/0x480 [ 658.478813][T12837] ? __pfx___might_resched+0x10/0x10 [ 658.478834][T12837] should_fail_ex+0x424/0x570 [ 658.478853][T12837] should_failslab+0xac/0x100 [ 658.478875][T12837] __kmalloc_cache_noprof+0x73/0x370 [ 658.478895][T12837] ? nft_trans_table_add+0x57/0x400 [ 658.478913][T12837] nft_trans_table_add+0x57/0x400 [ 658.478933][T12837] nf_tables_newtable+0x1177/0x1e80 [ 658.478965][T12837] ? __pfx_nf_tables_newtable+0x10/0x10 [ 658.478994][T12837] ? __nla_parse+0x40/0x60 [ 658.479015][T12837] nfnetlink_rcv+0x12eb/0x28f0 [ 658.479056][T12837] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 658.479108][T12837] ? skb_clone+0x240/0x390 [ 658.479134][T12837] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.479157][T12837] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.479180][T12837] netlink_unicast+0x7f8/0x9a0 [ 658.479223][T12837] ? __pfx_netlink_unicast+0x10/0x10 [ 658.479245][T12837] ? skb_put+0x114/0x1f0 [ 658.479263][T12837] netlink_sendmsg+0x8c3/0xcd0 [ 658.479294][T12837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.479319][T12837] ? aa_sock_msg_perm+0x91/0x160 [ 658.479347][T12837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.479368][T12837] __sock_sendmsg+0x221/0x270 [ 658.479391][T12837] ____sys_sendmsg+0x523/0x860 [ 658.479415][T12837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.479430][T12837] ? __fget_files+0x2a/0x420 [ 658.479446][T12837] ? __fget_files+0x2a/0x420 [ 658.479467][T12837] __sys_sendmsg+0x271/0x360 [ 658.479487][T12837] ? __pfx___sys_sendmsg+0x10/0x10 [ 658.479543][T12837] ? do_syscall_64+0xb6/0x230 [ 658.479565][T12837] do_syscall_64+0xf3/0x230 [ 658.479592][T12837] ? clear_bhb_loop+0x45/0xa0 [ 658.479610][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.479625][T12837] RIP: 0033:0x7f726bd8d169 [ 658.479639][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.479652][T12837] RSP: 002b:00007f726cc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.479668][T12837] RAX: ffffffffffffffda RBX: 00007f726bfa5fa0 RCX: 00007f726bd8d169 [ 658.479680][T12837] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 658.479690][T12837] RBP: 00007f726cc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 658.479700][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.479711][T12837] R13: 0000000000000000 R14: 00007f726bfa5fa0 R15: 00007f726c0cfa28 [ 658.479740][T12837] [ 658.816318][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 658.827128][ T5898] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 658.835171][ T5898] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 658.837344][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.843336][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.861087][ T5898] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 658.869990][ T5898] usb 2-1: config 0 has no interface number 0 [ 658.876256][ T5898] usb 2-1: config 0 interface 6 has no altsetting 1 [ 658.883274][ T5898] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=2b.ac [ 658.892560][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.907271][ T5898] usb 2-1: config 0 descriptor?? [ 658.960566][ T5898] usb 4-1: USB disconnect, device number 119 [ 658.968634][ T5898] cypress_m8 4-1:0.0: device disconnected [ 659.137921][ T10] usb 2-1: USB disconnect, device number 16 [ 660.286347][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 660.306192][ T976] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 660.456475][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 660.473919][ T976] usb 2-1: device descriptor read/64, error -71 [ 660.490760][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 660.536154][ T10] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 660.561732][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.571598][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.818084][ T976] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 661.076554][ T976] usb 2-1: device descriptor read/64, error -71 [ 661.212994][ T976] usb usb2-port1: attempt power cycle [ 661.556225][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 661.666219][ T976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 661.696848][ T976] usb 2-1: device descriptor read/8, error -71 [ 661.709076][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 661.715650][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.732875][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.772338][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.946487][ T976] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 661.966818][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 661.994861][ T976] usb 2-1: device descriptor read/8, error -71 [ 662.054555][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 662.106374][ T976] usb usb2-port1: unable to enumerate USB device [ 662.224742][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 662.255427][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.267698][ T10] usb 4-1: config 0 descriptor?? [ 662.901962][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 662.962681][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 662.969467][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 663.006487][ T10] usb 4-1: USB disconnect, device number 120 [ 663.221888][T12888] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 663.276154][T12888] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 663.337095][ T10] usb 5-1: USB disconnect, device number 2 [ 663.536831][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.861253][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'. [ 663.938223][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 665.046278][ T5898] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 665.261817][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 665.346206][ T976] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 665.368785][ T5898] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 665.403529][ T5898] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 665.430868][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.466192][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.481032][T12872] syz.0.1947 (12872): drop_caches: 3 [ 665.526881][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 665.541206][ T976] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 665.575812][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.606777][ T976] usb 5-1: config 0 descriptor?? [ 666.146424][ T5898] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 666.266620][T11931] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 666.385449][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 666.434054][ T5898] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 666.442627][ T5898] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 666.454523][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.470904][T11931] usb 4-1: Using ep0 maxpacket: 16 [ 666.482111][T11931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.495749][T11931] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.516662][ T5898] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 666.526508][T11931] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.536898][T11931] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 666.550997][T11931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 666.559375][ T5898] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 666.607412][T12951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1985'. [ 666.739590][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.752951][ T5898] usb 6-1: Product: syz [ 666.766732][ T5898] usb 6-1: Manufacturer: syz [ 666.779040][ T5898] usb 6-1: SerialNumber: syz [ 666.796461][T11931] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 666.866144][ T10] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 666.866261][ T5898] usb 6-1: config 0 descriptor?? [ 666.880276][T11931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.903706][ T5898] hub 6-1:0.0: bad descriptor, ignoring hub [ 666.909829][T11931] usb 4-1: config 0 descriptor?? [ 666.916434][ T5898] hub 6-1:0.0: probe with driver hub failed with error -5 [ 667.028139][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 667.058866][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.096533][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.127311][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 667.128542][T12942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.156446][T12942] dccp_invalid_packet: P.Data Offset(10) too large [ 667.170034][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.216766][ T10] usb 1-1: config 0 descriptor?? [ 667.217675][ T5898] usb 6-1: USB disconnect, device number 51 [ 667.626491][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 667.651529][ T976] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 667.662008][ T976] asix 5-1:0.0: probe with driver asix failed with error -71 [ 667.809898][ T10] ft260 0003:0403:6030.0042: item fetching failed at offset 1/2 [ 667.845292][ T10] ft260 0003:0403:6030.0042: failed to parse HID [ 667.880411][ T10] ft260 0003:0403:6030.0042: probe with driver ft260 failed with error -22 [ 667.925455][T11931] usbhid 4-1:0.0: can't add hid device: -71 [ 667.942191][T11931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 667.980343][ T976] usb 5-1: USB disconnect, device number 3 [ 668.041731][T11931] usb 4-1: USB disconnect, device number 121 [ 668.274563][ T976] usb 2-1: USB disconnect, device number 21 [ 669.919757][ T10] usb 1-1: USB disconnect, device number 120 [ 671.045971][T12985] loop9: detected capacity change from 0 to 7 [ 671.096586][T12985] buffer_io_error: 4 callbacks suppressed [ 671.096608][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.166750][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.188763][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.197313][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.205422][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.231868][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.256355][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.276333][T11931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 671.286909][T12985] ldm_validate_partition_table(): Disk read failed. [ 671.299991][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.326769][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.346967][T12985] Buffer I/O error on dev loop9, logical block 0, async page read [ 671.377551][T12985] Dev loop9: unable to read RDB block 0 [ 671.389674][T12985] loop9: unable to read partition table [ 671.436579][T11931] usb 5-1: Using ep0 maxpacket: 8 [ 671.444331][T11931] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 671.451794][T12985] loop9: partition table beyond EOD, truncated [ 671.462892][T11931] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 671.494296][T11931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.496209][T12985] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 671.536249][T11931] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 671.568378][T11931] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 671.585106][T11931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.616053][T11931] usb 5-1: Product: syz [ 671.644219][T11931] usb 5-1: Manufacturer: syz [ 671.656590][T11931] usb 5-1: SerialNumber: syz [ 671.768477][T11931] usb 5-1: config 0 descriptor?? [ 671.799592][T11931] hub 5-1:0.0: bad descriptor, ignoring hub [ 671.805597][T11931] hub 5-1:0.0: probe with driver hub failed with error -5 [ 671.826839][T13000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2001'. [ 672.071372][T12984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.097625][T12984] dccp_invalid_packet: P.Data Offset(10) too large [ 672.117597][T11931] usb 5-1: USB disconnect, device number 4 [ 672.157077][ T976] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 672.766062][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 672.826229][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.853567][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.876128][ T976] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 672.906863][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.932723][ T976] usb 2-1: config 0 descriptor?? [ 673.391137][ T976] ft260 0003:0403:6030.0043: item fetching failed at offset 1/2 [ 673.399393][ T976] ft260 0003:0403:6030.0043: failed to parse HID [ 673.405813][ T976] ft260 0003:0403:6030.0043: probe with driver ft260 failed with error -22 [ 673.455751][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2006'. [ 674.372068][ T976] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 674.393229][ T976] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 674.666253][ T5851] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 674.916113][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 675.051098][ T5851] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 675.055223][T13040] fuse: root generation should be zero [ 675.060546][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.074274][ T5851] usb 6-1: Product: syz [ 675.078748][ T5851] usb 6-1: Manufacturer: syz [ 675.093124][ T5851] usb 6-1: SerialNumber: syz [ 675.116153][ T5851] usb 6-1: config 0 descriptor?? [ 675.145441][ T5851] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 675.414551][ T5851] gspca_sunplus: reg_w_riv err -71 [ 675.421601][ T5851] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 675.452021][ T5851] usb 6-1: USB disconnect, device number 52 [ 675.510806][ T10] usb 2-1: USB disconnect, device number 22 [ 675.646344][ T976] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 675.687533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.699783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.712168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.724620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.737013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.749307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.761681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.773938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.786407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.798678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.829746][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 675.897851][ T976] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 676.134470][ T976] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 680.416025][ C0] sched: DL replenish lagged too much [ 680.693677][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.696215][ C0] net_ratelimit: 18548 callbacks suppressed [ 680.696236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.722615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.735098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.747608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.760158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.772546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.784915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.797240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.809524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.822062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.846216][ T976] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 680.892744][ T976] usb 4-1: string descriptor 0 read error: -71 [ 680.906213][ T976] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 681.067731][T13057] loop9: detected capacity change from 0 to 7 [ 681.074270][T13057] buffer_io_error: 4 callbacks suppressed [ 681.074287][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.157084][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.266230][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.319063][ T976] usb 4-1: config 0 descriptor?? [ 681.362230][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.370642][ T976] usb 4-1: can't set config #0, error -71 [ 681.665378][ T976] usb 4-1: USB disconnect, device number 122 [ 681.676276][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.728538][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.868505][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.888681][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.951727][T13057] ldm_validate_partition_table(): Disk read failed. [ 681.966135][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 681.974221][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 682.470799][T13057] Buffer I/O error on dev loop9, logical block 0, async page read [ 682.603104][T13057] Dev loop9: unable to read RDB block 0 [ 682.610932][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2022'. [ 682.643348][T13057] loop9: unable to read partition table [ 682.681747][T13057] loop9: partition table beyond EOD, truncated [ 682.734552][T13057] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 683.788718][ T976] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 683.956101][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 683.973816][ T976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 683.990309][ T976] usb 6-1: can't read configurations, error -61 [ 684.047478][ T5851] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 684.156179][ T976] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 684.256498][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 684.263724][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.342184][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.353404][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 684.426845][ T976] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 684.447490][ T5851] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 684.457327][ T976] usb 6-1: can't read configurations, error -61 [ 684.481848][ T976] usb usb6-port1: attempt power cycle [ 684.491858][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.539786][ T5851] usb 4-1: config 0 descriptor?? [ 684.556357][T11931] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 684.582348][ T5851] usbhid 4-1:0.0: can't add hid device: -22 [ 684.594442][ T5851] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 684.706107][T13102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2033'. [ 684.736153][T11931] usb 2-1: Using ep0 maxpacket: 16 [ 684.784988][T11931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.914281][T13092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.056076][ T976] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 685.067547][T13092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.603774][T11931] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.706306][ C0] net_ratelimit: 13217 callbacks suppressed [ 685.706323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.724828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.737373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.749769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.762113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.774483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.786921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.799391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.811815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.824171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.126750][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.145590][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.716268][ C0] net_ratelimit: 10622 callbacks suppressed [ 690.716293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.734911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.747490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.760047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.772582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.785116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.797661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.810233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.822787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.835338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.340501][ T976] usb 6-1: device descriptor read/8, error -71 [ 693.419100][T11931] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.843100][ T5851] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 695.117749][T11931] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.182002][T11931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.726387][ C0] net_ratelimit: 8753 callbacks suppressed [ 695.726412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.744701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.757146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.769610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.782091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.794701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.807173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.819640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.832111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.844628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.736131][ C0] net_ratelimit: 12337 callbacks suppressed [ 700.736162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.754561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.767006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.779437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.791914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.804372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.816829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.829238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.841689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.854164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.624756][T12300] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 703.731722][ T5851] usb 1-1: device descriptor read/64, error -110 [ 705.746188][ C0] net_ratelimit: 11367 callbacks suppressed [ 705.746213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.764765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.777258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.789764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.802289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.814787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.827272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.839760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.852262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.864746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.687451][T11931] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 709.486082][T11931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.756230][ C0] net_ratelimit: 11302 callbacks suppressed [ 710.756254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.774687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.787173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.799734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.812231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.824719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.837208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.849714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.862205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.874737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.766165][ C0] net_ratelimit: 9939 callbacks suppressed [ 715.766189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.784531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.797047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.809556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.822039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.834508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.847757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.860234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.872725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.885240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.776093][ C0] net_ratelimit: 11693 callbacks suppressed [ 720.776117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.794586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.807054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.819618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.832231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.844785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.857307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.869823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.882305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.894903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.786275][ C0] net_ratelimit: 10701 callbacks suppressed [ 725.786300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.804673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.817150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.829582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.842000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.854382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.866850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.879260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.891987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.904656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.796362][ C0] net_ratelimit: 12135 callbacks suppressed [ 730.796385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.814764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.827181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.839650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.852131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.864521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.876953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.889366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.901810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.914243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.806010][ C1] net_ratelimit: 16532 callbacks suppressed [ 735.806043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 735.806250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.812994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 735.824474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.836899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 735.848444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.860778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 735.872427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.884976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 735.896388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.816146][ C0] net_ratelimit: 17404 callbacks suppressed [ 740.816170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.816419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 740.822556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.834905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 740.846575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.858968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 740.870486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.882800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 740.894432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.906822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 745.826151][ C0] net_ratelimit: 17699 callbacks suppressed [ 745.826176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.826755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 745.832543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.844963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 745.856560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.868928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 745.880592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.892901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 745.904469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.916893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 749.451216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.470035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.836279][ C1] net_ratelimit: 17055 callbacks suppressed [ 750.836303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 750.836719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.843098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 750.854704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.867134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 750.878655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.891018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 750.902720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.915007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 750.926623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.846003][ C0] net_ratelimit: 17118 callbacks suppressed [ 755.846028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.846938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 755.852403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.864870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 755.876451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.889209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 755.900500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.913028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 755.924517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.936934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 760.856136][ C0] net_ratelimit: 17739 callbacks suppressed [ 760.856160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.856248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 760.862687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.875064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 760.886645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.899189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 760.910659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.923107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 760.934635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.947124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.866152][ C1] net_ratelimit: 17753 callbacks suppressed [ 765.866176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.866268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.872931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.884561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.897004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.908478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.920989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.932432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.944862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 765.956590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.876379][ C0] net_ratelimit: 17800 callbacks suppressed [ 770.876404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.876472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 770.882773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.895236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 770.906789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.919186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 770.930778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.943297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 770.954813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.967559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 775.886243][ C0] net_ratelimit: 17198 callbacks suppressed [ 775.886266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.886632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 775.892686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.905166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 775.916714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.929060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 775.940912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.953078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 775.964606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.977062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 780.895980][ C0] net_ratelimit: 16860 callbacks suppressed [ 780.896005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.896445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 780.902371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.914914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 780.926482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.939291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 780.950434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.962835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 780.974400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.986875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 785.906229][ C0] net_ratelimit: 16022 callbacks suppressed [ 785.906254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.907168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 785.912686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.925230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 785.936947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.949334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 785.960939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.973451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 785.985015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.997501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 790.916158][ C1] net_ratelimit: 17345 callbacks suppressed [ 790.916183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 790.916353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.923082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 790.934629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.947070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 790.958604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.971016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 790.982683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.995063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 791.006661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.926015][ C0] net_ratelimit: 18503 callbacks suppressed [ 795.926040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.927184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 795.932440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.944871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 795.956471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.968925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 795.980495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.992919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 796.004491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.016854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 800.935999][ C0] net_ratelimit: 18186 callbacks suppressed [ 800.936030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.936142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 800.942444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.954847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 800.966516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.978874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 800.990453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.002873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 801.014436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.026831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 805.946148][ C1] net_ratelimit: 17146 callbacks suppressed [ 805.946173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 805.946333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.952918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 805.964630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.977275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 805.988886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.001199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 806.013037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.025204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 806.036845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.956370][ C0] net_ratelimit: 16484 callbacks suppressed [ 810.956396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.957235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 810.962857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.975168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 810.986803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.999127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 811.010698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.023122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 811.034655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.047057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 811.323296][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.341755][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.966150][ C0] net_ratelimit: 18663 callbacks suppressed [ 815.966175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.966466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 815.972655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.985070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 815.996621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.008972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 816.020561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.032924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 816.044521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.056899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 820.975969][ C1] net_ratelimit: 18952 callbacks suppressed [ 820.975993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 820.976322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.982793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 820.994360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.006801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 821.018365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.030739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 821.042328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.056863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 821.066363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.986180][ C0] net_ratelimit: 18803 callbacks suppressed [ 825.986204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.986485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 825.992518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.004949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 826.016595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.028937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 826.040525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.056530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 826.064441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.076843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 829.235954][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 829.242955][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5863/1:b..l [ 829.251432][ C0] rcu: (detected by 0, t=10502 jiffies, g=77197, q=538 ncpus=2) [ 829.259189][ C0] task:syz-executor state:R running task stack:20088 pid:5863 tgid:5863 ppid:5838 task_flags:0x400140 flags:0x00000002 [ 829.273778][ C0] Call Trace: [ 829.277078][ C0] [ 829.280036][ C0] __schedule+0x1b88/0x5240 [ 829.284565][ C0] ? __lock_acquire+0xad5/0xd80 [ 829.289441][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 829.294738][ C0] ? __pfx___schedule+0x10/0x10 [ 829.299600][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 829.304853][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 829.310170][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 829.315303][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 829.321062][ C0] irqentry_exit+0x5e/0x90 [ 829.325510][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.331518][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 829.336835][ C0] Code: c7 20 37 d4 8e e8 60 13 98 03 eb cd 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 d0 0b c0 11 e8 fb 1a 88 0a 89 [ 829.356485][ C0] RSP: 0018:ffffc9000421eea0 EFLAGS: 00000202 [ 829.362604][ C0] RAX: 0000000000000001 RBX: ffffc9000421ef80 RCX: ffff888034888000 [ 829.370620][ C0] RDX: dffffc0000000000 RSI: ffffc90004218000 RDI: ffffc9000421ef88 [ 829.378624][ C0] RBP: dffffc0000000001 R08: ffffc9000421f460 R09: 0000000000000000 [ 829.386641][ C0] R10: ffffc9000421efd0 R11: fffff52000843dfc R12: ffffc9000421ef90 [ 829.394639][ C0] R13: dffffc0000000000 R14: ffffc9000421f470 R15: ffffffff816dfbc8 [ 829.402633][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 829.407771][ C0] unwind_next_frame+0x1a5b/0x23b0 [ 829.412914][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 829.418058][ C0] ? qlist_free_all+0x9a/0x140 [ 829.422860][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 829.429045][ C0] arch_stack_walk+0x11e/0x150 [ 829.433841][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 829.439507][ C0] stack_trace_save+0x11a/0x1d0 [ 829.444393][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 829.449800][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 829.455715][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 829.462077][ C0] save_stack+0xfc/0x1f0 [ 829.466353][ C0] ? __pfx_save_stack+0x10/0x10 [ 829.471235][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 829.476637][ C0] ? __put_partials+0x160/0x1c0 [ 829.481518][ C0] ? put_cpu_partial+0x17e/0x250 [ 829.486471][ C0] ? __slab_free+0x294/0x390 [ 829.491086][ C0] ? qlist_free_all+0x9a/0x140 [ 829.495888][ C0] ? page_ext_put+0x97/0xc0 [ 829.500423][ C0] __reset_page_owner+0x76/0x1e0 [ 829.505359][ C0] __free_frozen_pages+0xde8/0x10a0 [ 829.510604][ C0] __put_partials+0x160/0x1c0 [ 829.515298][ C0] ? put_cpu_partial+0x14e/0x250 [ 829.520258][ C0] put_cpu_partial+0x17e/0x250 [ 829.525050][ C0] ? put_cpu_partial+0x72/0x250 [ 829.529920][ C0] __slab_free+0x294/0x390 [ 829.534376][ C0] ? __phys_addr+0xba/0x170 [ 829.538914][ C0] qlist_free_all+0x9a/0x140 [ 829.543534][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 829.549031][ C0] __kasan_slab_alloc+0x23/0x80 [ 829.553913][ C0] __kmalloc_noprof+0x238/0x4d0 [ 829.558792][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 829.564556][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 829.570151][ C0] tomoyo_check_open_permission+0x25a/0x4f0 [ 829.576080][ C0] ? tomoyo_check_open_permission+0x209/0x4f0 [ 829.582179][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 829.588658][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 829.593876][ C0] ? tomoyo_file_open+0x168/0x220 [ 829.598910][ C0] security_file_open+0xac/0x250 [ 829.603842][ C0] do_dentry_open+0x320/0x1960 [ 829.608636][ C0] ? vfs_open+0x31/0x370 [ 829.612906][ C0] vfs_open+0x3b/0x370 [ 829.617007][ C0] path_openat+0x2caf/0x35d0 [ 829.621634][ C0] ? stack_depot_save_flags+0x44/0x940 [ 829.627128][ C0] ? kasan_save_track+0x51/0x80 [ 829.632007][ C0] ? __pfx_path_openat+0x10/0x10 [ 829.636960][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.643068][ C0] do_filp_open+0x284/0x4e0 [ 829.647606][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 829.652670][ C0] ? do_raw_spin_lock+0x151/0x370 [ 829.657762][ C0] do_sys_openat2+0x12b/0x1d0 [ 829.662477][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 829.667966][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 829.673292][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 829.678526][ C0] __x64_sys_openat+0x249/0x2a0 [ 829.683414][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 829.688818][ C0] ? do_syscall_64+0xb6/0x230 [ 829.693539][ C0] do_syscall_64+0xf3/0x230 [ 829.698057][ C0] ? clear_bhb_loop+0x45/0xa0 [ 829.702728][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.708621][ C0] RIP: 0033:0x7f559338ca61 [ 829.713051][ C0] RSP: 002b:00007f55936cfd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 829.721488][ C0] RAX: ffffffffffffffda RBX: 000000000000057b RCX: 00007f559338ca61 [ 829.729481][ C0] RDX: 0000000000090800 RSI: 00007f559340ecb0 RDI: 00000000ffffff9c [ 829.737475][ C0] RBP: 00007f55936cfdec R08: 0000000000000000 R09: 0000000000000000 [ 829.745462][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 000000000000019d [ 829.753442][ C0] R13: 0000000000000000 R14: 00000000000a74ed R15: 00007f55936cfe40 [ 829.761462][ C0] [ 829.764506][ C0] rcu: rcu_preempt kthread starved for 1706 jiffies! g77197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 829.775635][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 829.785625][ C0] rcu: RCU grace-period kthread stack dump: [ 829.791538][ C0] task:rcu_preempt state:R running task stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 829.805053][ C0] Call Trace: [ 829.808340][ C0] [ 829.811330][ C0] __schedule+0x1b88/0x5240 [ 829.815891][ C0] ? schedule+0x163/0x360 [ 829.820254][ C0] ? __pfx___schedule+0x10/0x10 [ 829.825148][ C0] ? schedule+0x90/0x360 [ 829.829419][ C0] ? schedule+0x90/0x360 [ 829.833680][ C0] schedule+0x163/0x360 [ 829.837867][ C0] schedule_timeout+0x15b/0x2b0 [ 829.842740][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 829.848128][ C0] ? __pfx_process_timeout+0x10/0x10 [ 829.853422][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 829.858981][ C0] ? prepare_to_swait_event+0x308/0x340 [ 829.864561][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 829.869451][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 829.875628][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 829.880937][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 829.886862][ C0] ? finish_swait+0xdb/0x200 [ 829.891476][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 829.896697][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 829.901309][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 829.906533][ C0] ? __kthread_parkme+0x1a8/0x200 [ 829.911603][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 829.916838][ C0] kthread+0x7b7/0x940 [ 829.920952][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 829.926175][ C0] ? __pfx_kthread+0x10/0x10 [ 829.930792][ C0] ? __pfx_kthread+0x10/0x10 [ 829.935428][ C0] ? __pfx_kthread+0x10/0x10 [ 829.940054][ C0] ? __pfx_kthread+0x10/0x10 [ 829.944674][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 829.949888][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 829.955103][ C0] ? __pfx_kthread+0x10/0x10 [ 829.959712][ C0] ret_from_fork+0x4b/0x80 [ 829.964158][ C0] ? __pfx_kthread+0x10/0x10 [ 829.968779][ C0] ret_from_fork_asm+0x1a/0x30 [ 829.973581][ C0] [ 829.976638][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 829.982990][ C0] Sending NMI from CPU 0 to CPUs 1: [ 829.988219][ C1] NMI backtrace for cpu 1 [ 829.988235][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 829.988256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 829.988267][ C1] RIP: 0010:check_preemption_disabled+0x38/0x120 [ 829.988295][ C1] Code: c7 c4 20 c0 68 93 65 49 8b 04 24 48 89 44 24 08 65 8b 1d 7f f0 37 07 65 8b 05 74 f0 37 07 a9 ff ff ff 7f 74 24 65 49 8b 04 24 <48> 3b 44 24 08 0f 85 cc 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5d [ 829.988310][ C1] RSP: 0018:ffffc90000a07cb0 EFLAGS: 00000202 [ 829.988326][ C1] RAX: a50daa42963a7600 RBX: 0000000000000001 RCX: ffff88801d6cda00 [ 829.988339][ C1] RDX: ffff88801d6cda00 RSI: ffffffff8ca1b480 RDI: ffffffff8ca1b440 [ 829.988352][ C1] RBP: ffffc90000a07e88 R08: ffffffff8af052d1 R09: 0001000000000000 [ 829.988365][ C1] R10: 00000000000002ff R11: 0200000000000000 R12: ffffffff9368c020 [ 829.988378][ C1] R13: dffffc0000000000 R14: ffffc90000a07f20 R15: ffff888028b25040 [ 829.988391][ C1] FS: 0000000000000000(0000) GS:ffff888125094000(0000) knlGS:0000000000000000 [ 829.988405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.988417][ C1] CR2: 00007f28dc600000 CR3: 000000005cc52000 CR4: 00000000003526f0 [ 829.988433][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000076d8 [ 829.988444][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 829.988454][ C1] Call Trace: [ 829.988461][ C1] [ 829.988471][ C1] rcu_is_watching+0x15/0xb0 [ 829.988494][ C1] rcu_read_lock_held+0x15/0x50 [ 829.988516][ C1] rhashtable_lookup+0x1b8/0x860 [ 829.988539][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 829.988559][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 829.988577][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 829.988598][ C1] ? __pfx_rhashtable_lookup+0x10/0x10 [ 829.988629][ C1] ? ___ratelimit+0x4db/0x6a0 [ 829.988647][ C1] ? unwind_next_frame+0x1aa4/0x23b0 [ 829.988672][ C1] ? __pfx____ratelimit+0x10/0x10 [ 829.988692][ C1] br_mdb_entry_skb_get+0x768/0x9e0 [ 829.988720][ C1] ? __pfx_br_mdb_entry_skb_get+0x10/0x10 [ 829.988744][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 829.988765][ C1] br_handle_frame_finish+0xe61/0x1f60 [ 829.988786][ C1] ? stack_depot_save_flags+0x44/0x940 [ 829.988811][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 829.988831][ C1] ? ip6t_do_table+0x207/0x18c0 [ 829.988862][ C1] ? nf_hook_slow+0x17a/0x220 [ 829.988884][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 829.988904][ C1] br_nf_hook_thresh+0x482/0x5a0 [ 829.988928][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 829.988946][ C1] ? ip6table_mangle_hook+0x29e/0x7a0 [ 829.988971][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 829.988995][ C1] ? skb_push+0x97/0x100 [ 829.989015][ C1] br_nf_pre_routing_finish_ipv6+0xaa3/0xdd0 [ 829.989048][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 829.989073][ C1] br_nf_pre_routing_ipv6+0x397/0x790 [ 829.989094][ C1] ? br_nf_pre_routing_ipv6+0x449/0x790 [ 829.989114][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 829.989136][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 829.989156][ C1] ? br_nf_pre_routing+0x714/0x1480 [ 829.989177][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 829.989196][ C1] br_handle_frame+0x9fa/0x1530 [ 829.989214][ C1] ? start_secondary+0xfe/0x100 [ 829.989234][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 829.989254][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 829.989276][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 829.989295][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 829.989313][ C1] __netif_receive_skb_core+0x155a/0x4bb0 [ 829.989334][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 829.989355][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 829.989372][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 829.989387][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 829.989404][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 829.989446][ C1] ? ip6_rcv_finish+0x338/0x3d0 [ 829.989472][ C1] ? NF_HOOK+0x3a0/0x450 [ 829.989494][ C1] ? skb_orphan+0xae/0xd0 [ 829.989509][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 829.989533][ C1] ? NF_HOOK+0x9e/0x450 [ 829.989556][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 829.989581][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 829.989615][ C1] __netif_receive_skb+0x130/0x670 [ 829.989640][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 829.989672][ C1] process_backlog+0x664/0x15c0 [ 829.989698][ C1] ? process_backlog+0x33d/0x15c0 [ 829.989725][ C1] ? __pfx_process_backlog+0x10/0x10 [ 829.989747][ C1] ? rcu_is_watching+0x15/0xb0 [ 829.989771][ C1] __napi_poll+0xcb/0x480 [ 829.989794][ C1] net_rx_action+0x89d/0x1240 [ 829.989828][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 829.989854][ C1] ? sched_balance_domains+0x91a/0xa90 [ 829.989878][ C1] ? sched_balance_domains+0x1b4/0xa90 [ 829.989896][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 829.989913][ C1] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 829.989942][ C1] handle_softirqs+0x2d6/0x9b0 [ 829.989964][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 829.989982][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 829.990000][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 829.990026][ C1] __irq_exit_rcu+0xfb/0x220 [ 829.990042][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 829.990064][ C1] irq_exit_rcu+0x9/0x30 [ 829.990079][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 829.990097][ C1] [ 829.990103][ C1] [ 829.990109][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.990127][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 829.990146][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 70 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 829.990160][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6 [ 829.990174][ C1] RAX: a50daa42963a7600 RBX: ffffffff8197aebe RCX: ffffffff8c30c95c [ 829.990187][ C1] RDX: 0000000000000001 RSI: ffffffff8e69cf96 RDI: ffffffff8ca1b4a0 [ 829.990198][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 829.990211][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 829.990224][ C1] R13: 1ffff11003ad9b40 R14: 0000000000000001 R15: dffffc0000000000 [ 829.990238][ C1] ? do_idle+0x22e/0x5d0 [ 829.990257][ C1] ? ct_kernel_exit+0x12c/0x1a0 [ 829.990280][ C1] default_idle+0x13/0x20 [ 829.990301][ C1] default_idle_call+0x74/0xb0 [ 829.990323][ C1] do_idle+0x22e/0x5d0 [ 829.990346][ C1] ? __pfx_do_idle+0x10/0x10 [ 829.990376][ C1] cpu_startup_entry+0x42/0x60 [ 829.990395][ C1] start_secondary+0xfe/0x100 [ 829.990412][ C1] common_startup_64+0x13e/0x147 [ 829.990443][ C1] [ 830.996090][ C0] net_ratelimit: 15098 callbacks suppressed [ 830.996113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.996615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 831.002519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.014985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 831.026600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.038997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 831.050568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.062979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 831.074551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.086991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.006176][ C1] net_ratelimit: 16122 callbacks suppressed [ 836.006201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.006220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.012951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.024572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.036957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.048590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.060929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.072598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.084849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:9b:ba:10:28:9e, vlan:0) [ 836.096522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)