last executing test programs: 20.125252869s ago: executing program 2 (id=432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bb0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402eb032402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_NEWNSID={0x14, 0x58, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044c52}, 0x448d0) 19.236673832s ago: executing program 2 (id=439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fanotify_init(0x200, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r0}, 0x1, &(0x7f0000000080)=[0xfffffffffffffc00], 0x101, 0x3, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xaa6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xa67}]}}]}, 0x44}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e1000905", @ANYBLOB="9a3f71"], 0x0) 18.315294282s ago: executing program 2 (id=442): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000037efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 17.990843754s ago: executing program 2 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x4, 0xf, 0xee, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd7, 0xf7, 0x47}, {0x0, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x8, 0x3, 0x45}, {0x8080000, 0x7000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x8}, {0xeeee3000, 0x4, 0x4, 0xf8, 0x1, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xa, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xd000, 0xa, 0x4, 0x1, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xfa}, {0xa000, 0xc000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0x1, 0x7, 0x43, 0xf9}, {0xd000, 0xc000, 0xe, 0x5, 0xf9, 0xff, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x2000, 0x5}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x6, 0xe000, 0x80a0000, [0x3, 0x401, 0x8, 0xc5]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008060001080006040001fffffffffff135bc55992125457612ffac1414bbaaaaaaaaaaaa"], 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000bc0)={0x0, 0x1000, "476e39cf3d7f8ece923a82392a372282098069e870e3872dd9e868decee771c54602b7deb62ed29d5e399c4e688e046e5fe176f8269d4e9b60dd4f6c3ed2ebd4c12d7dcf7ca52ddb8a61674fe6c7f9e1f146628f329f5c58dfbc2d60ab4afdc3864bf30910c4e9c1e53d3f380f8c5b883e8631fbaef6acce5ab785767bb7d88410efc626152c1539a7f75d41a69fe9ce904a7b49dcca5013be2ad8ab5d32a13f5997a08dd11207af2ce927e963dadbfd67dc70b4ab6a3e89fe6f88fdba3a7802ef5865e0b6f31a0ed4c77afe477359e8103429f8daa062f8c4a6436025a7565d43f68a9a1c5b05547ab5676dee9fc310228573ade0d2945dafff4d05891086bc6a3feed6cb16ab9f38c8dd40999734dd616eac5cab3d5471267cfd71034fe411cf6b9066fa482f28ca6848455d2e683d27b352d5cdff0249dc042aa212ccfcd9e262a30a4f3c8eda00e5d96ca578657e6a4aa9092fb73634eb61988c00ccaff3b3513ee64195819de82ab1537ba7da88bb80afa88840e0d2a092a7230df850cae2d4696206cb5cdec33aa71533d3fc718c70cc479d4a03454799b5ebfa627626062729da30d96f4b72926160d48aa6da903127c9b21959c2ac441c7f2813cbd1473a4cc6c57b320cbd32553570f8c0e0905270829406220d753dd78f87d63174f129dce3c30485614b794f1a361a8822b0cdb2c1af3a9a1371ebc85ea63f4c0541096811f68759c7f65958e48901d2a2a605ac431bd819e7f17605277c2aa4c269a56988ffc54dab8c9da5128e8b0e7c44ee010a4566378572b80f4e3efb4cf047fc1fc60109100da8194c01786527715efd870b1573e3630d02fa35af7027aceda41ae788be85c86e6d9bc3c3234eb8731d39afcac9c25b855008803bec6c208b735e66d75add3f0b3de010b21167afac59cd8fff5466bdbb13a6e6e81ea7be9f0a3f48edca268da6aee99bb3f443686d69b65c798d314f07a0f30daad24e2d25833a388d9cdb3fffeb7c2b0b849c0a587835fabc714a8cc343a9d0ed497dd0cf577985afaa3fca04d37f7d2f70a4c2be6d72b9ae1417438c2424ad4dd75ae2b9515b83d4b6eac7fd98d52c39813db4e1b2be147c351158377f57121f0204c1fa0ce5633635e7edaf6b754c9ad512b5f7929d442862bd1151d0fecabae4e85272cf881e664abbb13ad926fdee010b6e75bba900999567bf0df61fd512fe2291b14cd45321c0121c2bea4293cce44e891b9a00c525dc30ab456cde9e12a7341e24048333f7faf18cc3cd9666aea42993d3de482b65daa3b94435dff3dcaeeb4a114f631ccc8d2e67a3947f4c5f4d9d120948136fff23ff11ef3f3ae96862e7f7baab50f8f1fa2b1979b9f36eb4845a0aadd52cc2786e6e7bd2a70e89245b4e7fdec1da3bc5194f0ec76b59dca3eaba0a419b9e17d0b2ef8764babe7ae0a597abe9e847a3921d6089d6ed84f938f3b2ea13e11b0e9d2e78970b1917fd40055385ee2d78838fae41cf8a8cb5c70be0e295146b8e7a6a59425d2b86fbfc22cc4a04ded3766148aec3098ba1ea34e44307992025903758015e2c9d0338cc3d3b064d78decca088f25d5e1965daa9d7e4a1c8965d90ef2c3ba804933012bfbd70a7b72e8422008b7388bc49ea7e6c2a2124790c260ec99a2f7f6345d21cd461fa94718ff3a4493575e84cd39037575804204948995b7990aff03b699dca2fbc86fa8ab623309c2e84ec6e7f8a02fe0cb61b5b15f35a1bc1b455b06982392f5b20a5e57d0b3b031d56ae7ab8b2b8c19b8c0afad8ac50da902cd60b216e5142fb4ba8591480e48ce1f63f96354d56726e240d0415a044c031c36c6729cafa2ecb8621d86e4e1aa8aa786d788288442381dd0fabfd232835f5d93b0512345ca21089b0b2ec8df13e25a9234730aa042a6cc78f0971518c24765ff1502eb04f370c3e25c1eb7ba864ee43c95bc57230714e7befe70037f249d5994a94dd7078f9abdca69bd57cc1c7251328576f087dad95d0269e4accc84b624884d98c47b43951127396489544751455e1ba3d6bd00bd66d690a2c39f43ddf9d34f542f2664a567a96d1961cec7c3aa2cc1c26ac3096140a101624b7e956785e3032da5d2815a541d5406098275115b241197effe8e8d485b479c3c537a0dec10ff2b098a6956f86d61c4a3cc81c68be947aa0a1bab190985db1a228f0e4afe1082ed57037bed4551bc7af659836bb5ddce6211d39aeb32691cead9b11921719f4401f9112697ed05cee6cd85fee4e45e802716c10008ccb93f24e8ba4c1f014308702ef24e4d0037279f1b8f51e41d6e9c83db2a9872bbf2839a2068a469267dad574dc6f7176a100de1579bb82f71769d520923784d98e71ba0764f62b20687154de6b04a07adfd40471c02e11f92652107b777c987c58ac93bbd9cd9d7672817ebe75380e46ddbae2e8f9da7d303cfb4d5b1d9c3e2ff8432d2f260c19b8e2a75f4d386bee07bbc23f9a47b774c9001a7a1c59c95337cabbe2666f62c180951687ec9bd44ae368f6446d680f6d16c60ee283e7f0ff998fd01eb5a5b558cc59fafe176ad177378a2214d4d3c41e699c4f87b9d86f4375f0b130bb098059ea110d45685b4d94ce590c0edae99e2ee8c594acf2d752aef589cb349abdb3ef1a25500971c3ae0c4b3425a872321786b830ab66d458619209de088819367927e1ae3e139238e1750e4c979788bcaf35bf00df5d5eb900f14e854dfe013daeb15b321c7c097d34480d8a415e48f8a21bd543afa1ffe395706709e84656fee4a470eb7680c0caaf89d7a119980f643ebbe040ce46f0efe6878936c5bb1adb42b0177ad1d8bdd317471ad59418a9f0ed312de13a1667cbe600be2d590c0b63921abc4edaa7c1d1921b65aa610377abe47616615053f3bda6abb74d73227d62a6ee0b4abb51d5ea3147793060663ba222effb997620aa4801e58248a047ccbe293d7c99ce29e5e2ed15854a3111c9e35b960b2b2b8c455144211983d3d0d4128a7df0f8b84445996cc235cba5157062da1badaea0f1ab2c743fa4a9e6c8d06217c767c15f80d70b1736e824a6b7edb16c3484bd945f31cbe6959b9f1b4532994fc64fb340feee70227fc1aa74bad6612bfdf643358ee81a7dc013a17c8fe9edba923006cbb29023c86574da82d9ff4b1d267a5ab3b4336952db48ffdbbc9f99abd122bb15422360605d298914da34d55d3ac78050f16bf558f1d68c909b7ca01c0e9a9e3519826b6b60e09332cbcd39758c410f5e561f3e6a0e73123e1cdd44485be998e00ec82bcced8872305b1b58dfd62b0698166e7128603fbd5e8f8c47bbdad2a2f8c359163609a044873b8f8432f33e9713eb83af3524df402c98802ba4dc2b22b318281a9b278a0fc74038e380a043fedb3b2b3698065105ea5bba26bba674a8adb75b7ca3acc9c7bdbb9b95818063b7491858464f8c27995561c16e0b56459203fdbb7e60b5eea7aef62fd0c8388ce36033d6411f17098cdf0e7789504623474da7519726c9f53949efc2007473c3db6da00bf1b6d1447c629b107873fed5b86d45ec14de6027e09663794fce6ad2021873fc2352aee376871617e386b86de4fc596fa03d667c17ead9931ebcf2524a3f34fd17dcd369c8d989cab1dee577b88f1e20cec741b08dab4e811bff299bb7ded1fdaeb255234d2d4a365e08f751fcdf56ea86b94336d3d508807a79e8bb0cb9608e3f17f537fa51929f219eef41193fd5bc15ca9bcf4044a34364a2bb3e7b75a6d5cec55374fd3245a3ded28beafe4fb0265d7d1236b16b26fddd15b63febc957ff5d6126f46a0e8979c5d2fd1a31e02efa465bd5d758ab1e451d041782711f494fffa07a38c2788208b94db8304427a5cc430354e3afa24f7051a5fef5c338f8d3c5d6ca72dc011a52d9c7dc34225c45ac22289ff6ea34504d7cadf8bc69179e11d3aa7a004325c8fdc8161d1d130007e41ea3145857315e7743e07dfca372e573ed615107f9a7d4c64eb1edf81dfcd058c57d51adeca2d8d4e7d858402a6cc28873a90f418c494ae72cec22e4b0fa02315e0cdbdf372761209398d078a1ee4b4b42778fd0c66e52a89c891386f0263bccfaa0f78869c61ecc14ade0fe9f6f5e1426243dad0e5d21e88bc08b531e8a3dd1a1bc4dc5a4594e9d83b5fe928315bd214ebebdcf9441f86eb9b7e75938ae236e3666026b7ba69d0eabb810942e1d63dd2f6b3b1504f02b4aeaf92f3935894763ea262b890002b066895991b70b8053db65495559ce0a5d762cf81aa6a27b94757771a09130979cafd3592a937e3ab58cfbaf4f384b4bf6be58d2f38ac067d31d72899922ae395599c501a2017d46d7490336aca13865a9e8c78904c44a4ac37d9ab6578b51e869d43ac175c966be07c20e97c1ce1088b25148e6ae10ad7059d766d4d1efd7efc39ab696be24fc23f626840cef52674d3f44a64c05b574fb5deb89a8f3a7ba9f0271658fdb5ec6252353a9cd09bf62f290d0aafa24988dbe902ddb68d5cb595cdf3de7b45b4332ef88ec84f7df9af2ef8faca67a06fa72d9ff44da92f490a59cc273e7a273f412993d62852b9dfdbc0e46bfad9bfa2ad303d979a8ca3a7b5aa83390eda538abaedb5e16293d9b28bc45a68f3815448f06bca6b059778007c5f4083a8ce2380570fa7af1d69d650ba0ba106182d0735c73ac35fbe7d186a7e46a9113c36f5564a90ab6d2beecc25b9a31420ee77e32e72823131a4c571a5b4388d6fb8dc57fc7fd431d89546429338c6b3b429c17f69725ab6a29eaae8dab0260d52efe40a318284c822d81e1d41515a0ec8cb0d4b4d125040715c998654683c5c482252349a8275a6f4a4cdbb0ec4f8e6650235287f95a967de8d1fa7bf6623bc777a9023a4f05504603d7eba96115a4430b2a0a980b3d3421e6f860d616c2540f234577f2a8e9bd2441bb6a62bafff7455ffcfb29641a4e6538027cb407c3dbda5b6d8d9999993118009ee67848d97c90be5079f95635ebad00d2760340820ae2294537a7c7a5c4def56e16461548be62c1f2733b70b49368b058d908e1b23dc8bc1a9365a179d78a646623e68b980fb57b0df2a88bedf16ea1f9e976c25d4b97cc6779353e677cfe7964a1b1e865a1fe02f3a86c214291b895faf5f659ca281b0f9cc7aa74d2db3766d93ae7d9f7f81f2e01f1cb637ffb69f4b61a03834f6a3ab28d52d53118fd4d0b4c75399dac2cae8c0c29e894f3ebd80901a36602d5b863a112981bedb761598c8093c88b7e148c105d5713e8bf5e27add7a9db8151d83efaa2e92f952f345aa5f2e7b23e640199b66f4b2c67a347a9aeeaaf121d5a0269aaeed859ef893da10e050c3b16fa53ac855692262757295ff36873b1d1a4b8b97873acbc2c46bdd732f8b111f52f11b789a34b3119a0a408b98763a6ecb20a314a6365684e09f2f6eddcf5d6c5eff9fd755714bd39a55351322fa19e4133cba0a220459d56674c0797df9512320703dbd0e1ac083cfa0e2c57f0e4a877dd6edb8ae52baddc1bbd838f3360019614db8a9de00f241e2107d71f3760e1cb43880be29d5755756d35ce28e078759eb491792231bf39fe542c179a6266d17d2582273c528bf1e6d711752c6e2ad6f26e11fbffb8082f4199218b433a0d3fcaeb54438b50006f3c34418ba98eacbef0223e64eece56bb5499374a243d582e36042984bedab9f454c21291f5899b9c61abc0538cfd75d1b4860726720980039d52c2cb568891e12b779d2d36df12d5c675e8c3e4820bb8fa6067a3d093cec8d34a3e35"}, &(0x7f0000001c00)=0x1008) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="1d95fdc8d012bec03b765b4bfbfd1ce571a0fc484780c5a51bb67edcd57dc1fef357b9c2decb55e0d57b898bbd07ff8af42057de5a8ce203267b5c1bae28b4516f", 0x41}], 0x1, 0x7ffffd, 0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x2000081) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001c40)={r6, 0x80, 0x9, 0xb, 0x5, 0x40, 0x7, 0x800, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x6, 0x5, 0x5, 0x4c0, 0x9}}, &(0x7f0000001d00)=0xb0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 17.862452591s ago: executing program 3 (id=446): ustat(0x7, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000012b702000004000000850000008600000095a4f26eb1d8f458c86b7feaeb34e8b44fda8b77a4c7967c347ede03bfc3c3f9bb67969b77f9094223ef855174a12446c953ec8abf15c5971b04b899b68ca493c2d048487d50679e765e10e1f9b1464c3a0e0000000000007691e7e5665df8e6b974b24203508a7fbaeddf9d9a7dbcc600568c2008f45130e04cfb8d2c45df390f"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @rand_addr, 0xfffd, 0x2, 'wlc\x00', 0x8, 0x2, 0x3}, {@private=0xa010100, 0xfffd, 0x3, 0x8, 0x0, 0x40}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x0, 0x0, 0xffffffff, 0x138, 0x1e0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f0000000000), {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffff00, 0xffffff00, 'xfrm0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2, 0x7c}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2, 0x2}}, @common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x2, 0x5, 0x2, 0x2]}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x9, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @private=0xa010100, @rand_addr=0x64010101, @icmp_id=0x67, @port=0x4e21}}}}, {{@ip={@local, @remote, 0xffffffff, 0xffffffff, 'vlan0\x00', 'batadv0\x00', {0xff}, {0xff}, 0xc, 0x3, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @port=0x4e20, @gre_key=0x5}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x120, 0x480, 0x1, 0x1}}, @common=@inet=@set1={{0x28}, {{0x1, 0x3, 0x1}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x6, 0x4}, {0x3, 0x4, 0x6}, {0x1, 0x5, 0x6}, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000048000880440000801400040002004e227f0000010000000000000000080003000200000024000100d1732899f611cd49846364bf6b34a30d8994034d7f413dc957630e5493c285aca40065cb6311be696b"], 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000180000000000019078ac1414bbac1414aa030190780300000045000000000000000033000064010101e0000002"], 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x153801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) pidfd_getfd(r5, r0, 0x0) 17.331777527s ago: executing program 3 (id=448): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40088c0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000002580)={0x9, {"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", 0x1000}}, 0x1006) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, &(0x7f0000000000)={0x26, 0x0, 0xf9}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) (async) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000002000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, 0xffffffffffffffff) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f00000000c0)="aac3be885d2af0b7f26e68b4b5ced830dfea6793af22ac35bc9d18f896a2e109f978e216", 0x24}, {&(0x7f0000000140)="11104199977ba38d16c3fed6a9a584d8fd981b6658079ea491447703c7d9b7ad581967e1e3329cd3e12ad5d4dfc2230a9fd392b85bb6db9850d01ea589c9eb2ac09835ff55df6da188517286382b3b22cec18cd92d548a2581d79c08d55c9ad44b4eae88d87a16a82ad118351bd83d0f4c764c21284523863129a74dcc0ffe988b0643686fc60b12510365af55c53eec0c7020524a88a9d11ff448d2abab68664bf89182390e72547031e44a45f91c60eeb5d357588ceb19250b3925ca6a964edd91da9505", 0xc5}, {&(0x7f0000000280)="3c146cabe12cfd92b74ee31c631102181cbfa7c04da684c506a70bc92e26af62582002e478c4965cb376e3cca18e36bd9363d7fbd6fb392a442212996e2208bfecdd0ad85969845904b69e4e2c211c92fbb57acbb2a5f440", 0x58}, {&(0x7f0000000300)="74f7ca5580d9585e6c9726a23fc5878417024311bf8119b20a013b8696cd1339486e4b8d888881d9c86c5c31634f17518edd5bbdd7195d5683bfaefe0b3f6f48161fbd7f377139cd70ba62fc90dbb921268b04849cca14c96929088e32eafde77641d954a2ae6ef69f2c09a4e6054416a426c6708213311e5960a95528eb1e9fe59e19b4880369934a0a0dcbc847f9c87d", 0x91}], 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x800) 17.18983327s ago: executing program 1 (id=449): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x1, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xffffffffffffffff, 0x8000000000000001}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$P9_RSTATu(r1, &(0x7f0000001400)={0x63, 0x7d, 0x1, {{0x0, 0x4c, 0x5, 0x19, {0x40, 0x4, 0x4}, 0x140c0000, 0x8000, 0x1, 0x3, 0x1, '}', 0x10, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, '%]^', 0x5, '\xaa\xaa\xaa\xaa\xaa'}, 0x2, '([', r2, r3, 0xee01}}, 0x63) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000040)) (async) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote}}}}}}}, 0x0) 16.988661288s ago: executing program 1 (id=450): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 16.927189306s ago: executing program 3 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000065b600000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340110000040c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.925896614s ago: executing program 4 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @generic='}']}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r7, 0x7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) inotify_rm_watch(r10, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) splice(r7, 0x0, r6, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r14, 0x81, 0xb) vmsplice(r13, &(0x7f0000000140)=[{&(0x7f00000003c0)="75a19f758f941c", 0x7}], 0x1, 0x6) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r15 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r4, 0x1b}, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x5) 16.85144747s ago: executing program 2 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100e4ffffff00000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 16.810951747s ago: executing program 1 (id=454): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000008b118370000000000000109022400010000000009040043090300000009210100fe0122450009058103"], 0x0) syz_usb_connect(0x1, 0x43f, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xab, 0xc5, 0x7c, 0xef, 0xb3c, 0xc002, 0x8624, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42d, 0x3, 0x4, 0x0, 0xc0, 0x9, "", [{{0x9, 0x4, 0x4, 0x8, 0x0, 0x59, 0x4, 0xa9, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "8dc9cf0aa38b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0xbde, 0x75}, {0x6, 0x24, 0x1a, 0x0, 0x7}, [@obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x24}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0x5, 0x9, 0x7, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, @hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xf6b}}]}}, {{0x9, 0x4, 0x15, 0x7, 0x4, 0xff, 0x5d, 0x81, 0xe, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0xc0, 0x8, 0x84}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0xf, 0xa3, "b0b7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xf2, 0x6, 0xb, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf9, 0x1, "38413523086454991f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0xc, 0x4, "5b9fb1fb5e3c86e0c9"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x98, 0x4, 0x5b, 0x3, "", 'L'}]}, @generic={0x62, 0x8, "1cd1cc617e5fed139668193bbdff44c60ea2f778b79264a3867db6f1156bf1f3c581d3ba2d545c4e096cdbf4543b2e5c1e81630a95d852877b1d5ec0f1998572f950e7f72e3ad71058824878681f736c7cbd05c82b2709cef86c93f224b560eb"}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xd, 0x9, 0x80}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x66, 0x3, 0x6, [@generic={0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xb}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x4, 0x5d, 0xfa}}]}}, {{0x9, 0x4, 0xfc, 0x0, 0xa, 0xff, 0x5d, 0x81, 0xc4, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "bdb9bcd6187d"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0xf7, 0x7fff, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@acm={0x4, 0x24, 0x2, 0x2}]}, @generic={0x25, 0x3, "0dd0c9c3b5730d3f514ec55c122be784e751a1d6b94f2b1b63ccec21bb7d74f2164a62"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x98, 0x70, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x9, 0xf, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x6, 0xd, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xad, 0x8}, @generic={0xa1, 0x22, "9fcb58b232c63894a8361dbc5f6d0139f584475c13c68bde54bf72595fb4168cceb5b3a025ba90758a35c248ecf365b46f94bdb2b5c7fbf997392c79c65b5f548057271faf6c8f7344f8bcc2f4d0ceeac76fe087406fbdb03bd9f27b452342e69568e45c46a4d3f53190a839336607813b5532287b8f45048048fe7116bf37a54f18eefa41f65f59c5832260dd53a255b4d8096279ea93d7117b8968516ca0"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x400, 0xff, 0x0, 0x8, [@generic={0xb7, 0x6, "4a67d348ed999ef6f5411a42ddece1f592a1535e9a8c57c0b4b2364c73534ab42d8e9ad649bc8592f87044ed2224d1629cb6ce944664528d41b182228bc87ca297bcc1c940a36593992cb6b8a62db29c081b96ac42b4b1c9f93dae1bc23201f5d4996fe79d30246ce2535dce6598386c148dbc9fd1bcc499c4fe1f8ab06eb221552b7c668262fa48b8343bb171f7e1d2f24aa088ab9bbd2d994416873a7365f522363141fc3bf907bd237f04d7c1a75db0b608c01f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x6, 0xc0, [@generic={0x3d, 0xa, "a1ca38593324a771ed38bd41b849556a8677d71978ed14993c67ebb212d75453f3bd8c840ce30d0e2499c4d03993d71b4ddc646d2911780efb2302"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0xe, 0x70, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xe, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0xfb, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x2, 0x5, 0xfa, [@generic={0x7b, 0x5, "0fb2ef9a2c77b3f58e0c84f049a41bbc2fb3ad285ca0b49cf975528c07136e0502fe283009f3c88e71046593ccb0add5eadcf9f18c865e7b743226a0ec952f1e53a99da59c0e596d08aa2026480044e9270844ffcfe239c10dcd0b5424ce5c3e13e8278d1811ad3629f14c7256619e79b787060daad3eeb566"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x2, 0xb3, 0x6, 0x20, 0x8}, 0x23, &(0x7f0000000680)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "dfc462df5fb98cdc4c4b2c2c035e4bb9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x81, 0x2400}]}, 0x3, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x860}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.718834184s ago: executing program 3 (id=455): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6d0, 0x0, 0x1d0, 0x2b0, 0x440, 0x2b0, 0x600, 0x600, 0x600, 0x600, 0x600, 0x6, 0x0, {[{{@ipv6={@private1, @local, [0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xff], 'veth1_virt_wifi\x00', 'bridge_slave_0\x00', {0x21a51b2707058572}, {}, 0x87, 0xba, 0x4, 0x4}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@empty, 0xa, 0x31, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfd}, {}, {0x4, 0x0, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0xc, 0x9}, 0x0, 0x168, 0x190, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @mcast2, @private1, @remote, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x60010100, @ipv4=@loopback, 0x0, 0xfe, 0x20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x730) r1 = syz_open_dev$video4linux(&(0x7f0000000440), 0x7, 0x2403) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0xffffffff, 0x9, 0x2, 0xffffffff}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x40}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet6(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16.65627833s ago: executing program 4 (id=456): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x401, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r2) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310026bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="00f854ed", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000240)={0xf8, 0x1, {0x3, 0x3, 0x160, 0x2, 0x9}}) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) unshare(0x2040400) fchmod(0xffffffffffffffff, 0x0) ioctl$FE_GET_FRONTEND(r1, 0x80246f4d, &(0x7f0000000200)={0x0, 0x0, @ofdm}) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000080)=0x1, 0x4) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0xf0ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x63}, 0x68) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, {0xa, 0x4624, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r7, 0x73}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r7, 0x2}}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000000080)={0x6, 0x80000, "038b0765c281f69c18e84f7fa710c3654ce54f02578cfaff", {0x7, 0xe}, 0x8}) io_uring_setup(0xfcb, &(0x7f0000000040)={0x0, 0x3cb1, 0x80, 0x3, 0x20002f7, 0x0, r1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000006c0)="83d2", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) 16.42952504s ago: executing program 2 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0xe0) brk(0x55555ede6001) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf25050000000800090002003f0008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.863761483s ago: executing program 32 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0xe0) brk(0x55555ede6001) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf25050000000800090002003f0008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.819220273s ago: executing program 4 (id=459): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @qam={0x2, 0x0, 0xc}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0xd9d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x404004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) 15.715918277s ago: executing program 4 (id=460): socket$packet(0x11, 0xa, 0x300) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) (async) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f000000d9c0)=0xf) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) (async) creat(&(0x7f0000000200)='./bus\x00', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x4000000001, 0x3) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r5 = io_uring_setup(0x70c4, &(0x7f0000000080)={0x0, 0xbf6d, 0x2}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/4100, 0x1004}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x2010, r6, 0xf7000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)='jumgen\x00\x98\x13\xe6\xb0\x9dl\x89\x04\x8c\x87\x88R\xecW\xce\xd9\x8b\xb8\n\xf6\xc8NzC\xba\x1cF\nn\xe8\xf4\xcd\x9b\xa8\xe2/\xfc\xfd,\x99\xaen\xa5\xff\xa9_A#sd\x907\v\xe1\x9d\xef\x89\xe9\x9dcL\xb3E\x94\xf1e\x10', 0xffffffffffffffff) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 15.504298973s ago: executing program 0 (id=461): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0x0, r1, &(0x7f0000000300)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069d481, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000008e80)={0x0, &(0x7f0000008240)={0x18, 0x0, 0x9a59}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008380)={0x60, 0x0, 0xc, {{0xffffffffffff021d, 0x6, 0xa, 0x5, 0x0, 0x6c56, 0x2, 0x2}}}, &(0x7f0000008400)={0x18, 0x0, 0xde, {0x2}}, 0x0, &(0x7f0000008480)={0x20, 0x0, 0x1, {0x0, 0x87b223a071b1752a}}, 0x0, 0x0, 0x0, &(0x7f00000087c0)={0x1e8, 0x0, 0x28, [{{0x1, 0x1, 0x1ff, 0x7, 0x40, 0x100, {0x3, 0x400, 0x401, 0x8, 0x6, 0x830, 0xfffffff4, 0x5, 0x9, 0x6000, 0x4, 0x0, 0x0, 0xbb9, 0x8}}, {0x3, 0x5, 0x1, 0x19d, '+'}}, {{0x1, 0x1, 0x8878, 0xbf36, 0xbd, 0x5, {0x5, 0x4, 0xbd0, 0xcf10, 0x7fff, 0x2, 0x0, 0x6, 0x7fff, 0x7000, 0x1, r4, r5, 0x7e, 0xff6}}, {0x0, 0x2, 0x1, 0x400, '#'}}, {{0x2, 0x3, 0x3, 0x10001, 0x64, 0x9, {0x6, 0x4, 0x1, 0x9, 0x3, 0xda, 0x8, 0x7, 0x2, 0xa000, 0xffffffff, r4, r5, 0x5, 0x8}}, {0x3, 0x84, 0x0, 0x423}}]}, 0x0, 0x0, &(0x7f0000008d40)={0x130, 0x0, 0x80000000, {0xfffffffffffff28e, 0x3, 0x0, '\x00', {0x7ff, 0x69ab20d5, 0x9a, 0x1000, r4, r5, 0xa000, '\x00', 0x4, 0x10, 0x2, 0x1000, {0x140000000000, 0x8452}, {0x3, 0x4}, {0x9, 0x10000}, {0x8000000000000001, 0x7}, 0x1, 0x1ff, 0x80000001, 0x6}}}}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r7 = dup3(r6, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x81000, 0x3, 0xce, 0x0, r7}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xffff, 0x0, 0x7, 0x80000362}, {0x6, 0x1}]}) ioctl$PPPIOCSDEBUG(r11, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r11, &(0x7f00000000c0)="43f1", 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) preadv(r0, &(0x7f0000001900)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1, 0x1, 0xb1) 15.382339048s ago: executing program 4 (id=462): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000300)="7c40c540", &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000100), 0x2, r0}, 0x38) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xb0002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r3, 0x0, 0x4, 0xfffffffffffffa72}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000340)={0x20, r3, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x83, &(0x7f00000001c0)}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000200)={0xc, r6}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r3, r6, 0x1cbf61, 0x4, 0x4, 0x344911}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000300)="7c40c540", &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000100), 0x2, r0}, 0x38) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xb0002, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r3, 0x0, 0x4, 0xfffffffffffffa72}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000340)={0x20, r3, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x83, &(0x7f00000001c0)}, 0x10) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000200)={0xc, r6}) (async) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r3, r6, 0x1cbf61, 0x4, 0x4, 0x344911}) (async) 15.206189831s ago: executing program 4 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 15.103563323s ago: executing program 1 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRESDEC=r1, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) (async) socket$inet6(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRESDEC=r1, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) (async) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 14.986132765s ago: executing program 0 (id=465): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xbf, 0x9, 0x6, 0x3}, {0x5, 0x7, 0x2, 0x80000000}, {0x5, 0x10, 0x6, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={r1, 0xe42d, 0x1}) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x2, 0x1, 0x7fffffffffffffff}) sendmsg$sock(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="e77da8cf6ce67043a46a26048568ff5422e0", 0x12}, {&(0x7f0000000200)="3e6699297a524cb0f2a131c42fd83f20ceae0b95e473efda8693c8b0afb15e39a35c02b4574439df8e084706f856e6006a145f50768bc32e247ea8e791ee5a7241f9416c2090b436d13a14c08ecec7af641ca87cb051a562c88c4a2c4de19e8b798fef5d343af7b5352d08d844322b3c63c24c927eef5d5a581e45965e1a537e0c5bdb13c11fe8ea33510963d856be639e245fb1e78b0c7d7fac7158ca5ec0e11812556e557587ccd47e6fea9aa28b0ae6d2acfac511d09dbfbc8a4837e4e813f63990a4a324e1b342b1a4e3d46fc5cb62ade7db46c7b8739b3930b29fa7f33bf447824bebb7ea804ce58298c8c9ae1da35ea94c9f94", 0xf6}, {&(0x7f0000000300)="24c8fe2de143dc0678950605f43fa9c813b3f3f4c55e3eeb21563008f38fa77df2217023e0d6ed8930c2f270b086", 0x2e}, {&(0x7f0000000340)="b35c926bdcc177db1d2baa3758e873d52aadb263e77da53b93c60b0aeaef106c89bc32238bfcfeb76c752c4a28cddea3e88176b5df83759a4e2f8939a0998ba2f877cf7244b7693a112dcd27df03e9ed4901833c7e6e81c1963fef922d8be5b5e11a0da11f801f10db30616e0426cd999b7a5966b0", 0x75}, {&(0x7f00000003c0)="8f03e4670856cd304a5c2c60bb8efb8c434664fc67a8287db2a6f0b9f8ebc7fb2b49007e4a804fd2ddabc9d9", 0x2c}, {&(0x7f0000000400)="d254372648fa6af68590771a88ba6c8390b78b1e6c699f4c97b9d2575bfc3a43eb0ff21381e9d081485deda2de12cd", 0x2f}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ef33f9f13b7828cd46635c76362fd7ed3c0327cb4e5637b87663e9125824ad2e43ad4e484e2e873e3909ef6c0e179f35f1cb76f6d901", 0x36}, {&(0x7f0000001480)="712c122829653c56ba895a620699b1241175be3970ca4681c071859791d522dba338b4fa99d53ede33a4f41c9041575673dd2a07bbefc4c8bfbd85846754fa278f354c754b703a4d1670514136f53e44d58fc6dd7bdda10e2ae1496f732118d48a70d9682a71d1c0c59d05588840965bfb53f70b146adba4e325af84d1af7fb61d78d97da6f2d7328a7392de8e66c46961e589521b71e46f5560866d6daffc886a8125ec2c2cdb75894b5c3cce8aa6bbff4b5c5ba5895a5dfe66a7d1c05afd87485b389d6de80d761c321d6906622fc3806683", 0xd3}, {&(0x7f0000001580)="97c52bc26bb5fb6095335780a0f6d60cfb7cba001d29e003c69d4dc0ef10e7cddaeef2c4e8e4d95d1ace83499957201f8b224184301c5d0e533b64791f7dbcf13fc0f4df99f1e5f3190bc089d9a6", 0x4e}], 0xa, &(0x7f00000016c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000) ioctl$MEMGETREGIONCOUNT(r4, 0x80044d07, &(0x7f0000001740)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xc0, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a8e11b3b811a2a4d6c4fd65e446abc8e0900a8d8ef1b1a51"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "23a34a39959dee009262e1b555f14566d2439d98f2e172ba"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001940)={0x1}, 0x4) sendfile(r3, r4, &(0x7f0000001980)=0x80000000, 0x1) (async) close(r4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000019c0)={0x1, 0xe, 0x2}) kcmp(r2, r2, 0x1, r3, r3) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000001a40)=0xfffffffffffffffe) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001b80), &(0x7f0000001bc0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000001c00)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0xf, 0x5, 0x2, 0x800, 0x10, r4, 0x2ef33ba, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async) syz_clone(0xc000000, &(0x7f0000001e00)="27f336f96f319bf650de511b460a8a0e0ab4f736829187d94de194d75703730ce28e63c2bf7552e180a740e3fa06487286b1f1fcbab2bf439b6444ec810b9430ab55d486f5d0452fb50982ffd54c0d1e46815a89fd0ec47e8877a1efb43ebc414ad74f86a493d716cf807a4b5877f38bff0cbc04f014bf09ab7298729e0d95777c450628d358993d9306d6ceb8924e1aedda522efa722de3621bfc8de2d5c893a3d93e3f2365cfb0d51bda731a01fda65a9bc626378db0adfe9faa5da091", 0xbe, &(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)="a61133c4a41713aa6c2063522457a52089710c476ad1c3ad820be7db53cff211252b8afbf2bdba5b3ce5dc1a92318071390f5197ee69fa9c0e93e9599098d282985258c80adb3ad113c92d049c62712dcb965e322e583294a70c8c715d51a74ce917f54b6df35ffb4711d46baacceb0ce4f4ecc3a019fd385d97") ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000001fc0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000002000)={0x48, 0x5, r7}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000002080)=0x80, 0x4) r8 = socket$inet(0x2, 0x800, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000020c0)=0x8, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000002100)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000002200)=0xe8) setuid(r9) (async) r10 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000002240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r10, &(0x7f0000002300)={0x14, &(0x7f0000002280)={0x0, 0x2, 0x2, {0x2, 0x2}}, &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000002540)={0x2c, &(0x7f0000002340)={0x20, 0x31, 0xf6, "9705aec0b2c1ddbd5d73a474d7507f502ac07679c07e385ac606937ca2242a71090ad1ab2ea2d272d6640187e1e01a2f17317e8f189839b1d9e0899dd3a6da0b986171f97d5ab4c0237d7ea8157c5d41e675dc435bb07a40f950c047bda3d01095c1430c9e1742293174d92e13aa7d6ecd315a97932d520dfba1df8238d1a4be521cc909116bf8a0fb48218afde818b8b41a3e8eb2c5e203723cc3964321aaa677e0b213e5dcd00dab2c61e97e250dee87b5afe7f0ba06b630933440866c9943c2c9d427baa09b27ca55de603e4eb61572bcf207dab3053cb820d27eca621ea631f69cb1f9cec97200c54f9104d5701ae120271918e9"}, &(0x7f0000002440)={0x0, 0xa, 0x1}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x5e}, &(0x7f00000024c0)={0xc0, 0x5, 0x5, "0862f57c71"}, &(0x7f0000002500)={0x40, 0x5, 0x5, "634272ce23"}}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000025c0), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002600)={0xfc, r11, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) 14.702693821s ago: executing program 1 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}}, 0x440c1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000010000000000030c00014000000000000001010800044000000001"], 0xcc}}, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0x20000, 0x1, 0x0, 0x0, 0x3, 0x1}, 0x30, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x117140) unshare(0x2c020400) r5 = socket(0x1e, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x3, 0x100}}) 14.628409895s ago: executing program 0 (id=467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000005003000000aa33000000fffffffb020002fd00000000000000000000ffff7f000001fc02000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14.597415018s ago: executing program 3 (id=468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x4, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xc, @loopback, 0xc}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback={0x10000000000}, 0x800000c0}, 0x1c) 14.383034633s ago: executing program 0 (id=469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/25, 0x19}, {&(0x7f00000002c0)=""/16, 0x10}], 0x2, &(0x7f00000003c0)=""/122, 0x7a}, 0xd39}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000940)=""/119, 0x77}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/186, 0xba}], 0x5, &(0x7f0000000800)=""/174, 0xae}, 0xfffffffa}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0400000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r4 = creat(0x0, 0xecf86c37d53049cc) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) pipe2$watch_queue(0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept4(r5, 0x0, 0x0, 0x800) 14.359539554s ago: executing program 3 (id=470): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000440)="e3ef7f670000ec6789b4241544940097a2bfc0a2259cbc0000040033a42c9550f5a100", 0x0, 0x9ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) syz_open_dev$media(&(0x7f0000000000), 0x840, 0x24002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000080) write$P9_RSTATu(r1, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\x03\xd1/s7\xc89S\x10w\x10\xc2m\xd7\xc5\x00\xf0L\xd8', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000001100)={0x1c, &(0x7f0000000940)={0x0, 0x11, 0x2, "3a18"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000280)={0x40, 0x14, 0x18, "3dadd59eeb050588a7b87316be3ddc3244874e5aa40d1180"}, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001380)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="601602000000d8084ce07a5bacaf7f05771b2e8f6aa6ad3e4cfe23b15822b9ce2be9814bd8bf5a9311bff8c0f115f631aa"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) pread64(r1, &(0x7f00000001c0)=""/90, 0x5a, 0x9) syz_emit_ethernet(0x3b6, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000240)={0x14, 0x2f, 0x1, 0x70bd2b, 0x25dfdbfd, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x24048004) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x12) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x3, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x2000000, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 14.330906667s ago: executing program 1 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x10, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 13.984711753s ago: executing program 0 (id=472): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) dup2(r0, r1) syz_open_dev$sndctrl(&(0x7f0000000140), 0xa, 0x103002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4621c0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x22020400) r9 = socket$netlink(0x10, 0x3, 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) write$sndseq(r0, &(0x7f00000001c0)=[{0x6, 0x81, 0x3, 0x5, @time={0x9, 0x50c}, {0xa3, 0x9}, {0x1, 0x3}, @raw8={"9ec64824b004533cebed06ac"}}, {0x2, 0x2, 0x0, 0x2, @tick=0x577e1a63, {0x6, 0x2e}, {0xac, 0x28}, @note={0x5, 0x97, 0x0, 0x2, 0x14}}, {0x8, 0xe8, 0x4, 0x5, @tick=0x1, {0xe, 0xb}, {0xba, 0x10}, @control={0x3, 0xb9ad, 0x1}}, {0x54, 0x0, 0x9, 0x5, @time={0x1, 0x2}, {0x0, 0xfb}, {0x7, 0x91}, @connect={{0x4, 0x1}, {0x7f, 0xf4}}}, {0x2, 0x5, 0xff, 0x2, @time={0x9, 0x5}, {0x5}, {0x10, 0x4}, @quote={{0x0, 0xad}, 0x1, &(0x7f0000000300)={0x6, 0x92, 0x7, 0x4e, @time={0x10, 0x1ae}, {0x5, 0x7}, {0xa2, 0x7f}, @ext={0x22, &(0x7f00000002c0)="0aba952580594e5b213c5e501d327dc7b558ee4e239886f09c9235e225fc4b473a93"}}}}, {0xa, 0x4, 0xe, 0xff, @tick=0x10000, {0x1, 0x81}, {0xf, 0x2a}, @note={0x5, 0x81, 0x5, 0x1, 0x1}}], 0xa8) 0s ago: executing program 0 (id=473): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0x13c}, {&(0x7f0000000280)="31863b26152d3072db46844c23d4b58dc60198d35e504267222eb5a066c75da062171a1d79ce83c8bb7e6fff8448055fe79a4af9236f81b645f88f35f5ba72d4c253c26c537c0115735b1124452db5b8d591308a1b3ff7077404d18462f33b26ad1b7bb2f8b02fbd78569ccb0f8d3f3d4c2d926394828e6c20f21584b4f1090a0e5070f101cfcd11f083c6bbdd767d1b8716aa79007df3f8a24bc8ee156061b5c0", 0xa1}, {&(0x7f0000000340)="cbba03f201272d4665b43bbdeef4b01ce0668829080720d44700bea87a831d3b2c2843aa44391c708927fc4482f89433ffd906f1c4aa98169064874430f8503b6f9574a254b2caa2533a4f", 0x4b}], 0x3, &(0x7f0000000540)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xa1, 0x3, 0x8, [{@rand_addr=0x64010100, 0x5}, {@local, 0x5}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x48}, {@local, 0x29}, {@multicast1, 0x7ff}, {@multicast2, 0x7}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x38}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xc0}}], 0x1, 0xf04) kernel console output (not intermixed with test programs): 45165][ T5699] gspca_vc032x: reg_r err -71 [ 106.451061][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.464555][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.484765][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.506775][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.522160][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.527656][ T30] audit: type=1326 audit(1784880918.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 106.557221][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.563107][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.570744][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.580309][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.596711][ T30] audit: type=1326 audit(1784880918.334:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 106.621013][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.638951][ T5627] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 106.640356][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.671003][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.685868][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.699127][ T9] gspca_sonixj: reg_w1 err -110 [ 106.710314][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 106.719698][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.741446][ T5627] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 106.759673][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.770258][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.782311][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.796288][ T5699] gspca_vc032x: Unknown sensor... [ 106.810735][ T5699] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 106.818780][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.862273][ T24] usb 2-1: device descriptor read/8, error -71 [ 106.883729][ T5699] usb 4-1: USB disconnect, device number 6 [ 106.929411][ T5924] fido_id[5924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.129806][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.171773][ T24] usb 2-1: device descriptor read/8, error -71 [ 107.256764][ T5927] x_tables: duplicate underflow at hook 3 [ 107.299688][ T24] usb usb2-port1: unable to enumerate USB device [ 107.312925][ T5699] usb 5-1: USB disconnect, device number 8 [ 107.575885][ T5931] loop4: detected capacity change from 0 to 7 [ 107.588119][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.604696][ T5931] Dev loop4: unable to read RDB block 7 [ 107.624058][ T5931] loop4: unable to read partition table [ 107.645588][ T5931] loop4: partition table beyond EOD, truncated [ 107.657581][ T5699] usb 3-1: USB disconnect, device number 3 [ 107.673066][ T5931] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.737917][ T24] usb 1-1: device descriptor read/64, error -71 [ 107.980056][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.009158][ T5940] netlink: 'syz.3.75': attribute type 2 has an invalid length. [ 108.133490][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 108.144152][ T24] usb 1-1: device descriptor read/64, error -71 [ 108.269170][ T24] usb usb1-port1: attempt power cycle [ 108.316534][ T5627] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.357560][ T5627] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.567683][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 108.605697][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 108.614745][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.648685][ T24] usb 1-1: device descriptor read/8, error -71 [ 108.753632][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 108.825571][ T5960] bond0: (slave bond_slave_1): Releasing backup interface [ 108.898896][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.917346][ T5627] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 108.938610][ T24] usb 1-1: device descriptor read/8, error -71 [ 109.074857][ T24] usb usb1-port1: unable to enumerate USB device [ 109.096075][ T5627] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.130680][ T5627] usb 3-1: not running at top speed; connect to a high speed hub [ 109.151148][ T5627] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 109.175586][ T5627] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 109.204956][ T5627] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 109.226882][ T5627] usb 3-1: config 14 has no interface number 0 [ 109.237121][ T5627] usb 3-1: config 14 has no interface number 1 [ 109.251568][ T5627] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 109.285334][ T5627] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 109.317874][ T5627] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.350464][ T5627] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.370861][ T5627] usb 3-1: config 14 interface 57 has no altsetting 0 [ 109.393599][ T5627] usb 3-1: config 14 interface 228 has no altsetting 0 [ 109.415782][ T5627] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 109.429284][ T5969] netlink: 'syz.3.87': attribute type 2 has an invalid length. [ 109.438657][ T5627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.454049][ T5627] usb 3-1: Product: syz [ 109.464420][ T5627] usb 3-1: Manufacturer: syz [ 109.475584][ T5627] usb 3-1: SerialNumber: syz [ 109.519016][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.645701][ T5971] support for cryptoloop has been removed. Use dm-crypt instead. [ 109.664044][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.708438][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 109.725510][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.750639][ T10] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.787878][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.804801][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 109.824245][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.854612][ T10] usb 2-1: config 0 descriptor?? [ 109.980499][ T5958] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 110.047020][ T5627] legousbtower 3-1:14.57: interrupt endpoints not found [ 110.097702][ T5978] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 110.279697][ T5627] legousbtower 3-1:14.228: get version request failed: -71 [ 110.305781][ T5627] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 110.373104][ T5627] usb 3-1: USB disconnect, device number 4 [ 110.462559][ T5984] FAULT_INJECTION: forcing a failure. [ 110.462559][ T5984] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 110.528769][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(full) [ 110.528799][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.528811][ T5984] Call Trace: [ 110.528819][ T5984] [ 110.528828][ T5984] dump_stack_lvl+0xe8/0x150 [ 110.528865][ T5984] should_fail_ex+0x40c/0x560 [ 110.528897][ T5984] prepare_alloc_pages+0x230/0x650 [ 110.528935][ T5984] __alloc_frozen_pages_noprof+0x12f/0x380 [ 110.528970][ T5984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 110.529004][ T5984] ? __pfx_policy_nodemask+0x10/0x10 [ 110.529041][ T5984] ? __pfx__copy_from_iter+0x10/0x10 [ 110.529073][ T5984] alloc_pages_mpol+0x212/0x380 [ 110.529110][ T5984] alloc_pages_noprof+0xac/0x2a0 [ 110.529144][ T5984] af_alg_sendmsg+0x13b1/0x2250 [ 110.529193][ T5984] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 110.529219][ T5984] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.529256][ T5984] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.529280][ T5984] ? skcipher_sendmsg+0x26/0xf0 [ 110.529310][ T5984] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 110.529338][ T5984] sock_sendmsg_nosec+0x13a/0x180 [ 110.529370][ T5984] ____sys_sendmsg+0x54e/0x850 [ 110.529398][ T5984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.529430][ T5984] ? import_iovec+0x73/0xa0 [ 110.529478][ T5984] ___sys_sendmsg+0x2a5/0x360 [ 110.529499][ T5984] ? __lock_acquire+0x683/0x2cf0 [ 110.529532][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.529559][ T5984] ? kstrtouint+0x6e/0xe0 [ 110.529637][ T5984] ? __fget_files+0x2a/0x420 [ 110.529665][ T5984] ? __fget_files+0x3a2/0x420 [ 110.529704][ T5984] __sys_sendmmsg+0x273/0x4d0 [ 110.529732][ T5984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.529765][ T5984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.529814][ T5984] ? ksys_write+0x242/0x270 [ 110.529848][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 110.529886][ T5984] __x64_sys_sendmmsg+0xa0/0xc0 [ 110.529908][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.529930][ T5984] do_syscall_64+0x174/0x580 [ 110.529954][ T5984] ? trace_irq_disable+0x3b/0x140 [ 110.529980][ T5984] ? clear_bhb_loop+0x40/0x90 [ 110.530007][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.530027][ T5984] RIP: 0033:0x7fc44f79de99 [ 110.530046][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.530064][ T5984] RSP: 002b:00007fc45058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.530085][ T5984] RAX: ffffffffffffffda RBX: 00007fc44fa25fa0 RCX: 00007fc44f79de99 [ 110.530101][ T5984] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000004 [ 110.530114][ T5984] RBP: 00007fc45058e090 R08: 0000000000000000 R09: 0000000000000000 [ 110.530126][ T5984] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 110.530138][ T5984] R13: 00007fc44fa26038 R14: 00007fc44fa25fa0 R15: 00007fc44fb4fa48 [ 110.530170][ T5984] [ 111.018658][ T5726] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 111.065841][ T5726] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.132502][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 111.161944][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.220334][ T10] usb 2-1: USB disconnect, device number 12 [ 111.338742][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 111.367233][ T6003] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 111.530423][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.565404][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.591895][ T9] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 111.607845][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.637429][ T9] usb 4-1: Product: syz [ 111.648274][ T9] usb 4-1: Manufacturer: syz [ 111.663523][ T9] usb 4-1: SerialNumber: syz [ 111.905277][ T6008] netlink: 'syz.2.98': attribute type 2 has an invalid length. [ 111.967894][ T996] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.138705][ T996] usb 1-1: Using ep0 maxpacket: 8 [ 112.192366][ T996] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 112.230032][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.299474][ T996] usb 1-1: Product: syz [ 112.319730][ T996] usb 1-1: Manufacturer: syz [ 112.332244][ T996] usb 1-1: SerialNumber: syz [ 112.376130][ T996] usb 1-1: config 0 descriptor?? [ 112.428579][ T996] gspca_main: sq930x-2.14.0 probing 2770:930c [ 112.727987][ T996] gspca_sq930x: reg_r 001f failed -71 [ 112.746649][ T996] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 112.801242][ T6015] loop4: detected capacity change from 0 to 7 [ 112.816102][ T996] usb 1-1: USB disconnect, device number 9 [ 112.846203][ T6015] Dev loop4: unable to read RDB block 7 [ 112.875229][ T6015] loop4: AHDI p1 p2 p3 [ 112.910560][ T6015] loop4: partition table partially beyond EOD, truncated [ 112.958294][ T6015] loop4: p1 start 1601398130 is beyond EOD, truncated [ 112.996127][ T6015] loop4: p2 start 1702059890 is beyond EOD, truncated [ 113.592095][ T6026] FAULT_INJECTION: forcing a failure. [ 113.592095][ T6026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.658815][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 113.677916][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 113.677942][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.677953][ T6026] Call Trace: [ 113.677961][ T6026] [ 113.677969][ T6026] dump_stack_lvl+0xe8/0x150 [ 113.678013][ T6026] should_fail_ex+0x40c/0x560 [ 113.678038][ T6026] prepare_alloc_pages+0x230/0x650 [ 113.678070][ T6026] __alloc_frozen_pages_noprof+0x12f/0x380 [ 113.678098][ T6026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.678127][ T6026] ? __pfx_policy_nodemask+0x10/0x10 [ 113.678156][ T6026] ? __pfx__copy_from_iter+0x10/0x10 [ 113.678184][ T6026] alloc_pages_mpol+0x212/0x380 [ 113.678217][ T6026] alloc_pages_noprof+0xac/0x2a0 [ 113.678274][ T6026] af_alg_sendmsg+0x13b1/0x2250 [ 113.678315][ T6026] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 113.678335][ T6026] ? __sanitizer_cov_trace_switch+0x68/0xf0 [ 113.678357][ T6026] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.678389][ T6026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 113.678407][ T6026] ? skcipher_sendmsg+0x26/0xf0 [ 113.678431][ T6026] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 113.678455][ T6026] sock_sendmsg_nosec+0x13a/0x180 [ 113.678482][ T6026] ____sys_sendmsg+0x54e/0x850 [ 113.678506][ T6026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.678531][ T6026] ? import_iovec+0x73/0xa0 [ 113.678562][ T6026] ___sys_sendmsg+0x2a5/0x360 [ 113.678579][ T6026] ? __lock_acquire+0x683/0x2cf0 [ 113.678608][ T6026] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.678635][ T6026] ? kstrtouint+0x6e/0xe0 [ 113.678695][ T6026] ? __fget_files+0x2a/0x420 [ 113.678721][ T6026] ? __fget_files+0x3a2/0x420 [ 113.678759][ T6026] __sys_sendmmsg+0x273/0x4d0 [ 113.678786][ T6026] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.678817][ T6026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.678854][ T6026] ? ksys_write+0x242/0x270 [ 113.678888][ T6026] ? __pfx_ksys_write+0x10/0x10 [ 113.678925][ T6026] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.678945][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.678967][ T6026] do_syscall_64+0x174/0x580 [ 113.678986][ T6026] ? trace_irq_disable+0x3b/0x140 [ 113.679013][ T6026] ? clear_bhb_loop+0x40/0x90 [ 113.679040][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.679061][ T6026] RIP: 0033:0x7f4e9159de99 [ 113.679091][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.679108][ T6026] RSP: 002b:00007f4e924bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.679129][ T6026] RAX: ffffffffffffffda RBX: 00007f4e91825fa0 RCX: 00007f4e9159de99 [ 113.679144][ T6026] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000004 [ 113.679157][ T6026] RBP: 00007f4e924bc090 R08: 0000000000000000 R09: 0000000000000000 [ 113.679169][ T6026] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 113.679181][ T6026] R13: 00007f4e91826038 R14: 00007f4e91825fa0 R15: 00007f4e9194fa48 [ 113.679213][ T6026] [ 113.680925][ T6024] syzkaller0: entered promiscuous mode [ 114.070365][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.118065][ T9] usb 4-1: USB disconnect, device number 7 [ 114.163622][ T6024] syzkaller0: entered allmulticast mode [ 114.268916][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.285982][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 114.345332][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.511845][ T6042] netlink: 'syz.1.110': attribute type 2 has an invalid length. [ 114.544158][ T6043] trusted_key: syz.4.109 sent an empty control message without MSG_MORE. [ 114.590494][ T6043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.615224][ T6034] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 114.852730][ T6046] __nla_validate_parse: 1 callbacks suppressed [ 114.852751][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 116.377375][ T6067] FAULT_INJECTION: forcing a failure. [ 116.377375][ T6067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.451327][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(full) [ 116.451356][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.451368][ T6067] Call Trace: [ 116.451376][ T6067] [ 116.451384][ T6067] dump_stack_lvl+0xe8/0x150 [ 116.451420][ T6067] should_fail_ex+0x40c/0x560 [ 116.451449][ T6067] _copy_from_iter+0x3b0/0x1660 [ 116.451488][ T6067] ? __pfx__copy_from_iter+0x10/0x10 [ 116.451518][ T6067] ? alloc_pages_mpol+0x24a/0x380 [ 116.451559][ T6067] af_alg_sendmsg+0x14c3/0x2250 [ 116.451603][ T6067] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 116.451628][ T6067] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.451662][ T6067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 116.451684][ T6067] ? skcipher_sendmsg+0x26/0xf0 [ 116.451712][ T6067] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 116.451738][ T6067] sock_sendmsg_nosec+0x13a/0x180 [ 116.451769][ T6067] ____sys_sendmsg+0x54e/0x850 [ 116.451795][ T6067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.451823][ T6067] ? import_iovec+0x73/0xa0 [ 116.451858][ T6067] ___sys_sendmsg+0x2a5/0x360 [ 116.451877][ T6067] ? __lock_acquire+0x683/0x2cf0 [ 116.451909][ T6067] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.451946][ T6067] ? kstrtouint+0x6e/0xe0 [ 116.451999][ T6067] ? __fget_files+0x2a/0x420 [ 116.452025][ T6067] ? __fget_files+0x3a2/0x420 [ 116.452062][ T6067] __sys_sendmmsg+0x273/0x4d0 [ 116.452089][ T6067] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.452119][ T6067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.452156][ T6067] ? ksys_write+0x242/0x270 [ 116.452191][ T6067] ? __pfx_ksys_write+0x10/0x10 [ 116.452229][ T6067] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.452250][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.452271][ T6067] do_syscall_64+0x174/0x580 [ 116.452292][ T6067] ? trace_irq_disable+0x3b/0x140 [ 116.452318][ T6067] ? clear_bhb_loop+0x40/0x90 [ 116.452343][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.452364][ T6067] RIP: 0033:0x7f7752f9de99 [ 116.452384][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.452401][ T6067] RSP: 002b:00007f7753f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.452424][ T6067] RAX: ffffffffffffffda RBX: 00007f7753225fa0 RCX: 00007f7752f9de99 [ 116.452438][ T6067] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000004 [ 116.452451][ T6067] RBP: 00007f7753f13090 R08: 0000000000000000 R09: 0000000000000000 [ 116.452463][ T6067] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 116.452475][ T6067] R13: 00007f7753226038 R14: 00007f7753225fa0 R15: 00007f775334fa48 [ 116.452508][ T6067] [ 117.339024][ T6079] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 117.582713][ T6081] syzkaller1: entered promiscuous mode [ 117.625667][ T6081] syzkaller1: entered allmulticast mode [ 117.927977][ T5699] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 118.089938][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.089972][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 118.090000][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 118.090044][ T5699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 118.090069][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.092948][ T5699] usb 5-1: config 0 descriptor?? [ 118.366933][ T6097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.677128][ T5699] ath6kl: Failed to submit usb control message: -71 [ 118.696083][ T5699] ath6kl: unable to send the bmi data to the device: -71 [ 118.714476][ T5699] ath6kl: Unable to send get target info: -71 [ 118.761334][ T5699] ath6kl: Failed to init ath6kl core: -71 [ 118.801536][ T5699] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 118.879532][ T5699] usb 5-1: USB disconnect, device number 9 [ 132.739880][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747514][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.942916][ T6129] netlink: 'syz.4.136': attribute type 2 has an invalid length. [ 180.151319][ T6139] kvm: kvm [6125]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 180.227900][ T5699] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 180.400004][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.429090][ T5699] usb 2-1: config 0 has no interfaces? [ 180.444373][ T5699] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.455896][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.497444][ T5699] usb 2-1: config 0 descriptor?? [ 180.679123][ T6155] syzkaller1: entered promiscuous mode [ 180.697959][ T6155] syzkaller1: entered allmulticast mode [ 181.103106][ T6160] netlink: 'syz.1.137': attribute type 9 has an invalid length. [ 181.125021][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 181.525178][ T6169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.627597][ T6169] binder: 6168:6169 ioctl c0306201 2000000013c0 returned -14 [ 181.787565][ T6173] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 181.928108][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.088414][ T9] usb 3-1: device descriptor read/64, error -71 [ 182.307925][ T6180] netlink: 'syz.4.150': attribute type 2 has an invalid length. [ 182.348830][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.488406][ T9] usb 3-1: device descriptor read/64, error -71 [ 182.512692][ T6190] syzkaller1: entered promiscuous mode [ 182.518465][ T6190] syzkaller1: entered allmulticast mode [ 182.608149][ T9] usb usb3-port1: attempt power cycle [ 182.717859][ T5699] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.867905][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 182.876608][ T5699] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 182.889993][ T5699] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 182.903473][ T5699] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.910393][ T5699] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 182.920692][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.937681][ T5699] usb 5-1: config 0 descriptor?? [ 182.947941][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 182.955853][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.964057][ T24] usb 2-1: USB disconnect, device number 13 [ 182.992364][ T9] usb 3-1: device descriptor read/8, error -71 [ 183.117890][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 183.130083][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.144090][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 183.156207][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.166633][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 183.187893][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 183.207851][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 183.224666][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.235016][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 183.247083][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.260261][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 183.270496][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.280807][ T9] usb 3-1: device descriptor read/8, error -71 [ 183.287457][ T10] usb 4-1: Product: syz [ 183.293389][ T10] usb 4-1: Manufacturer: syz [ 183.308845][ T10] usb 4-1: SerialNumber: syz [ 183.344810][ T10] usb 4-1: config 0 descriptor?? [ 183.361639][ T6193] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 183.381261][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.387149][ T5699] wacom 0003:056A:00C5.0009: ignoring exceeding usage max [ 183.398974][ T9] usb usb3-port1: unable to enumerate USB device [ 183.424555][ T5699] wacom 0003:056A:00C5.0009: unknown main item tag 0x6 [ 183.443732][ T5699] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 183.464296][ T5699] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 183.481062][ T5699] wacom 0003:056A:00C5.0009: unknown main item tag 0x0 [ 183.525482][ T5699] wacom 0003:056A:00C5.0009: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 183.771209][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 183.816966][ T10] usb 4-1: USB disconnect, device number 8 [ 183.862856][ T5699] usb 5-1: USB disconnect, device number 10 [ 183.955418][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.535493][ T6220] usb usb8: usbfs: process 6220 (syz.3.160) did not claim interface 0 before use [ 184.723844][ T6227] netlink: 'syz.2.162': attribute type 2 has an invalid length. [ 185.758083][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.930006][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.950860][ T10] usb 1-1: config 0 has no interfaces? [ 185.959256][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.002725][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.040222][ T5627] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.050701][ T10] usb 1-1: config 0 descriptor?? [ 186.188811][ T5627] usb 4-1: device descriptor read/64, error -71 [ 186.477842][ T5627] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.626231][ T6258] netlink: 'syz.0.165': attribute type 9 has an invalid length. [ 186.631025][ T5627] usb 4-1: device descriptor read/64, error -71 [ 186.649697][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 186.759148][ T5627] usb usb4-port1: attempt power cycle [ 187.097993][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.118233][ T5627] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.158618][ T5627] usb 4-1: device descriptor read/8, error -71 [ 187.252941][ T6265] netlink: 'syz.4.173': attribute type 2 has an invalid length. [ 187.278895][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 187.292770][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 187.322393][ T10] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 187.359447][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.381688][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 187.408235][ T5627] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.420733][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.459055][ T5627] usb 4-1: device descriptor read/8, error -71 [ 187.486596][ T10] usb 2-1: config 0 descriptor?? [ 187.578477][ T5627] usb usb4-port1: unable to enumerate USB device [ 187.918244][ T10] wacom 0003:056A:00C5.000A: ignoring exceeding usage max [ 187.948584][ T10] wacom 0003:056A:00C5.000A: unknown main item tag 0x6 [ 187.958218][ T10] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 187.965382][ T10] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 187.977101][ T10] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 188.027904][ T10] wacom 0003:056A:00C5.000A: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0 [ 188.128293][ T10] usb 2-1: USB disconnect, device number 14 [ 188.205836][ T6276] fido_id[6276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 188.491633][ T5699] usb 1-1: USB disconnect, device number 10 [ 188.923928][ T6293] program syz.4.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.085484][ T6294] program syz.4.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.487079][ T6313] process 'syz.4.184' launched './file1' with NULL argv: empty string added [ 189.747932][ T5627] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.807901][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.918558][ T5627] usb 1-1: Using ep0 maxpacket: 8 [ 189.931046][ T5627] usb 1-1: config 5 has an invalid interface number: 78 but max is 1 [ 189.956753][ T5627] usb 1-1: config 5 has an invalid interface number: 207 but max is 1 [ 189.974829][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.987100][ T5627] usb 1-1: config 5 has no interface number 0 [ 190.006408][ T5627] usb 1-1: config 5 has no interface number 1 [ 190.013001][ T10] usb 3-1: config 0 has no interfaces? [ 190.022540][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.031897][ T5627] usb 1-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 190.050047][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.059952][ T5627] usb 1-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 190.082172][ T10] usb 3-1: config 0 descriptor?? [ 190.088213][ T5627] usb 1-1: config 5 interface 78 has no altsetting 0 [ 190.110829][ T5627] usb 1-1: config 5 interface 207 has no altsetting 0 [ 190.138560][ T5627] usb 1-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 190.156573][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.177110][ T5627] usb 1-1: Product: syz [ 190.193341][ T5627] usb 1-1: Manufacturer: syz [ 190.214478][ T5627] usb 1-1: SerialNumber: syz [ 190.243099][ T5627] usb 1-1: Interface #78 referenced by multiple IADs [ 190.409133][ T5719] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.492370][ T5627] ftdi_sio 1-1:5.78: FTDI USB Serial Device converter detected [ 190.509722][ T5699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.529560][ T5627] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 190.569781][ T5627] hub 1-1:5.207: Invalid hub with more than one config or interface [ 190.592290][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.602479][ T5627] hub 1-1:5.207: probe with driver hub failed with error -22 [ 190.606878][ T5627] ftdi_sio 1-1:5.207: FTDI USB Serial Device converter detected [ 190.614093][ T5719] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.627518][ T5719] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.646643][ T5719] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 190.657991][ T5627] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 190.660493][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.676299][ T5719] usb 4-1: Product: syz [ 190.682697][ T6324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.188'. [ 190.692602][ T5719] usb 4-1: Manufacturer: syz [ 190.697715][ T5719] usb 4-1: SerialNumber: syz [ 190.699031][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.705622][ T5627] usb 1-1: USB disconnect, device number 11 [ 190.725491][ T5699] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 190.735653][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.764739][ T5699] usb 2-1: config 0 descriptor?? [ 190.765465][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 190.829394][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.845886][ T5627] ftdi_sio 1-1:5.78: device disconnected [ 190.859128][ T5627] ftdi_sio 1-1:5.207: device disconnected [ 190.911301][ T6325] loop5: detected capacity change from 0 to 7 [ 190.931105][ T6325] Dev loop5: unable to read RDB block 7 [ 190.936863][ T6325] loop5: unable to read partition table [ 190.943499][ T6325] loop5: partition table beyond EOD, truncated [ 190.950394][ T6325] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.963079][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.978732][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.019095][ T5719] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 191.032799][ T5719] usb 4-1: MIDIStreaming interface descriptor not found [ 191.041338][ T5719] usb 4-1: 0:2 : does not exist [ 191.047696][ T5719] usb 4-1: unit 4 not found! [ 191.199812][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.207387][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.215515][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.216830][ T5719] usb 4-1: USB disconnect, device number 13 [ 191.233776][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.249675][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.268901][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.300050][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.340233][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.340594][ T5699] holtek_mouse 0003:04D9:A070.000C: unknown main item tag 0x0 [ 191.404734][ T5699] holtek_mouse 0003:04D9:A070.000C: item fetching failed at offset 38/40 [ 191.422612][ T5699] holtek_mouse 0003:04D9:A070.000C: hid parse failed: -22 [ 191.430003][ T5699] holtek_mouse 0003:04D9:A070.000C: probe with driver holtek_mouse failed with error -22 [ 191.616968][ T6338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.711446][ T6342] netlink: 'syz.4.196': attribute type 30 has an invalid length. [ 191.738024][ T6342] bond1: option arp_missed_max: invalid value (0) [ 191.745362][ T6342] bond1: option arp_missed_max: allowed values 1 - 255 [ 191.754743][ T6342] bond1 (unregistering): Released all slaves [ 192.128487][ T5719] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.303504][ T5719] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 192.313595][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.328654][ T5719] usb 5-1: Product: syz [ 192.336937][ T5719] usb 5-1: Manufacturer: syz [ 192.345864][ T5719] usb 5-1: SerialNumber: syz [ 192.361721][ T5719] usb 5-1: config 0 descriptor?? [ 192.567415][ T5627] usb 3-1: USB disconnect, device number 9 [ 193.388414][ T5719] usb 5-1: non-Atmel transceiver xxxx3d3a [ 193.405775][ T10] usb 2-1: USB disconnect, device number 15 [ 194.003622][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 194.052735][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.120990][ T6385] loop5: detected capacity change from 0 to 7 [ 194.175527][ T6387] tipc: Enabling of bearer rejected, failed to enable media [ 194.177316][ T6385] Dev loop5: unable to read RDB block 7 [ 194.195103][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209881][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.247023][ T6385] loop5: unable to read partition table [ 194.254585][ T6385] loop5: partition table beyond EOD, truncated [ 194.261541][ T6385] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.273867][ T6387] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.289781][ T6379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.206'. [ 194.424703][ T5719] usb 5-1: Firmware version (0.0) predates our first public release. [ 194.426445][ T6379] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.447544][ T5719] usb 5-1: Please update to version 0.2 or newer [ 194.477277][ T5719] usb 5-1: atusb_probe: initialization failed, error = -19 [ 195.021545][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 195.071181][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 195.175649][ T6410] ip6tnl1: entered allmulticast mode [ 195.183804][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.204216][ T6407] fuse: Unknown parameter 'gr' [ 195.221685][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.240122][ T1119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.250892][ T1119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.278015][ T5727] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.398029][ T5727] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.551664][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.088564][ T5727] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 196.245744][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 196.256518][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 196.270283][ T5727] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 196.279681][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.287911][ T5727] usb 3-1: Product: syz [ 196.301007][ T5727] usb 3-1: Manufacturer: syz [ 196.314439][ T5727] usb 3-1: SerialNumber: syz [ 196.339475][ T5727] usb 3-1: config 0 descriptor?? [ 196.408711][ T6439] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 196.539548][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.691453][ T6443] bond1: (slave geneve2): making interface the new active one [ 196.741104][ T6443] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 197.172808][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 197.224688][ T6446] fuse: Unknown parameter 'default_permissionsaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 197.383830][ T5727] usb 3-1: non-Atmel transceiver xxxx3d3a [ 197.658155][ T5627] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 197.687968][ T5699] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.765688][ T6455] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 197.827815][ T5627] usb 4-1: Using ep0 maxpacket: 32 [ 197.840024][ T5627] usb 4-1: config 8 has an invalid interface number: 8 but max is 0 [ 197.860403][ T5627] usb 4-1: config 8 has no interface number 0 [ 197.864536][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 197.880887][ T5627] usb 4-1: config 8 interface 8 has no altsetting 0 [ 197.894445][ T5699] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 197.907462][ T5627] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=e9.7b [ 197.932558][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.938640][ T5699] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 197.942879][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 197.963081][ T5627] usb 4-1: Product: syz [ 197.970693][ T5627] usb 4-1: Manufacturer: syz [ 197.979455][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.986619][ T5699] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 197.990571][ T5627] usb 4-1: SerialNumber: syz [ 198.003950][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.027403][ T5699] usb 2-1: config 0 descriptor?? [ 198.145566][ T6461] loop4: detected capacity change from 0 to 7 [ 198.158992][ T6461] Dev loop4: unable to read RDB block 7 [ 198.164787][ T6461] loop4: unable to read partition table [ 198.171231][ T6461] loop4: partition table beyond EOD, truncated [ 198.177579][ T6461] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.237425][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.248100][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.317436][ T5627] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 198.375424][ T5627] usb 4-1: USB disconnect, device number 14 [ 198.423080][ T5727] usb 3-1: Firmware version (0.0) predates our first public release. [ 198.466150][ T5727] usb 3-1: Please update to version 0.2 or newer [ 198.489923][ T5727] usb 3-1: atusb_probe: initialization failed, error = -19 [ 198.515215][ T5699] wacom 0003:056A:00C5.000E: ignoring exceeding usage max [ 198.541899][ T6466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.563146][ T5699] wacom 0003:056A:00C5.000E: unknown main item tag 0x6 [ 198.584334][ T5699] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 198.598365][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 198.610675][ T5699] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 198.618215][ T5699] wacom 0003:056A:00C5.000E: unknown main item tag 0x0 [ 198.638094][ T5699] wacom 0003:056A:00C5.000E: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0 [ 198.735056][ T10] usb 2-1: USB disconnect, device number 16 [ 198.950841][ T6475] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 199.002105][ T6475] bond2: option mode: invalid value (7) [ 199.009691][ T6475] bond2 (unregistering): Released all slaves [ 199.105651][ T6475] netlink: 'syz.4.235': attribute type 10 has an invalid length. [ 199.115586][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 199.126474][ T6475] dummy0: entered promiscuous mode [ 199.378125][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.609772][ T6499] loop4: detected capacity change from 0 to 7 [ 199.631245][ T6499] Dev loop4: unable to read RDB block 7 [ 199.642793][ T6499] loop4: unable to read partition table [ 199.649331][ T6499] loop4: partition table beyond EOD, truncated [ 199.655815][ T6499] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.060807][ T5627] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.169916][ T6512] netlink: 'syz.2.248': attribute type 2 has an invalid length. [ 200.257943][ T5627] usb 2-1: Using ep0 maxpacket: 32 [ 200.280025][ T5627] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 200.310597][ T5627] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 200.328282][ T5627] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.336346][ T5627] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 200.349631][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.400803][ T5627] usb 2-1: config 0 descriptor?? [ 200.539112][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.575761][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.663335][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.684873][ T6518] loop4: detected capacity change from 0 to 7 [ 200.726709][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.772988][ T6518] Dev loop4: unable to read RDB block 7 [ 200.812914][ T6518] loop4: unable to read partition table [ 200.852733][ T6518] loop4: partition table beyond EOD, truncated [ 200.920931][ T6518] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.961238][ T5627] wacom 0003:056A:00C5.000F: ignoring exceeding usage max [ 201.037530][ T5627] wacom 0003:056A:00C5.000F: unknown main item tag 0x6 [ 201.075003][ T5627] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 201.107544][ T5627] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 201.151914][ T5627] wacom 0003:056A:00C5.000F: unknown main item tag 0x0 [ 201.269445][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 201.286921][ T6524] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 201.314029][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.337466][ T5627] wacom 0003:056A:00C5.000F: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0 [ 201.363129][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.457603][ T5627] usb 2-1: USB disconnect, device number 17 [ 201.486256][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.536312][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.667592][ T6528] fido_id[6528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 202.253209][ T6545] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 202.368318][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 202.455592][ T4942] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 202.478829][ T6554] loop4: detected capacity change from 0 to 7 [ 202.486932][ T6554] Dev loop4: unable to read RDB block 7 [ 202.493603][ T6554] loop4: unable to read partition table [ 202.503974][ T6554] loop4: partition table beyond EOD, truncated [ 202.512788][ T6554] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.830198][ T187] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.964591][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.984136][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.021906][ T187] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.054009][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.092740][ T6564] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 203.122371][ T187] usb 4-1: config 0 descriptor?? [ 203.148892][ T187] cp210x 4-1:0.0: cp210x converter detected [ 203.344337][ T5627] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 203.363979][ T6574] input: syz1 as /devices/virtual/input/input19 [ 203.493048][ T6573] gretap0: entered promiscuous mode [ 203.510519][ T6573] gretap0: left promiscuous mode [ 203.533034][ T5627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.560332][ T5627] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.575867][ T187] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 203.585826][ T5627] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.612709][ T5627] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.635081][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.652440][ T187] usb 4-1: cp210x converter now attached to ttyUSB0 [ 203.662885][ T5627] usb 2-1: Product: syz [ 203.674319][ T5627] usb 2-1: Manufacturer: syz [ 203.686169][ T5627] usb 2-1: SerialNumber: syz [ 203.718021][ T5727] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.726139][ T5627] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 203.727538][ T5627] cdc_ncm 2-1:1.0: bind() failure [ 203.850240][ T24] usb 4-1: USB disconnect, device number 15 [ 203.888261][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 203.932678][ T6566] netlink: 'syz.1.267': attribute type 21 has an invalid length. [ 203.941777][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 203.967005][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.975416][ T187] usb 2-1: USB disconnect, device number 18 [ 204.033102][ T24] cp210x 4-1:0.0: device disconnected [ 204.100562][ T6584] loop4: detected capacity change from 0 to 7 [ 204.125285][ T6584] Dev loop4: unable to read RDB block 7 [ 204.152293][ T6584] loop4: unable to read partition table [ 204.166232][ T6584] loop4: partition table beyond EOD, truncated [ 204.194755][ T6584] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.525624][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.534894][ T5727] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 204.551181][ T5727] usb 1-1: can't read configurations, error -71 [ 204.887911][ T187] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 205.006245][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.028503][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.049572][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 205.066986][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.095840][ T187] usb 2-1: config 12 has an invalid interface number: 172 but max is 0 [ 205.120960][ T187] usb 2-1: config 12 has no interface number 0 [ 205.147923][ T187] usb 2-1: config 12 interface 172 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 205.192665][ T187] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0xD has invalid maxpacket 536, setting to 64 [ 205.225439][ T187] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 205.243416][ T187] usb 2-1: config 12 interface 172 has no altsetting 0 [ 205.255787][ T187] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a97, bcdDevice=b2.7b [ 205.278198][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.289760][ T6606] syzkaller1: entered promiscuous mode [ 205.296942][ T187] usb 2-1: Product: ☽㋥㑋놑̈́걿祪äªì훓쒩ໞâï¾á‚½ë‹†é«¿ë’¿î¬«ìŽ¡â„—⎢çˆã”“੦༦臃鞈躺룯겕媯呬ᑒ㯲踎ï²î£ºäšâšš [ 205.317412][ T6606] syzkaller1: entered allmulticast mode [ 205.328356][ T5627] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.369051][ T6608] netlink: 'syz.0.285': attribute type 2 has an invalid length. [ 205.500599][ T5627] usb 4-1: Using ep0 maxpacket: 32 [ 205.536321][ T5627] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 205.591797][ T5627] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 205.662873][ T5627] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.677574][ T187] usb 2-1: USB disconnect, device number 19 [ 205.692808][ T5627] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 205.734300][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.760917][ T30] kauditd_printk_skb: 1396 callbacks suppressed [ 205.760936][ T30] audit: type=1326 audit(1784881018.054:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44f79de99 code=0x0 [ 205.801142][ T6611] loop4: detected capacity change from 0 to 7 [ 205.812813][ T5627] usb 4-1: config 0 descriptor?? [ 205.826948][ T6611] Dev loop4: unable to read RDB block 7 [ 205.855464][ T6611] loop4: unable to read partition table [ 205.885078][ T6611] loop4: partition table beyond EOD, truncated [ 205.916603][ T6611] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.288762][ T5627] wacom 0003:056A:00C5.0010: ignoring exceeding usage max [ 206.353029][ T5627] wacom 0003:056A:00C5.0010: unknown main item tag 0x6 [ 206.412354][ T5627] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 206.444476][ T5627] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 206.475501][ T5627] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 206.494155][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 206.509453][ T4942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 206.521328][ T4942] Bluetooth: hci1: Injecting HCI hardware error event [ 206.531483][ T5630] Bluetooth: hci1: hardware error 0x00 [ 206.558702][ T6622] program syz.4.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.573296][ T5627] wacom 0003:056A:00C5.0010: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 206.585443][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 206.612445][ T6622] program syz.4.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.681335][ T5627] usb 4-1: USB disconnect, device number 16 [ 206.853451][ T6624] fido_id[6624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 207.293089][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.330847][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.394947][ T6640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.454452][ T6642] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 207.491319][ T6643] mmap: syz.4.295 (6643) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.831584][ T6651] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.885483][ T6651] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.051879][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 208.128574][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 208.257945][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.334090][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.391494][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.658987][ T5630] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 208.942840][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.207482][ T6676] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 209.423577][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.447056][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.794352][ T6686] netlink: 'syz.0.311': attribute type 2 has an invalid length. [ 210.089615][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 210.150423][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 210.552698][ T6712] program syz.4.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.570504][ T6710] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 210.594636][ T6712] program syz.4.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.645268][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 210.713073][ T6715] netlink: 'syz.1.321': attribute type 2 has an invalid length. [ 210.739057][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 210.766776][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 210.823056][ T6715] ¿: entered promiscuous mode [ 210.982524][ T6731] netlink: 'syz.3.325': attribute type 2 has an invalid length. [ 211.059657][ T6726] can: request_module (can-proto-0) failed. [ 211.287069][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 211.388774][ T5719] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 211.578621][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 211.614512][ T5719] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 211.630767][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 211.630840][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 211.636844][ T4942] Bluetooth: hci3: command 0x0406 tx timeout [ 211.649581][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 211.701907][ T5719] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 211.764296][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.807843][ T5719] usb 1-1: Product: syz [ 211.831393][ T5719] usb 1-1: Manufacturer: syz [ 211.850349][ T5719] usb 1-1: SerialNumber: syz [ 211.905438][ T5719] usb 1-1: config 0 descriptor?? [ 211.970201][ T5719] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 212.063085][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 212.171077][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.227153][ T5719] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 212.306896][ T5719] usb 1-1: media controller created [ 212.455489][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.492205][ T6750] __nla_validate_parse: 1 callbacks suppressed [ 212.492224][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 212.672278][ T5719] usb 1-1: selecting invalid altsetting 7 [ 212.722554][ T5719] cxusb: set interface failed [ 212.741627][ T5719] dvb-usb: bulk message failed: -22 (1/0) [ 212.966920][ T5719] DVB: Unable to find symbol lgdt330x_attach() [ 213.004370][ T6762] loop3: detected capacity change from 0 to 1 [ 213.014151][ T6762] Dev loop3: unable to read RDB block 1 [ 213.016513][ T5719] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 213.021870][ T6762] loop3: unable to read partition table [ 213.037627][ T6762] loop3: partition table beyond EOD, truncated [ 213.046246][ T6762] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.151766][ T6761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.196418][ T6761] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 213.220455][ T5727] bond_slave_0: entered promiscuous mode [ 213.228359][ T5727] bond_slave_1: entered promiscuous mode [ 213.291584][ T5719] rc_core: IR keymap rc-dvico-portable not found [ 213.325586][ T5719] Registered IR keymap rc-empty [ 213.391133][ T5719] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 213.454083][ T6776] syzkaller1: entered promiscuous mode [ 213.469089][ T5719] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input23 [ 213.489425][ T6776] syzkaller1: entered allmulticast mode [ 213.527660][ T5719] dvb-usb: schedule remote query interval to 100 msecs. [ 213.550501][ T5719] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 213.563087][ T5727] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 213.597100][ T5719] usb 1-1: USB disconnect, device number 14 [ 213.625927][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 213.659813][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 213.697541][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 213.740487][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 213.824821][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.914961][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 214.002660][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.075349][ T5727] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 214.141661][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.210846][ T5727] usb 4-1: Product: syz [ 214.217686][ T5719] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 214.239207][ T5727] usb 4-1: Manufacturer: syz [ 214.258261][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.325479][ T5727] usb 4-1: SerialNumber: syz [ 214.332239][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.342279][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.432228][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.543086][ T5727] usb 4-1: config 0 descriptor?? [ 214.548145][ T6797] loop5: detected capacity change from 0 to 6 [ 214.571190][ T6797] Dev loop5: unable to read RDB block 6 [ 214.613308][ T6797] loop5: AHDI p2 p3 [ 214.630906][ T6797] loop5: partition table partially beyond EOD, truncated [ 214.694662][ T6797] loop5: p2 size 150995200 extends beyond EOD, truncated [ 214.844079][ T5727] adutux 4-1:0.0: Could not retrieve serial number [ 214.858150][ T5727] adutux 4-1:0.0: probe with driver adutux failed with error -5 [ 214.987143][ T6335] udevd[6335]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 215.073971][ T5727] usb 4-1: USB disconnect, device number 17 [ 215.330409][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.350282][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.402737][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 215.603886][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.636162][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 215.659831][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 104, changing to 4 [ 215.707624][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 215.743000][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.773908][ T10] usb 1-1: Product: syz [ 215.786245][ T10] usb 1-1: Manufacturer: syz [ 215.815126][ T10] usb 1-1: SerialNumber: syz [ 215.873411][ T6807] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 216.075715][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.124919][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.184109][ T10] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 216.220564][ T10] usb 1-1: 1:1 : invalid channels 0 [ 216.244882][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 216.458844][ T10] usb 1-1: USB disconnect, device number 15 [ 216.582091][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.166944][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.180556][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.311257][ T6836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.358'. [ 217.393725][ T6838] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 217.475282][ T6840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.359'. [ 217.500126][ T6838] bond1: entered promiscuous mode [ 217.523829][ T6838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.636006][ T6841] bond1: (slave bridge1): making interface the new active one [ 217.664356][ T30] audit: type=1326 audit(1784881029.954:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184a99de99 code=0x0 [ 217.691637][ T6841] bridge1: entered promiscuous mode [ 217.711253][ T6841] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 218.588724][ T5627] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 218.805432][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.842817][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.869301][ T5627] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 218.882476][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.906951][ T5627] usb 1-1: config 0 descriptor?? [ 218.957436][ T30] audit: type=1326 audit(1784881031.244:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 218.986045][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.019684][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.050622][ T30] audit: type=1326 audit(1784881031.244:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.109186][ T30] audit: type=1326 audit(1784881031.244:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.135500][ T30] audit: type=1326 audit(1784881031.244:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.213545][ T30] audit: type=1326 audit(1784881031.244:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.316772][ T30] audit: type=1326 audit(1784881031.244:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.406659][ T30] audit: type=1326 audit(1784881031.244:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.473878][ T6878] fuse: Bad value for 'fd' [ 219.486424][ T30] audit: type=1326 audit(1784881031.244:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 219.549180][ T30] audit: type=1326 audit(1784881031.244:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.2.370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e9155e6ce code=0x7ffc0000 [ 219.735283][ T5627] usbhid 1-1:0.0: can't add hid device: -71 [ 219.751319][ T5627] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 219.835461][ T5627] usb 1-1: USB disconnect, device number 16 [ 219.886840][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 219.982421][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.019896][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.048085][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.066033][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.588365][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 220.710732][ T6898] netlink: 'syz.0.379': attribute type 2 has an invalid length. [ 220.807866][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 220.815940][ T24] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 220.840694][ T24] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 220.857021][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.885602][ T24] usb 2-1: Product: syz [ 220.894610][ T24] usb 2-1: Manufacturer: syz [ 220.913005][ T6902] sg_read: process 212 (syz.2.381) changed security contexts after opening file descriptor, this is not allowed. [ 220.926375][ T24] usb 2-1: SerialNumber: syz [ 220.962803][ T24] usb 2-1: config 0 descriptor?? [ 220.986923][ T24] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 221.015040][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.024653][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 221.049999][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.071362][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.112543][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 221.126106][ T6906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.151233][ T24] usb 2-1: media controller created [ 221.157501][ T6909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.316569][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.457273][ T24] usb 2-1: selecting invalid altsetting 7 [ 221.484431][ T24] cxusb: set interface failed [ 221.517818][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 221.702238][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 221.725414][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 222.008126][ T24] rc_core: IR keymap rc-dvico-portable not found [ 222.046368][ T24] Registered IR keymap rc-empty [ 222.081644][ T24] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 222.139084][ T5727] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 222.156500][ T24] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input25 [ 222.194399][ T5727] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.219529][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 222.234863][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 222.253751][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.342535][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.357591][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 222.410673][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.474890][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.497848][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 222.542013][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.602684][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 222.628895][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 222.660126][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.736084][ T10] usb 4-1: config 0 descriptor?? [ 222.788415][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 222.927952][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 222.961429][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 223.089222][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 223.171832][ T24] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 223.220010][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.239496][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 223.289830][ T24] usb 1-1: config 0 has no interface number 0 [ 223.337295][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 223.367847][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 223.401645][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.455950][ T5627] usb 2-1: USB disconnect, device number 20 [ 223.493292][ T24] usb 1-1: Product: syz [ 223.537904][ T24] usb 1-1: Manufacturer: syz [ 223.574123][ T24] usb 1-1: SerialNumber: syz [ 223.621312][ T10] hid-led 0003:27B8:01ED.0012: probe with driver hid-led failed with error -71 [ 223.666065][ T6947] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 223.738584][ T10] usb 4-1: USB disconnect, device number 18 [ 223.777576][ T24] usb 1-1: config 0 descriptor?? [ 223.845556][ T5627] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 223.906245][ T24] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 224.508253][ T5627] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.726316][ T5627] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.829494][ T5627] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.892524][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.936814][ T5627] usb 2-1: Product: syz [ 224.957168][ T5627] usb 2-1: Manufacturer: syz [ 224.989327][ T5627] usb 2-1: SerialNumber: syz [ 225.212694][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.243514][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.323437][ T6963] netlink: 100 bytes leftover after parsing attributes in process `syz.1.395'. [ 225.537997][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.960249][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.986007][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.227588][ T5627] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 226.251620][ T5627] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 226.427049][ T24] usb 1-1: USB disconnect, device number 17 [ 226.436330][ T5627] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 226.735951][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.756478][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.777146][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.802420][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.926150][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 227.075486][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 227.237862][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 227.247824][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 227.272899][ T10] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 227.292827][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 227.302510][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.315664][ T10] usb 1-1: Product: syz [ 227.322258][ T10] usb 1-1: Manufacturer: syz [ 227.328242][ T10] usb 1-1: SerialNumber: syz [ 227.345598][ T10] usb 1-1: config 0 descriptor?? [ 227.363413][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 227.374892][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 227.390283][ T24] usb 4-1: device descriptor read/64, error -71 [ 227.416384][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.439695][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 227.448830][ T10] usb 1-1: media controller created [ 227.500281][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.602332][ T10] usb 1-1: selecting invalid altsetting 7 [ 227.620502][ T10] cxusb: set interface failed [ 227.633467][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 227.648246][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.766879][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 227.779938][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 227.831349][ T24] usb 4-1: device descriptor read/64, error -71 [ 227.880305][ T10] rc_core: IR keymap rc-dvico-portable not found [ 227.896005][ T10] Registered IR keymap rc-empty [ 227.916377][ T187] usb 2-1: USB disconnect, device number 21 [ 227.930016][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 227.959705][ T24] usb usb4-port1: attempt power cycle [ 227.960994][ T187] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 227.988644][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input26 [ 228.025112][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 228.042425][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 228.084695][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 228.138409][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 228.151074][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 228.270599][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 228.328075][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 228.390057][ T24] usb 4-1: device descriptor read/8, error -71 [ 228.397895][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 228.568049][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 228.659693][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 228.697824][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 228.710882][ T24] usb 4-1: device descriptor read/8, error -71 [ 228.820213][ T7032] loop8: detected capacity change from 0 to 7 [ 228.829051][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 228.857316][ T7032] Dev loop8: unable to read RDB block 7 [ 228.860747][ T24] usb usb4-port1: unable to enumerate USB device [ 228.865040][ T7032] loop8: unable to read partition table [ 228.875804][ T7032] loop8: partition table beyond EOD, truncated [ 228.882534][ T7032] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 228.895870][ T7038] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 228.930417][ T7034] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 228.940001][ T7036] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 228.958683][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 229.061842][ T7034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.070260][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 229.080281][ T5727] usb 1-1: USB disconnect, device number 18 [ 229.134609][ T7038] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 229.147493][ T7038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.158478][ T7038] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 229.313798][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.352995][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.410371][ T5727] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 229.547934][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 229.816749][ T7069] loop4: detected capacity change from 0 to 7 [ 229.839627][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.856448][ T7069] Dev loop4: unable to read RDB block 7 [ 229.868224][ T7069] loop4: unable to read partition table [ 229.876364][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.894625][ T7069] loop4: partition table beyond EOD, truncated [ 229.921321][ T7069] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.050687][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.081184][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.094003][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.112144][ T5727] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 231.154916][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.327912][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 231.349622][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.394357][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.441626][ T5727] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.480896][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.522457][ T5727] usb 1-1: config 0 descriptor?? [ 231.560820][ T5727] hub 1-1:0.0: USB hub found [ 231.758851][ T5727] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 231.845364][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.907610][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.976386][ T5727] usbhid 1-1:0.0: can't add hid device: -71 [ 231.997949][ T5727] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 232.068537][ T5727] usb 1-1: USB disconnect, device number 19 [ 232.398247][ T7124] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 232.449889][ T7125] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 232.541118][ T7124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.576596][ T7124] team0: Port device netdevsim1 added [ 232.692594][ T7125] team0: Port device netdevsim1 removed [ 232.767198][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.781845][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 232.781858][ T30] audit: type=1326 audit(1784881045.074:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 232.836501][ T7125] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 232.877893][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.893634][ T30] audit: type=1326 audit(1784881045.074:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 232.921767][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.961600][ T30] audit: type=1326 audit(1784881045.104:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.071840][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 233.095396][ T30] audit: type=1326 audit(1784881045.104:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.144138][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 233.190411][ T30] audit: type=1326 audit(1784881045.104:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.218897][ T30] audit: type=1326 audit(1784881045.104:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.248161][ T30] audit: type=1326 audit(1784881045.104:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.274565][ T30] audit: type=1326 audit(1784881045.104:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.299146][ T30] audit: type=1326 audit(1784881045.104:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.324351][ T30] audit: type=1326 audit(1784881045.104:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e9159de99 code=0x7ffc0000 [ 233.389093][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.636934][ T7145] loop4: detected capacity change from 0 to 7 [ 233.668853][ T7145] Dev loop4: unable to read RDB block 7 [ 233.709353][ T7145] loop4: unable to read partition table [ 233.728687][ T7145] loop4: partition table beyond EOD, truncated [ 233.762922][ T7145] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.798002][ T5699] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.008823][ T5699] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.065389][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.106506][ T5699] usb 1-1: Product: syz [ 234.120250][ T5699] usb 1-1: Manufacturer: syz [ 234.135861][ T5699] usb 1-1: SerialNumber: syz [ 234.162445][ T7155] x_tables: duplicate underflow at hook 1 [ 234.192416][ T5699] usb 1-1: config 0 descriptor?? [ 235.022209][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.218471][ T5699] usb 1-1: non-Atmel transceiver xxxx3d3a [ 235.377997][ T5727] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 235.402594][ T5712] usb 3-1: USB disconnect, device number 10 [ 235.481456][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 235.562534][ T5727] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.598876][ T5727] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.619346][ T5727] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.657825][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 235.657825][ T5727] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.657868][ T5727] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 235.698248][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.721925][ T10] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.727951][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.749708][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.765391][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.781330][ T5727] usb 2-1: config 0 descriptor?? [ 235.798232][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 235.815231][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.827355][ T10] usb 4-1: Product: syz [ 235.836928][ T10] usb 4-1: Manufacturer: syz [ 235.842080][ T10] usb 4-1: SerialNumber: syz [ 235.864332][ T10] usb 4-1: config 0 descriptor?? [ 236.012421][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.031309][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.093469][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.108771][ T7194] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 236.228131][ T5727] usbhid 2-1:0.0: can't add hid device: -71 [ 236.255832][ T5727] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 236.273004][ T5699] usb 1-1: Firmware version (0.0) predates our first public release. [ 236.299617][ T7197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.301758][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.320858][ T5699] usb 1-1: Please update to version 0.2 or newer [ 236.329916][ T5727] usb 2-1: USB disconnect, device number 23 [ 236.342240][ T5699] usb 1-1: atusb_probe: initialization failed, error = -19 [ 236.545497][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.557479][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.575237][ T7208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.584822][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.597017][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.606344][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.637106][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.831130][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 236.868234][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 236.901560][ T10] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 236.915180][ T7216] bridge0: port 3(veth0_to_bridge) entered blocking state [ 236.923051][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 236.931630][ T7216] bridge0: port 3(veth0_to_bridge) entered disabled state [ 236.944928][ T7216] veth0_to_bridge: entered allmulticast mode [ 236.968703][ T7216] veth0_to_bridge: entered promiscuous mode [ 237.001199][ T5727] usb 4-1: USB disconnect, device number 23 [ 237.021672][ T7216] bridge0: port 3(veth0_to_bridge) entered blocking state [ 237.030513][ T7216] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 237.676975][ T7244] netlink: 'syz.1.471': attribute type 13 has an invalid length. [ 237.756757][ T12] bridge_slave_1: left allmulticast mode [ 237.775522][ T12] bridge_slave_1: left promiscuous mode [ 237.792658][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.817240][ T12] bridge_slave_0: left allmulticast mode [ 237.836616][ T12] bridge_slave_0: left promiscuous mode [ 237.848020][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.857971][ T5727] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.971643][ T12] bond_slave_0: left promiscuous mode [ 237.981863][ T12] bond_slave_1: left promiscuous mode [ 238.049844][ T5727] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 238.079244][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.095270][ T5727] usb 4-1: Product: syz [ 238.115811][ T5727] usb 4-1: Manufacturer: syz [ 238.133802][ T5727] usb 4-1: SerialNumber: syz [ 238.152598][ T7257] capability: warning: `syz.0.472' uses 32-bit capabilities (legacy support in use) [ 238.178089][ T5727] usb 4-1: config 0 descriptor?? [ 238.470707][ T12] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 238.500267][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.515302][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.542716][ T12] bond0 (unregistering): Released all slaves [ 238.577350][ T12] bond1 (unregistering): Released all slaves [ 238.669470][ T5638] Bluetooth: hci1: command tx timeout [ 239.325979][ T5727] usb 4-1: non-Atmel transceiver xxxx3d3a [ 239.934434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 240.826862][ T5638] Bluetooth: hci1: command tx timeout [ 242.931272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 242.957259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.971109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.984922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.998832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.012676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.026300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.040165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.053885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.068109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.081665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.526129][ T5632] Bluetooth: hci1: command tx timeout [ 244.967758][ C1] sched: DL replenish lagged too much [ 245.799272][ T5632] Bluetooth: hci1: command tx timeout [ 247.687598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 247.725216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 247.747490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 247.770657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 247.793704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.816083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 247.838867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 247.876971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 247.959510][ C0] net_ratelimit: 2592 callbacks suppressed [ 247.959532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.979325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.993201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.007070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.021159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.035006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.048840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.062719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.076453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.090061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.968879][ C0] net_ratelimit: 2677 callbacks suppressed [ 252.968903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.988573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.002467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.016722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.030690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.044618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.058478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.072431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.086251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.100182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.763753][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.843372][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.978599][ C0] net_ratelimit: 2602 callbacks suppressed [ 257.978624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.998197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.011955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.025735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.039492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.053272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.067197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.081056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.095057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.109017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.462414][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.989196][ C0] net_ratelimit: 2610 callbacks suppressed [ 262.989220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.009075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.022815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.036691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.050502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.064339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.078161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.091889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.105610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.119745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.999389][ C0] net_ratelimit: 2756 callbacks suppressed [ 267.999413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.019002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.032656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.046252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.060004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.073651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.087305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.101044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.114733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.128566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.007986][ C0] net_ratelimit: 2885 callbacks suppressed [ 273.008008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.027550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.041126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.054721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.068448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.082062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.095706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.109412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.123155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.136726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.019425][ C0] net_ratelimit: 2924 callbacks suppressed [ 278.019450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.039090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.052751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.066404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.080175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.093490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.107019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.120770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.134390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.148081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.029052][ C0] net_ratelimit: 2914 callbacks suppressed [ 283.029076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.048559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.062152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.075746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.089618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.103034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.116577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.130487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.144088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.157857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.038679][ C0] net_ratelimit: 2880 callbacks suppressed [ 288.038705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.058388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.072023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.085717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.099512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.113358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.127025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.140727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.154338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.167887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.048895][ C0] net_ratelimit: 2871 callbacks suppressed [ 293.048919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.068386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.082102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.096140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.109926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.123589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.137307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.150879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.164559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.178331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.058347][ C0] net_ratelimit: 2882 callbacks suppressed [ 298.058369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.077955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.091476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.105109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.118842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.133202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.147505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.161271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.174919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.188569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.069197][ C0] net_ratelimit: 2914 callbacks suppressed [ 303.069220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.088590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.102751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.116468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.130318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.143988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.157759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.171515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.185149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.198943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.078315][ C0] net_ratelimit: 2903 callbacks suppressed [ 308.078339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.098040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.111683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.125379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.139124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.152856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.166472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.180183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.194548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.208195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.088942][ C0] net_ratelimit: 2906 callbacks suppressed [ 313.088966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.108442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.122118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.135949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.149697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.163375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.176835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.190570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.204231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.218037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.226741][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.098349][ C0] net_ratelimit: 2846 callbacks suppressed [ 318.098372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.117930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.131853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.145469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.159228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.172932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.186596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.200293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.213963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.227731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.108687][ C0] net_ratelimit: 2882 callbacks suppressed [ 323.108709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.128320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.142007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.155714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.169354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.182998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.196777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.210589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.224239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.237791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.117712][ C0] net_ratelimit: 2897 callbacks suppressed [ 328.117734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.137370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.151153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.164906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.178554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.192265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.205878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.219646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.233311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.246935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.432332][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.127978][ C0] net_ratelimit: 2922 callbacks suppressed [ 333.128000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.147549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.161204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.174876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.188625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.202408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.215892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.229640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.243246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.256967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.139425][ C0] net_ratelimit: 2905 callbacks suppressed [ 338.139460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.159063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.172843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.186454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.200167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.213886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.227541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.241266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.254912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.268960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.148124][ C0] net_ratelimit: 2863 callbacks suppressed [ 343.148150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.167704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.181072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.194725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.208460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.222095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.235759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.249667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.263545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.277154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.158026][ C0] net_ratelimit: 2854 callbacks suppressed [ 348.158049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.177758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.191547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.205340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.219183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.232910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.246709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.260443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.274135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.287888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.167759][ C0] net_ratelimit: 2857 callbacks suppressed [ 353.167789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.187451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.201286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.214985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.228699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.242544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.256185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.269901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.283566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.297216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.097692][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.104705][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7258/1:b..l [ 355.113132][ C0] rcu: (detected by 0, t=10503 jiffies, g=34289, q=2120 ncpus=2) [ 355.120980][ C0] task:syz.0.472 state:R running task stack:22576 pid:7258 tgid:7258 ppid:5647 task_flags:0x40064c flags:0x00080003 [ 355.135694][ C0] Call Trace: [ 355.139113][ C0] [ 355.142081][ C0] __schedule+0x17d9/0x56c0 [ 355.146664][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.151737][ C0] ? __pfx___schedule+0x10/0x10 [ 355.156641][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 355.162047][ C0] preempt_schedule_common+0x82/0xd0 [ 355.167391][ C0] preempt_schedule_thunk+0x16/0x40 [ 355.172646][ C0] _raw_spin_unlock+0x3f/0x50 [ 355.177405][ C0] __zap_vma_range+0x4084/0x4f10 [ 355.182432][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 355.188825][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 355.194162][ C0] ? unmap_vmas+0x1b9/0x550 [ 355.198735][ C0] ? unmap_vmas+0x1b9/0x550 [ 355.203270][ C0] unmap_vmas+0x390/0x550 [ 355.207659][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 355.212576][ C0] exit_mmap+0x293/0x9f0 [ 355.216864][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 355.221813][ C0] ? __pfx_exit_aio+0x10/0x10 [ 355.226546][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 355.232255][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 355.237502][ C0] __mmput+0x118/0x420 [ 355.241608][ C0] exit_mm+0x221/0x2d0 [ 355.245716][ C0] do_exit+0x6cd/0x2360 [ 355.250050][ C0] ? __pfx_do_exit+0x10/0x10 [ 355.254719][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 355.260422][ C0] do_group_exit+0x22d/0x2f0 [ 355.265056][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.270315][ C0] get_signal+0x121b/0x12c0 [ 355.274884][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 355.280488][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 355.286728][ C0] irqentry_exit+0x2ba/0x8f0 [ 355.291370][ C0] ? trace_irq_disable+0x3b/0x140 [ 355.296455][ C0] asm_exc_page_fault+0x26/0x30 [ 355.301364][ C0] RIP: 0033:0x7fc44f653b27 [ 355.305821][ C0] RSP: 002b:00007fc44d9d7120 EFLAGS: 00010202 [ 355.311922][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc44f79de99 [ 355.320015][ C0] RDX: 00007fc44d9d7140 RSI: 00007fc44d9d7270 RDI: 000000000000000b [ 355.328024][ C0] RBP: 00007fc44f833eaf R08: 0000000000000000 R09: 0000000000000000 [ 355.336030][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.344035][ C0] R13: 00007fc44fa26128 R14: 00007fc44fa26090 R15: 00007fc44fb4fa48 [ 355.352074][ C0] [ 355.355128][ C0] rcu: rcu_preempt kthread starved for 6924 jiffies! g34289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 355.366265][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.376267][ C0] rcu: RCU grace-period kthread stack dump: [ 355.382187][ C0] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 355.395730][ C0] Call Trace: [ 355.399042][ C0] [ 355.402009][ C0] __schedule+0x17d9/0x56c0 [ 355.406590][ C0] ? __pfx___schedule+0x10/0x10 [ 355.411495][ C0] ? schedule+0x90/0x2b0 [ 355.415788][ C0] schedule+0x164/0x2b0 [ 355.419995][ C0] schedule_timeout+0x152/0x2c0 [ 355.424889][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 355.430297][ C0] ? __pfx_process_timeout+0x10/0x10 [ 355.435629][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 355.441485][ C0] ? prepare_to_swait_event+0x322/0x350 [ 355.447074][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 355.452078][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 355.458282][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.463638][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.468892][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.474778][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 355.479419][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.484676][ C0] ? __kthread_parkme+0x71/0x1f0 [ 355.489662][ C0] ? __kthread_parkme+0x196/0x1f0 [ 355.494727][ C0] kthread+0x388/0x470 [ 355.498840][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.504115][ C0] ? __pfx_kthread+0x10/0x10 [ 355.508760][ C0] ret_from_fork+0x514/0xb70 [ 355.513399][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 355.518558][ C0] ? __switch_to+0xc89/0x1420 [ 355.523275][ C0] ? __pfx_kthread+0x10/0x10 [ 355.527965][ C0] ret_from_fork_asm+0x1a/0x30 [ 355.532793][ C0] [ 355.535835][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 355.542187][ C0] Sending NMI from CPU 0 to CPUs 1: [ 355.547442][ C1] NMI backtrace for cpu 1 [ 355.547484][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.547518][ C1] Tainted: [L]=SOFTLOCKUP [ 355.547527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.547543][ C1] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 355.547573][ C1] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 9b 13 bd 00 48 8b 3b e8 e3 e2 18 00 85 c0 74 14 [ 355.547589][ C1] RSP: 0018:ffffc90000a07e48 EFLAGS: 00000246 [ 355.547605][ C1] RAX: 0000000000000000 RBX: ffffc90000a07eb0 RCX: 0000000080000101 [ 355.547623][ C1] RDX: 0000000000000001 RSI: ffffffff8e4b12ee RDI: ffffc90000a07e68 [ 355.547635][ C1] RBP: ffffc90000a07ef0 R08: ffffc90000a08ff8 R09: 0000000000000000 [ 355.547648][ C1] R10: ffffc90000a07eb8 R11: fffff52000140fd9 R12: ffff88801def8000 [ 355.547667][ C1] R13: 00000000ffffffff R14: dffffc0000000000 R15: 1ffff92000140fd6 [ 355.547680][ C1] FS: 0000000000000000(0000) GS:ffff888125052000(0000) knlGS:0000000000000000 [ 355.547695][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.547707][ C1] CR2: 00007f1f057ffed0 CR3: 0000000061ebe000 CR4: 00000000003526f0 [ 355.547723][ C1] Call Trace: [ 355.547729][ C1] [ 355.547736][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.547759][ C1] arch_stack_walk+0xfb/0x150 [ 355.547779][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.547810][ C1] stack_trace_save+0xa9/0x100 [ 355.547830][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 355.547852][ C1] ? stack_depot_save_flags+0x33/0x800 [ 355.547873][ C1] ? __pfx_dsa_user_dev_check+0x1/0x10 [ 355.547900][ C1] kasan_save_track+0x3e/0x80 [ 355.547921][ C1] ? kasan_save_track+0x3e/0x80 [ 355.547941][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 355.547964][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 355.547984][ C1] ? __alloc_skb+0x276/0x7a0 [ 355.548008][ C1] ? fdb_notify+0xa6/0x160 [ 355.548028][ C1] ? br_fdb_update+0x4e6/0x6c0 [ 355.548049][ C1] ? br_handle_frame_finish+0x618/0x1990 [ 355.548075][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 355.548101][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 355.548120][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 355.548138][ C1] ? br_handle_frame+0x127f/0x1510 [ 355.548153][ C1] ? __netif_receive_skb_core+0x989/0x30b0 [ 355.548176][ C1] ? process_backlog+0x706/0x1860 [ 355.548200][ C1] ? __napi_poll+0xaa/0x330 [ 355.548221][ C1] ? net_rx_action+0x61d/0xf50 [ 355.548244][ C1] ? handle_softirqs+0x225/0x840 [ 355.548264][ C1] ? __irq_exit_rcu+0xca/0x220 [ 355.548282][ C1] ? irq_exit_rcu+0x9/0x30 [ 355.548326][ C1] __kasan_slab_alloc+0x6c/0x80 [ 355.548367][ C1] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 355.548390][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 355.548410][ C1] ? local_lock_release+0x9c/0x160 [ 355.548435][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 355.548457][ C1] ? __alloc_skb+0x276/0x7a0 [ 355.548482][ C1] ? __alloc_skb+0x276/0x7a0 [ 355.548511][ C1] __alloc_skb+0x276/0x7a0 [ 355.548540][ C1] fdb_notify+0xa6/0x160 [ 355.548563][ C1] br_fdb_update+0x4e6/0x6c0 [ 355.548589][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 355.548623][ C1] br_handle_frame_finish+0x618/0x1990 [ 355.548652][ C1] ? kasan_save_track+0x4f/0x80 [ 355.548680][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 355.548711][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 355.548733][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 355.548755][ C1] ? nf_hook_slow+0x176/0x220 [ 355.548778][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 355.548806][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 355.548834][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 355.548857][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 355.548886][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 355.548915][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 355.548934][ C1] ? lock_acquire+0x106/0x350 [ 355.548961][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 355.548980][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 355.549012][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 355.549031][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 355.549050][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 355.549070][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 355.549089][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 355.549122][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 355.549150][ C1] br_handle_frame+0x127f/0x1510 [ 355.549172][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 355.549191][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 355.549219][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 355.549242][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 355.549262][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 355.549279][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 355.549309][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 355.549339][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 355.549363][ C1] ? ip6_rcv_finish+0x265/0x280 [ 355.549390][ C1] ? NF_HOOK+0x336/0x3c0 [ 355.549421][ C1] ? process_backlog+0x3c3/0x1860 [ 355.549450][ C1] ? process_backlog+0x3c3/0x1860 [ 355.549474][ C1] ? process_backlog+0x3c3/0x1860 [ 355.549501][ C1] process_backlog+0x706/0x1860 [ 355.549528][ C1] ? process_backlog+0x3c3/0x1860 [ 355.549572][ C1] __napi_poll+0xaa/0x330 [ 355.549596][ C1] net_rx_action+0x61d/0xf50 [ 355.549632][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 355.549665][ C1] ? lapic_next_event+0x11/0x20 [ 355.549697][ C1] handle_softirqs+0x225/0x840 [ 355.549717][ C1] ? __irq_exit_rcu+0xca/0x220 [ 355.549740][ C1] __irq_exit_rcu+0xca/0x220 [ 355.549760][ C1] irq_exit_rcu+0x9/0x30 [ 355.549777][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.549804][ C1] [ 355.549809][ C1] [ 355.549816][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.549834][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 355.549863][ C1] Code: 9c 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 5a 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 355.549878][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 355.549892][ C1] RAX: 0000000000e2b9a1 RBX: ffffffff819ab33c RCX: 0000000080000001 [ 355.549904][ C1] RDX: 0000000000000001 RSI: ffffffff8e22bab2 RDI: ffffffff8c4bdb80 [ 355.549916][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 355.549930][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 355.549942][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 355.549972][ C1] ? do_idle+0x1cc/0x540 [ 355.550018][ C1] default_idle+0x9/0x20 [ 355.550037][ C1] default_idle_call+0x72/0xb0 [ 355.550057][ C1] do_idle+0x1cc/0x540 [ 355.550081][ C1] ? __pfx_do_idle+0x10/0x10 [ 355.550108][ C1] cpu_startup_entry+0x43/0x60 [ 355.550132][ C1] start_secondary+0x101/0x110 [ 355.550156][ C1] common_startup_64+0x13e/0x157 [ 355.550185][ C1] [ 357.215700][ T5727] usb 4-1: Firmware version (0.0) predates our first public release. [ 357.246049][ T5727] usb 4-1: Please update to version 0.2 or newer [ 358.178408][ C0] net_ratelimit: 2155 callbacks suppressed [ 358.178436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.198734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.212424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.226548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.240369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.254113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.268002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.281746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.295500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.309313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.660097][ T5727] usb 4-1: atusb_probe: initialization failed, error = -19 [ 362.425659][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.187702][ C0] net_ratelimit: 2557 callbacks suppressed [ 363.187724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.192262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.195756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.219067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.236903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.254368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.257528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.272741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.290678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.291722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)