last executing test programs: 12m20.156660401s ago: executing program 0 (id=1757): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x20) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x121, 0x40000059, r0, 0x0) r2 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 12m16.997335202s ago: executing program 0 (id=1765): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74f678000000100200000000000000000000000020000000000000000004"], &(0x7f0000000080)=0x2c) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214c, 0xc000, 0x0, 0x70}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]}) futex(&(0x7f0000000000)=0xfffffefe, 0x5, 0x1, 0x0, &(0x7f0000000080), 0x1800002) 12m16.799987166s ago: executing program 0 (id=1766): openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xd, 0x40083) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x1) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 12m16.397323325s ago: executing program 0 (id=1768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000580)="b3"}) 12m16.160688263s ago: executing program 0 (id=1769): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x26, 0xa, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xfdef) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) r2 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x25, 0x0, 0x7ffffffe) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x7, 0x7) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb4, 0xb, 0x37}}}}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, &(0x7f0000000080)=0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x1, 0x7, r6, 0xfc000000}, 0xc) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000dc0)={0x2c, &(0x7f0000000040)={0x60, 0x10, 0x28, {0x28, 0xe, "86ef3f9ef5491e20e6bf874332c9275fdc461fe2323447475e2a5eecbd2a26513f3cb1ea208c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0x22, 0x40, {0x40, 0x11, "8bc47891c359a398d8f15ae0932fbecd5e8ce368f4e29d4695d7a286cc85d905793f94c60adb248a0f6d3623292d7b8559bf75ead344bcc537882bfa13d8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f00000001c0)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "b44a4dbd"}, @global=@item_4={0x3, 0x1, 0x8, "269bab32"}, @main=@item_012={0x1, 0x0, 0x9, 'y'}, @main=@item_4={0x3, 0x0, 0xa, "4de264e4"}, @main=@item_012={0x2, 0x0, 0xa, "0d94"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_012={0x1, 0x0, 0xa, "b1"}, @main=@item_4={0x3, 0x0, 0xa, "815ff8ab"}, @main=@item_4={0x3, 0x0, 0x8, "3aefa21d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4b7a, 0xa, 0x1, {0x22, 0x773}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x0, 0x14, 0x51, "c50da6d299b2dd75de1c223b63c42b34963a48aae7244bd5f36616feceb14633f5c9381e1c790d76124468babe84ae41a1b3ecd5e9fa597689ac1762c7e0e1aa8f90c74df7ee0cea8e24c5674d8206e1c1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x23}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x1, 0xeb, "e9783c286228cb331445bd86c597f587fdda2ff3c84743a0c448c3b616bb0e024dc52b3c12719967e3efd54cae70761ce0b779c3835b0297d460768a17a7e3ac9d03d298aadf6c34e875dd4fdc55dd5479b5ba312bb88c21656486cd693538c9cb12caf0c18dd9eee014a1f43c0b12ab7adc269f43d2198106b593a7dd9ba31dd25eefb87035cfdda99ddf582ff537c96548b4810be36981d6ecab7b2298ba6895ec1722a5671fed001576ead29a42f5b975eac9cd99027c1adadf086073fcdb1f81b14bfd1c73d869bd93cd372b6aa03e38f3be8bcb59951b70d65c5379c2801c2fdbb2b7ff9ce3af25a5"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x46}}) 12m15.355841213s ago: executing program 0 (id=1774): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @remote}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000000b000/0x4000)=nil, 0x4000}, 0x4}) 12m14.619909007s ago: executing program 32 (id=1774): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @remote}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000000b000/0x4000)=nil, 0x4000}, 0x4}) 9m36.480869425s ago: executing program 5 (id=2412): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0x200404e}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) (async) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x2a6, &(0x7f0000000580)={@local, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "300428", 0x26c, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x33, 0x0, 0x9, 0x1, 0x0, 0x1d, 0x65}, @routing={0x16, 0xa, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}], @mlv2_report={0x8f, 0x0, 0x0, 0x8000, 0x4, [{0x3c, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local], [0x0]}, {0x9, 0x7, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0, @private2, @empty, @mcast2, @remote], [0x4, 0xff, 0x7, 0x80, 0x4, 0x10001, 0x9]}, {0x4, 0x5, 0x4, @remote, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}], [0x6, 0xd44, 0x1, 0x7f, 0x6]}, {0x4, 0x8, 0x2, @loopback, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1], [0x4, 0x2, 0x4, 0x4, 0xe4d0, 0x5, 0x0, 0x4]}]}}}}}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000200001032abd7200ffdbdf25020000000000000800000000c2ef9d8144e6dddfe9e4805d77cb41be1f6bade44a5c1a4ca0a33c18369e3f3d19f5282c319c52f57262da7f6a9bcfdb75d7489d7be5496e5fd6db0d000000000000006a05bf3031de76ec759730c3285d818b5b1303e49d1a5c4af592eb3d7a0c6e38fd052af0b0dc7a61d7c3bb6ffce9eecebdd3e76894a471991bfd5582bd18158b7df4f78327620f0d511fa72f0e3a1aac4f6b5bc615ef94b64e166cd2640e4ff177908d00006d820abdd9db6b45335782"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 9m34.630020357s ago: executing program 5 (id=2418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x80000008, 0x8000007, 0x5, 0xb42, 0x4}, {0x4, 0xffffffef, 0x2, 0x9, 0x1ff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xe, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r4, 0x540b, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x8000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x85836, 0x7f, 0x40000000000003, 0x4002000000000e51, 0x101, 0x8000000001003, 0x103d, 0x200000000006, 0x1, 0x32a, 0x1, 0x3b, 0x8, 0x5, 0x8000000000005, 0x1], 0xfec00000, 0xdd1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 9m31.845180628s ago: executing program 5 (id=2424): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x8, 0x5, 0x0, 0x3, 0x3, 0x8000, 0x3a5, 0x38, 0x2fc, 0xe, 0x7fff, 0x20, 0x1, 0x9, 0xd, 0x6}, [{0x3, 0x9, 0x1, 0x8, 0x3868bca7, 0x4, 0x1, 0xffffffff}], "a0db0fbcfbd9de6e50adc8cd897e13502db8b2e4731b259241d8b8b8253840cb45ae2c52e7bde8b03e4481d91317009068499509e16bd9f7e699"}, 0x92) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000100)) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9a478e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89dd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xd, @local, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private2, 0xb6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @remote, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52b2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x10) inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x42000000) flistxattr(r4, &(0x7f0000000500)=""/84, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) execveat(r1, &(0x7f0000000580)='./file0\x00', &(0x7f0000000680)={[&(0x7f00000005c0)='}^[\\#\xb6\x00', &(0x7f0000000600)='veth0_to_bond\x00', &(0x7f0000000640)='/proc/self/net/pfkey\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='veth0_to_bond\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='[)\x00']}, 0x1000) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f00000007c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', r1, 0x4000, r6}, 0x18) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000880)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r7 = accept4(r4, &(0x7f00000008c0)=@ax25={{}, [@netrom, @bcast, @null, @bcast, @null, @rose, @default, @default]}, &(0x7f0000000940)=0x80, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x880) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r9, 0x21, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2008000}, 0x4000005) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000c00)={&(0x7f0000000bc0)=[{0x0, 0x0, 0x9, 0x80000001, 0x0, 0xf8, 0x9, 0x9}], 0x1, 0x38, 0x0, 0x8001}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r10, 0x2, &(0x7f0000000c80)=0x4) lseek(r1, 0x6, 0x1) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000cc0)={0x100, 0x6, 0x1, 0x1385d, 0x0, 0x2}, 0x30, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000d00)={0x1, 0x8}, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x2a, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x1, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x110, 0x7, 0x4, 0x68, 0xff, 0xce}, 0xc, &(0x7f0000000dc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x1, 0x80}]}, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x80c}}]}) 9m29.91629855s ago: executing program 5 (id=2428): r0 = socket(0x40000000015, 0x5, 0x40) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x100000}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$netlink(0x10, 0x3, 0x8) (async) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2000) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000002140)={{r3}, "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"}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000005a80)=[{&(0x7f00000011c0)=""/33, 0x21}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000005b40)=""/4116, 0x1014}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/45, 0x87}, {&(0x7f00000058c0)=""/82, 0x52}, {&(0x7f0000005940)=""/204, 0xcc}], 0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x3, 0x4000) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) (async) close(0x3) (async) socket$can_j1939(0x1d, 0x2, 0x7) 9m29.701732658s ago: executing program 5 (id=2429): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001b00)={0x84, &(0x7f0000000640)={0x20, 0x31, 0x2, "8752"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000880)={0x60, 0x31, 0xf, "de9c800bd9c36ed43a0f3575d5c10b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x100, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x101}, 0x1c) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/156, 0x9c}], 0x4) 9m29.29275946s ago: executing program 5 (id=2430): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x11d, 0x0, 0x200e, 0x4, 0x401, 0x5cd, 0x3}) (async) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) (async) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x84) 9m28.56429487s ago: executing program 33 (id=2430): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x11d, 0x0, 0x200e, 0x4, 0x401, 0x5cd, 0x3}) (async) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) (async) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x84) 9m6.966615321s ago: executing program 2 (id=2493): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="775b6389e5ef32439abb670cd365d5d14d9e1575daf26f6a76ef96d2ed6659d37b3d0738a8ddf89b33b762ad5d67abcdabd09934ba680cce0b39df6e3cab077ac4675cbd91dedc3e278399db82f58331150f36ec4fa27da1931c57fd80776082ff3b57bd64fd06267197e90f2a00f4ec1564b46f1e7e14959bad8a4c38decc7f68d4c0cd136b6e3f769990fda7efa0cf9e0821f0896ce150a96d41ff78fd683a3b3cbf536023c354329cb4", 0xab}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xc8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}, 0x8004) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f0000000440)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x110d6c56, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x4}}, @uexit={0x0, 0x18, 0xb636}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x480, 0x0, 0x100000000, 0x8000000000000000}}, @wr_crn={0x67, 0x20, {0x8, 0x1000000}}, @wr_drn={0x68, 0x20, {0x7, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xba, 0x2}}, @wrmsr={0x65, 0x20, {0x32f, 0x9}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x4d, {"0f01c9c422bd28c6c4616956cf66b819000f00d0f2446d0f20c035100000000f22c0c481d1d4794d66b8a7008ee0c403617a5930286636450f015b00"}}, @nested_amd_vmsave={0x183, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x88, {0x0, 0x5, [@code={0xa, 0x68, {"c74424005d000000c744240200000000ff1c24c4a19176790fc744240000500000c74424020cbc26acc7442406000000000f011424c481d85ef1c402f91dfb470f01cf0f07b9b30800000f32c4e3e5482e29c4427d5813"}}]}}, @wrmsr={0x65, 0x20, {0x1c00008b2, 0x8}}, @rdmsr={0x66, 0x18, {0x9bc}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x7b, 0x7, 0x6, 0x3}}, @nested_load_code={0x12e, 0x66, {0x2, "66b861008ec8b9b00a00000f320f20d835080000000f22d82e2e430f080f20e035000100000f22e0c44399417cec0000c4835d7e3b00660f3a096c7c00002e676766410f38825c4bfd64430f2205"}}, @nested_load_code={0x12e, 0x75, {0x1, "660f388044825cc744240000480000c744240200000000c7442406000000000f011c24c74424000a000000c744240200000000c7442406000000000f0114242e2e4a0fc72f66b89a000f00d0101a450f01c336d9e1440f01c3360f01f8"}}, @nested_load_code={0x12e, 0x8d, {0x1, "66baf80cb8dc51aa83ef66bafc0cb800000000ef66400f38072fb805000000b9000000000f01c10f7826c7442400ea000000c74424020d000000ff2c2466400f3803ab00500000c7442400509b1304c744240200000000c7442406000000000f0114242e400f07c401adf9bf00000080c4c18210d9"}}, @nested_load_code={0x12e, 0x69, {0x0, "b9b7080000b802000000ba000000000f300f011e8f68288729e0430f0736450f005cccb048b83a310000000000000f23d80f21f835000000000f23f80f01c2660f38397c477a0f21f566430f3a4165fbbf"}}], 0x4d6}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x73, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @local, 0x1, 0x700, 0x1, 0x1}}) r4 = openat$incfs(r0, &(0x7f0000000a40)='.pending_reads\x00', 0x200501, 0x1e6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0xd, 0x8, 0x8, 0x20001, r0, 0x101, '\x00', r3, r4, 0x3, 0x0, 0x4}, 0x50) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000b00)) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'veth1_to_bond\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000b80)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000c00)={{r6}, "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"}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001c00), 0x103800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000001c40)='trusted.overlay.origin\x00', &(0x7f0000001c80)='./file0\x00', r1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000001dc0)={@my=0x0, 0x1}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e40), r7) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x60, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, &(0x7f0000001f80)={0x2, 0x6, @status={[0x41, 0xb0, 0x7, 0x3296, 0x1, 0xfffffffffffff324]}, [0x2, 0x6, 0x5a, 0xe4, 0x401, 0x4, 0x7fffffffffffffff, 0x9, 0x4, 0x10, 0x400, 0xda, 0x1ff, 0x7, 0x8, 0x1, 0x2, 0x1000000000, 0x3, 0xc512, 0x2, 0x2, 0x3, 0x9, 0x1, 0x7ff, 0x5, 0x2, 0x267, 0x82, 0x2780, 0x3, 0x23e3, 0x8, 0x3af35631, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0x3, 0xb, 0x4, 0x2, 0x7, 0x6a8, 0xdd6, 0xfffffffffffff2b1, 0x3ef4, 0x2, 0x0, 0xfffffffffffffff6, 0xffff, 0x5, 0x4, 0x2, 0x4, 0x6, 0xe, 0xfffffffffffffff7, 0x4, 0x2, 0x6, 0x8]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000002a00)=0x7fff) 9m6.866098547s ago: executing program 2 (id=2494): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9m5.88674614s ago: executing program 2 (id=2496): syz_open_dev$video(&(0x7f0000000200), 0x9, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x371a2000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) clock_adjtime(0x17, &(0x7f0000000000)={0xe8ad, 0x7, 0xc628, 0xfffffffff7ffffff, 0x8001, 0x7ff, 0x5, 0x3, 0x100000000000006, 0x200, 0x100000001, 0x4, 0x0, 0x4, 0x11, 0x3, 0xfffffffe, 0x1, 0xb, 0xfffffffd, 0x7f, 0x1, 0x11cf, 0x4, 0x9, 0x8000000c}) (async, rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x800000000000002, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x30, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, r1}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0xfff, 0x101, "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", 0x6, 0x4, 0x7f, 0x6, 0x4, 0xa, 0x2, 0x1}}}, 0x120) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1002, 0x3a, 0x8007ff, 0x1, 0x7fffffff}, 0x1c) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) socket$kcm(0x29, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async, rerun: 64) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (rerun: 64) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x42, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2002, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x2, 0xfa2, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000480)) (async) r8 = dup(0xffffffffffffffff) (async) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004"], 0x54}}, 0x20040816) (async, rerun: 64) ioctl$NBD_CLEAR_QUE(r8, 0xab05) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$nl_route(r2, 0x0, 0x4080) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x9244, 0x1, 0x41414270, 0xe, 0x401, 0x3, 0x5, 0x6, 0x0, 0x1, 0x0, 0x4}}) (rerun: 32) 9m5.756800871s ago: executing program 2 (id=2497): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000525000/0x4000)=nil, &(0x7f000052e000/0x800000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000b7b000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00009c5000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x7915, &(0x7f0000000240)={0x0, 0xefcc, 0x0, 0x0, 0x338}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r2 = io_uring_setup(0x3, &(0x7f0000000400)={0x0, 0xc8a1, 0x20000, 0x4, 0xc1, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f0020010000000000000000000000000001ff020000000000000000000000000001000022eb"], 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000001c0)) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r4 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r4) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 9m5.698773955s ago: executing program 2 (id=2498): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9m5.529134682s ago: executing program 2 (id=2500): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1ae, 0xfffffeff, 0x8113, 0x5, 0x0, 0x3, 0x7f}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x200000, {0x2}, 0x0, 0x9}, {"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", "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"}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1000000000000078, 0x0, [{0x8b564ade, 0x0, 0x100000000}, {0xc001001f, 0x0, 0xa}, {0x84b, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000024c0)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007dc000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) 9m5.184877403s ago: executing program 34 (id=2500): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1ae, 0xfffffeff, 0x8113, 0x5, 0x0, 0x3, 0x7f}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x200000, {0x2}, 0x0, 0x9}, {"c03274ac57b7322edacc2ec9d2ef14f1fad842cf9250df5940a343dc81344bd124b68b7aeff9200ce0896a9f36fd231be081837aab804ad9405f8b9e475905a471c6d59e09963933c99900915f7b6ce890b4aa75be7f5ec23a5bf4966f688bb1957cdaf11fbc8ee3ea50bcfdc571b89cfe94ddcb861157a47784a090e638c6f9209c15e097df8a5ea611c892cdd442fe82c0391d0b51ef8497bc1b17fea437b14e5258690df4752a3c270556a7ba0ccf45023c578b7bfce31c95d184087cc0ad17f776839554d35c96b53c01efac601edd57d95cdc9eb2e291fd188c514731038efbd9277609ad7372b1dcb4301126a99329aa26663634c17a43dcdc17b40a8c7cf7f80a579ac86752a08db06936cc08e285f1e36706640f124cdbef36cfe1a61ec16bb130d0a91a53e61c795915b7b59f4f3fbf70b9f7c397bb3c3f36d7f5e7b9c15c79ca3fbff8a10b9e4067fdbf5589a430b70003ce4bcfe6a611e83e7abc18df424116922baa212024f222e2befdad10ec3ea2a4c35fbf86be236bd11b636dfee48b75054a9cd3920b687df7b00aec77d562c8123d81238f1c1b2ce2c2224bbc49c1f6ae1e1b63e8848a50234230ae0eeb46af438d70319f8bf158fe12f5f4ac5ba499d082e36ae0706029bf2f37ab55b6d5b76dedff1f6fd228705320fb01ce788f53b5931f447a260f06ea43db2cf874a5aba7ed540c16dbf9b37a44ed197522cca8b4fdc02d558a3c44417ff4c512f9469a5193240f9c266a4546ec247e1fbb2fca898650c160b2e2f41dff9137f4691f4dc5114f4d7ec75c727017a6e8cfa567f064daffd9bce73986903ce53e04b073cf054c3aaa557bf532fce37f87fe50886f3231a917feaf7901fc2f74955bafd592f6eb6b4e65fda5266db3e3b3398bdb38c3b0a4e82926f5218eecfce4f179900cc0df8afc5e3153c2839b21d0c116dff80146061b24217c9799ca52d6f631074154715977587ef3f2dbd5d8ad88000a033e2777c0ee9d5062119a118ad177e1b6f175fa680b705799f0b84fd4c1354eb441cb9410e802a0fcb351a2bc3beb84e043392bdb5f9225b43e9b922e8462819a20d22a7c126d82b3c04989ef56cdae47a5981956ffd993b904ee96ec3c958f9a6eae29da4c9e1617a564ca7b577b98ce7c6c184edaec042a26218e8d111be028fa3883002932f76e991aaad092f60b9d24255442b599feee901cb9dc360e070d976c9fdb3705e52bfe04c50579e2b88ed44243f5f3ede549e3a34e35000ce0a63b103f516bdf56bbde225333f3f8fc952f87486025695ccd1776a6be416b43cfcbb880969a9f995182d825c5017916e2c74d15edc23609ba1156e232193847996cff927a9c4aa0d6b1d882e999c7a3afc69de7fe7e1208217e7408106f5dede7008d488d7373ed4e49faa5c7a923fe60f2c3ef232d032f82bed59d5e05fde133ff5e9d135feae248f66f4aa119cb12c5279004c90703c580c6b53d354bfa667eca8802fac65f0352e83c9aeba3114dfc886dcd99ac740e6937a06698f4e7cf4e619cb09274e9f3ee6d024d8601b6c688164f449adc22e671b2863320f35e9fbf9ae553a9cdf2dd406d84e2cbd67da959a0bc7b3b01a24a2b172383e4c1a8ac42152404a4a8d6e2034874da429e1f59a5b78b5dbd19c751c6d2850a23d85ae9606f2e6005475fefec09fcb5aa6eb43a481c0662d6118fd195340160241689e849147164149c3c3706ea85eb3de1eeca3d85d74ef87741710d89958cbb7475ff66606b8610247434970e7a59fa89ff69adc68a8aa7bec63670ea6bcb66dd881c00a7f9de1344a99ac84c11ab938f0c3e36a458d6f69153dcbe1ece1cd2a224ce50ec9e51f2675765d61bd7400ead2db057f4c4f00e6a1df8f30b38105b21f1c68ec81c7eb59b4d71c1bbd95ca18378c812878d771024999e328a0030d2e98250e75a41cb57075fd6a6bb3b7689eda1a54458b43b528360abe22e04711f6166181807ca96c7d918b9f090e19fda60597629ae2d72de91ac000924d601eb5e7f4854dd3b8c86f01035eae07d559c19e3f70d86c371169e464d7f09c3d9ecb976c2d2b5bbe19adbf6bbd09afa07d906cf18bc8b5867570182851ba939baeb4ac195064ec429b9d7cefd5030ddc880b4700a2feea9cbab7a80414b0eb4389a65cdcf3566472024475817b8490f31cce0f46be34dbce6a1494d64ab1f2f44c4ccd7a6aa3537d2724132298e97a1b7b69a45d495eed39ccf057079e44b24e8af6c9b15b1e53c526482586b42edb1ffba7f2052b852b73facb9cacf30965937619e65abc77025a0d7fb07e294a1d4a14a9dfb4777785e0ad35acde09d5cf971c284542070cc5baf01b286b3941ec9f01531ae63a086d563433ce881f091f67993c12fa8d8c65fbfe7c8849b6d0b725d03a225075ea322d568a9d682e771149d48fbb8a392f3da6d3e087c86bb04ec8eaf6963cf628e30f7e33c2622d2f41edfc882b3112ee18ffc0f2ee486cd8f837c590ba4674c91ab8142802894d0d53a00a0da9dd17a5d4eaf120b696d4b48c35fa74fa016eb3bc91d32b419ee4cbaa9344856c93d8054b2d083dd81544f310a6d26b396152b82832f4ab4b23fb323245c2c2c99ac350074e4c0443907885fa41e71aed548dc3c6fe3112ab8c956aeb817dd439b20f9b131cb845653931c4142edc76edd9c4f20471b322ad7c50063bda7436e6c4c3415c951722bc0a3fc759c081fef35ab1435bd69191fab79bfcc2f251207f73d2bbd048aff90ada93dcaed98fd0b8a422f653d70e48066b6256d3c444685f20d619f6f7addc8807d3e23e89e8beaa0fdfb472e2cf09fb45eb5c0760bef15827bd72d25f8d1fbf517b2b493f83f22f8ddc05b546e8dbc2eedaaa3916fdad853f845881d327153b613754e2ad71983d2ab583dcf654d5959e9760e21af181d1172cba71d63f9296fe98846c1823a176f86c9d8bb0ad206629dfd88ebf6b8e7489c63efac3d0618b1026f90eba4119d37c89adecb205e418684153d973f843e7e0aaf235d932a6942711266df85f8d1ae7e6eb698d215d2baffb24c8606b99e1487d187f3b95c6454665da11b74418843013b08b29957e2a4a4ee205d4b74ba04e691508721ec718bee6670cce9a43259b08fe3fdb143c960dd4096024f3762b751b35506156beb62fb58fa0f86e242cd6a85c0aa42d4aaa81dd93794aa22df0a11c957f630df7753487c7eb08b3c9d782301ac906834b97de6a8a92d26ba6fcad1a3201b3b3611579bf91c01941200dfb29c685d86db48d69e858aeb73d2d226659e32ab0e6dcadf15ed629dd1197bec7401fb9f01a0204c41dea6258a04ed299d6759d4cb38b78c302d810445015c4f952e0f70eebe2fad82d8aa908b7faf6fb126e98ede2bc8aed1cdd99c3e8e24546a4678418f4743578e2bbb9a27dbc10f2fd320871bb097260a30bcbaacb950b43f0a55b63d6d0fa4078981fe47a0da347802afed73dd90ea2d03923ecefa4a03e0220034984ca53be19c1f88a92c3f535361c0ae8107975c7d1f8383cabe14ff0771fa71384043b0635e16a152f54e8f02804e121d6d944da492763fb49a578b1f4687c010508bf01315aca3c29233dba4e006378ff9e263bab196422b3244b1fa37e191ffbb9dc87d093561471a040d41520ce23b4e5cc514c16d28775e73cf22adcd5f9bae222895d5636e8ce69bf7c3a127f470fc9637fff5719f65acfdcaeaf8bcc7628866a437d4bef0df1d5455941d4b41e242744323d00282aa0f515ac7eef64edc3885b125e0ee88b45ca0971f1264dc3bb9b62de0d5ed3ed43f4b47d8078f2b5a21123423921cb3729402ec172eb693bc561f12149875250fe5d7a3cf57ced04cb56315006a9bd1c30d7954b2047f945e028f164d477ca4817bdbbdc20afa93c353c1970fc9a5893c69d39cd08e64b3cd9d94a90d047a8ae2db3850ca0b32e8690012393cc4f0c1b36e9e3d1c70cea9ad82db7a5784e19547f5ece36a87ddb87a595ac0a451b3e57a8ee996644f3ef6fcea1e98207719bb438ae86e9302fd4fb6e5f6799f4c56184a5668859979a4fd3f13026ba51386efaa2a5fbff96f3290292a7a7ddfa923975ad477cf6e0b13f7fe74df029e54d55302dffd07f2fc7bd11d2b1813c8adbc76557d36b7f9f99a04bca6179a9f887dbfa1304814981bb1657c5b06f80b86fa7743c269e8af31dc5a6311ae4261a49762b4cee3971b269fa551ec03a1eabe2900a4be5489cab8e5adfc156335e2d906da60e761e39b2b460fdca2591e4109e1a380428a0a91e39215435a79ccc7cc8452438c1d12a62644a220dd419b338f02c12bbd10b15379f9a6c6f9ea3f3dcf03bfbcfd727f5f1da467f552bdbc16770d8bc2874940452b355fbf12b6d7e027d47da48f8df0085fc076363f9b81f737186cb09219ebefe2141abd4b339b0c158b0ab2a2e288cb213ab44dca03158051b74981de05039f00a7c2890b8d342e75eb4ec99f8671064f9c13b39b3d5d0cd3b51c6e07ed3f59fedfb61f7af12dd436d633d4c94d5964c65836b2deceac6f03f60aa63d280cb6bf0f2262139305ee7c266024408d53e06bf83fe2cab6e51720957680092478b5666882e8c62f2671ed41d310f6191b78c006c1e581c68916d061bb36007e81f5000781c893cf39f32e48b6e3cb8a6212200eec37568f9c5ee47ff6e6457934415dba01f83fef5534a8b512a60360df092249455b290feaaad8a1c6cc35522484dfb2036985680b04921b8e069d450b4a3fbef9b281a9c5a186b111e6772c5e7e6c128e14cae9a98571c1fa48e9e2e3f621ca7d1acf847060fdd73f7951dffef89acae73729445b9962e6ff3e6ec1708b7db8221ce4cc3285e25b66ddb235ebc1454598fdd1345ed4258ef9a656768041564d969c16f490792b4e218a3d4ee7d208c49849b44973c0f5f2a03506fc217ce94f384cdc9072ae121481359b10fb5ef462f6b3c2cd5439ec7498567d101675303886ad01d9f8d42e64965146ad121512c4c268fd1b6612939003ec7f15179ca66584ddcf8cdac0eea68b784cb33a94ef7a72fde599f041f54633c5c9dd945be0030bedfce1d9145da95ad1fa8c2b97eecf465bbf5ff1c3b0b301ae2e19ee4fcaee8fa5c2a3aa14e5369bd191a8d6eedc5502542b4d719125d8f49d038ad384c20f336b55661c388833edb8589a365defc89077040fc13f64bc943debd03f1c9d01c03af5e55bd2a6eea88687ae079bc1dc7734d2bbac595a60fff56aa33d4a82bb7bd898532c95ec923f8bc041656255700be1d0b100a6053601c36cc51a080dbd12624ccacac4773e747e3b0a9c2223abd943da11bfe89a61dd20bb0c174afb071692f01fd927ef09e2a043bd691554e757009e2eae2fab61385f9f9f12d96e4877a036aa8b69089e3741148bcbd6abc8c79770d47a57e74ecacb05a094a58c2e5d3cb3cbb010d76cc73dea4292fbc463ebd21d2353c75531b950eb1604eb9eb0b5c7214875c2256cea022caf0eee574bb72275fc97d85c9c19665bf4bbf6fcc88c58e3c8ac56101cbe3a1738cb303fc407725bab9ac5ed9bdaf01838a358a63523ba86eeba9ae12b88ca9010551ecea16b45a200eaeeee35f546cb93f84759ba8ff9dd985d320b6b477721c821aa5c10cf46c241d99e56e7da296da338872cd38bda664012fe7e44b052a36bbeb4d3f5f53ba7a8642dab777de240ab951ada45c7bd100c97a143003e9055a6ce5c8f9405e8c74ef3ffb6e8b03917c3febf63ea836ef42fa8da7eccec76", "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"}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1000000000000078, 0x0, [{0x8b564ade, 0x0, 0x100000000}, {0xc001001f, 0x0, 0xa}, {0x84b, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000024c0)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007dc000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) 4m20.189924673s ago: executing program 7 (id=3562): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = shmget$private(0x0, 0x1000, 0xbacc214ffa239947, &(0x7f0000ffc000/0x1000)=nil) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x16, r3, {r5, r7}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f00000005c0)={{0x1, r5, r8, 0x0, 0x0, 0x41, 0x7}, 0x7ff, 0x3, 0x8, 0x3, r9, 0xffffffffffffffff, 0x9}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r10, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 4m19.956553315s ago: executing program 7 (id=3563): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) mkdir(&(0x7f0000000200)='./file0\x00', 0x130) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x108c064, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 4m19.65892228s ago: executing program 7 (id=3565): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0xffff, 0x160, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x9}}}, &(0x7f0000000480)=0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r11, 0x0, &(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x101}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x4000, 0x2100, 0x2ed, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11de, 0x400, 0xfffffffe, 0x270, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) r14 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r14, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(r14, 0xc0287c02, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r15, @ANYBLOB="218800000000000014ec211613157850a87269646765000004000280"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="39c394f705916cff010000000000002dca353cf3f95cc25cdf1a5bebbf3a07a8", 0x20, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="4166b961a5c7"}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 4m17.156462185s ago: executing program 7 (id=3570): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) (async) r2 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) (async) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r5 = fcntl$dupfd(r1, 0x406, r2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2011}) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x20004}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x8, 0x5, "c917dd91ac"}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x4, 0x100}}, @l2cap_move_chan_req={{0xe, 0x67, 0x3}, {0x1, 0x81}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x463c, 0x9}}]}}, 0x20) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c001282f9cfce3b0e3d60746e6c2a002c000280140003002001000000000400000f000000000001140002e6fb00000000000000fd49de779f942bd8ad7666b4d66eba889357dd380d4be61bef49eadff384c631000000000000000000000000000000000436673d00ea49ef6fb9d1bccf5ed44c8f9b6eec7e339334c698085a84b29df871e8fb373ebc7f6e35e54c9f20b82df9a375a3fad797219652dfcdadd8a4d8dc98c28b5cd70c824d6a8984a6b66c709f379ad9f3acfc43460c8b1e23c5b4764c760d247f586d7767a83e56ed68bc3d6acd9f9cd624e544e84515892eac73e711a11243cccd64337a03d8e346e8db1f4d05b6ef59200200dc7fd33b82000000000000000000156826ba49bdc9ba6aad08b279b7f369e7cbde37888bac25af87ee61277c4c39f710bd455bfdcfb1fd"], 0x5c}}, 0x0) 4m16.980278192s ago: executing program 7 (id=3571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x25dfdbfd, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m16.432594862s ago: executing program 7 (id=3573): r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffffffffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x8, 0x1a51e639, 0x0, 0x7, 0x6, 0x56, 0x0, 0x0, 0x2, 0x1ab}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000006880)='./file0\x00', 0x1000, 0x800, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7fff, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 4m15.62970186s ago: executing program 35 (id=3573): r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffffffffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x8, 0x1a51e639, 0x0, 0x7, 0x6, 0x56, 0x0, 0x0, 0x2, 0x1ab}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000006880)='./file0\x00', 0x1000, 0x800, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7fff, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 25.127479978s ago: executing program 6 (id=4481): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7ff, 0x10, 0x6, 0xb}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r0, 0x6, 0x30, 0x0, 0x5}, &(0x7f00000000c0)=0x18) r1 = socket$inet6_sctp(0xa, 0x7, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r0, 0x3, 0x8}, 0x8) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105501, 0x8e) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0xd0a83603ddfc02dd) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x20, 0x0, [{@multicast1}, {}]}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@local, 0x0, 0x0, 0x90, 0x0, [{@broadcast}, {@initdev}, {@empty}, {@remote}, {@initdev}, {@loopback}, {@broadcast}, {@private}, {@dev}]}}) (async, rerun: 64) r4 = syz_ublk_setup_io_uring(0x233f, &(0x7f0000000340)={0x0, 0xc5c1, 0x80000, 0x2, 0x1e5}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) io_uring_enter(r4, 0x812, 0x630, 0x24, &(0x7f0000000480)={[0x5]}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f00000004c0)='\x00', 0x202c00, &(0x7f0000000500)={@_ha_fsid={[0xc26f, 0x8]}, {0x101, 0x4, 0x6, 0x9}}, 0x7d, &(0x7f0000000540), &(0x7f0000000580)=0x1}, 0x1, &(0x7f0000000640)=[{0x2, 0x8, &(0x7f00000005c0)='sit0\x00', &(0x7f0000000600)="f85b1624a0459b6433cffe11764ff4f41d72a73fd9f93557e6a63a24273ed1d6515251a4022f3b66c42734216cf1fc6b4be95ed7b96063", 0x37, 0x8}]}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000700)={0x36}, 0x1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x6, 0x80, 0x0, 0x800, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x89, 0xfffffff8, 0x6}}) (rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2331, 0x9, 0x8848, 0x36048, 0x1, 0x401, '\x00', r6, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x6, @void, @value, @value=r5}, 0x50) (async, rerun: 64) write$binfmt_register(r5, &(0x7f0000000880)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '.', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x43]}, 0x2b) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000940)={0x0, &(0x7f00000008c0)="ecc89faa537f2b5024b8146245b7605d19d86fa47229dded1cfb4e51fbee87dc7a68213aae378bf8ba1a7e89f8949e74f2a03146082b2d7a172377c1c8287fd54def227ce33763f1d8829dba04b483a5190f711aac26e3600b65f3a30acb0d5ce641f054d7e24fa46b838056cd", 0x6d}) (async) ioctl$RTC_UIE_OFF(r5, 0x7004) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x200400, 0x0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', r6, 0x2f, 0x8, 0x1, 0x7ff, 0x4, @mcast1, @remote, 0x40, 0x40, 0xf7f, 0x7ff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb0, r9, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0xf, 0x6, 0x100, 0x0, 0x0, {0xcf349ab4c69ccbb8, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x400c8) (async, rerun: 64) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000d40)={0x800}) write$binfmt_script(r8, &(0x7f0000000d80)={'#! ', './file0', [{0x20, '\x1e\x89}^\\+'}, {0x20, ')]+--*'}, {0x20, 'wlan0\x00'}, {0x20, '}&'}], 0xa, "97f90bad29cfdd07495e65c97b7e1ff59f3c1367fdd6402f1d094a1bfcdd106c6a0cc3bb764922aed7e85deaf89ba7f1b2d55e8b92d50ad2f8b1a370d5b3c50996462e39139918cc7a36a10c0b64a93b41a641bdc0b3acb8ae11ab739829f36fc3d53601b899fa6d615e745f97a885fff77a84f38a4c1a5787cb4813601ff4bbdb81cbfd52276b2fef40c0060544f2c2d6349e2683ddfb94"}, 0xbb) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000e40)={r0, 0x1}, &(0x7f0000000e80)=0x8) (async) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f0000000ec0)={0x89, 0x2, 0x9, 0x1, 0x1}) (async) r11 = openat$cgroup_int(r5, &(0x7f0000000f40)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000f80)=0x8, 0x12) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001000)={'filter\x00', 0x0, [0x1, 0x17dd, 0x400]}, &(0x7f0000001080)=0x44) 24.881078926s ago: executing program 6 (id=4482): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 23.110921803s ago: executing program 4 (id=4487): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x400, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) write$P9_RSTATu(r1, &(0x7f0000000200)={0x65, 0x7d, 0x1, {{0x0, 0x50, 0x8, 0x9, {0x20, 0x1}, 0x2000000, 0x0, 0x40, 0x9, 0xa, '\t%{^((.),%', 0xe, '.#!@+}%,-[*)\x16/', 0x2, ':[', 0x3, '(:('}, 0x0, '', 0xee00, r2, r3}}, 0x65) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x4d8000, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000002c0)=0x3) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x400800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000600)=0x7f, 0x4) (async) r9 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xc, 0x1000005, 0x30, r6, 0x20000000) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0xa1b0, 0x2000000, 0x1010, r6, 0x0) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000640)={0x0, 0x762f, 0x80, 0x0, 0x9f, 0x0, r6}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87e9, 0x0, 0x1, 0x381, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4318, 0x4000, 0x3, 0x3b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68df, 0x40, 0x0, 0x2be, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35de, 0x400, 0x2, 0x2dc, 0x0, r6}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001940)={0x2e, 0x10, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf883}, 0x0, 0x0, '\x00', {0x1, 0x332, 0x0, &(0x7f0000000940)=@buf_max_buf="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"}}, &(0x7f00000019c0)) (async, rerun: 64) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r9, r10, r12, &(0x7f0000001a00)=@IORING_OP_FADVISE={0x18, 0x31, 0x0, @fd=r5, 0x7, 0x0, 0x9, 0x5, 0x1, {0x0, r13}}) (async) r14 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0x5, &(0x7f0000001a80)=0x6, 0x4) (async) r15 = socket$netlink(0x10, 0x3, 0x15) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r15) sendmsg$NL80211_CMD_ASSOCIATE(r15, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x70, r16, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x6, 0x0, {0x8, 0x1ffb, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x2, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="586f437eae4d"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x0, 0x1ff, 0x2, 0x74d, 0x9, 0xa23d, 0x44e0, 0x0, 0xc, 0x8, 0x7ff, 0x9, 0x1, 0xe3, 0x0, 0x8a20]}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x840) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8, '\x00', 0x0, r6, 0x3, 0x5, 0x1}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008010}, 0x42008) (async) socket$tipc(0x1e, 0x5, 0x0) (async) getsockname$packet(r17, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ec0)=0x14) r18 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001f00), 0x40140, 0x0) ioctl$SNDCTL_DSP_SYNC(r18, 0x5001, 0x0) 23.016148741s ago: executing program 4 (id=4488): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400000000008000240000000011000038009000100407327c360000000050007401c0000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x3, 0xb}, {0xfff1, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x2, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe0, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0xbbaa, 0x3c, 0x1, 0x10000}, {0x21, 0x2, 0x2, 0xc, 0x9, 0xa}, 0xf99d, 0x5, 0x1d5a}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb8bb192d0b77562d}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000030}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) 22.255290466s ago: executing program 4 (id=4490): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x7, 0x1fff, r1, 0x0, 0x0, 0x3}]) fsmount(r1, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) 21.840892342s ago: executing program 4 (id=4492): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac0c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4008800) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x18, 0x2, 0xfffffffc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x800, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xbc>)\xa8\xc2\\8hu\xa2\r\xae\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNY\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00\xfa\x85\x81~\x8dlgn\xf6m\x7fQ\x82R\x00\xf7\xe4]\x83\xe6\xd6\xe1@\xcfj\x02\xf5\x1a\xf0\xacZf\xff\xec\x00\x8c]\xe1\xb1n\xa5A\xe4@\xd35\x89\x7f\xb5\xe8q\xe8\x9c\xe86\xf4\xe0\x1e\x82\xba\xfe/P+\v9\xc5\x84\xe25d\xceN\x03\xb7\xa0\x8a\xfd\xa9\x03o\x1d\x18\xe6\xdc\x97~s\x1eY\xbe\xae58\xad\xdbs\xcb}\xb0Z\x19\xb2\x8dD\xe8\xef\xb28\xdb5\xfc\x86\xfa\x91\x8aj\xd1\x90\xd1hk\xa5\xf8-\xd8\x82\xc4\x01h\xc1v\xf9\xb8\xb5\xd8\r\xddI\x9b\fk\xb11\x92\xb1\" \xc9\xe2{s\xd9R\x85\xae\xee\x98>)\xdd\xd4\xdb\"H\x83\xcag\x99Tk\x87\x05\x80\xd9\x8cZ\xdaj\xed\x1e\xcaa\x0f\x93t\b\xbc\x1c\xf2\xa6\xa9K\x8ai\xb62\x86\xaf=\xcb\xa3\x83B|I\x15\xb2\x9c\xbf\a\xd8\r\x0e!\xbf\xc5\xa0X\x1f\xcc;m\xd3\xb1\x1bQ\xbe.\xf5\x1e\xc5\xb3s\xd9\xb6p\x9f\x03\xd6~\xa8\x8f2\x0e\xfa\xc7\xbe\xbe\xc0\xeb\"\xdc\xe5\x18\x85\xa1 >5A)\x1c`\x03\xa3\x9e9\x14\x9c\x885\r\xfa?\x86\xdfq\xa8\xcc\x0e\xff\xb3\x98\xe1\x8d\t\xf3\x88Ur\xad\xb0\xaa\xa22C2\x15\xc6\xf8\xe3\xdc)\x80\a\nQS\nR\x9d\f\x1cded?\x0f\xfa7\xc2\x1c\x8d\x96\xfd\x8f\x1eh;c,\x83\v\xc2\x97\xcc\b\x0eT\x9c\r\\\x1f\xea-Z2!,\x928g\xca\xf8t\x7f\xea\xb8E\xc8\xb8\x94\xf1\x1fN\x1a\xa4\x96V\x9f\xe5\x1dD\xa5KB\x15mE\xcb\x11\xe6\x12\xe2Fe\xff\t\x1f\xc9\xfe_b\xdb\x9d\x17\x03*\xa0\x89!j *K\xf7\xd8R\xe7\x8c\x00\xdc\xbdXs6\xf4s\x02!\xb5G\\\xb4\xe2,\x98+\xa2`D\fA9\xd6\xe3\xe6\x1e=S,\xda\xe6\x9a\xeb\x98\a\r+\xebgaQ\xfd?.\x19j2Z;DWB\xd0\xf0\xcbUE}\x87?\xc1~(\xba\xd3\xeaT)\xa8,\xda\t\xb89\x8aA-\x84Fq', 0x5) (rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) 21.763518334s ago: executing program 6 (id=4493): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000002380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030fffe00008006907864010102ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04000000f1fffffffd06e2d4c3d9000035c18e698b99d59975a9f69e091c4bfbdc86a264d8f7b2470d1a5d67022ccfd8f5f4b0f5518bfc6e7098df3c50dfb067f54d06102c79ede2c7fadae09a7cef969ca9a69dbdfffefe17c20339f7641fc77f8b441a8aed140b9d2762f67d4cd1058cfae01055c96f"], 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x70) sendmsg$nl_route(r3, &(0x7f0000002340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a00c9ea91ec9100ffdbdf2540000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80c00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000002c00)=@buf={0x85, &(0x7f0000002480)="0776cfc99d58738e05b42493d54747e08414a675d824d924ef8b000000008b797c04508ec4b254bb35c521beaef8cb8959dc8b6660bdb6a9d71a2d8fca2ee02abd5377978f8fe977746e8868dad787ff9262d7d3cb01c408f6b9528b78214fb8987603555ef9477f6574e8b42b6d4e30272ea69e345d9d1b40914214031e00000000000000"}) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='w\x00\x00\a', @ANYRES16=r6, @ANYBLOB="00012dbd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x60}}, 0x20000040) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0x12b}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000002440)={0x0, 'vlan1\x00', {}, 0x9}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000a0000008000048013000100"], 0x94}}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="200000004900010000000000000000000a00ff"], 0x20}}, 0x20048800) 21.70936676s ago: executing program 3 (id=4494): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) (async) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) (rerun: 64) close_range(r7, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) io_setup(0xffff, &(0x7f0000000140)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) (async) splice(r8, 0x0, r0, 0x0, 0x7ffff000, 0x1) 21.400804921s ago: executing program 4 (id=4495): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) write$tun(r0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10103c, 0x140) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = memfd_secret(0x80000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158, 0x0, r2}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0xa9525000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) close(0x3) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 21.333240596s ago: executing program 3 (id=4496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000006c000000060a010400000000000000000100000008000b40000000003c0004803800018008000100636d70002c0002801800038013000100e0aceee72f0f1820a9986d354d3ff01d080002400000000008000140000000150900010073797a30"], 0xe0}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x6, 0x59ee}, 0x8) fcntl$notify(r6, 0x402, 0x30) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r8, 0x402, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000003c0)=@v2={0x2000000, [{0xf18, 0x8}, {0x5, 0x401e08ae}]}, 0x14, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x4, 0x8}, 0x0) brk(0x200000ff8000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x2001, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46d4, 0x1, 0x3, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x6, 0x1, 0x8001}, &(0x7f0000000080)=0x14) 21.133327213s ago: executing program 6 (id=4497): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000200)={0x0, 0x6, 0x300a, 0x1}) syz_emit_ethernet(0x68, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b3c359", 0x32, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f84bd7", 0x0, 0x2c, 0x0, @private1, @private2, [], 'b*'}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40040, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @local}, 0x14) clock_gettime(0xcfdaa23332a70b96, &(0x7f0000000140)) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffaa, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="896232195b", @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100050000080500010004"], 0x4c}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) 21.008699094s ago: executing program 8 (id=4498): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1af90}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80), 0x4000000000000120, r3, 0xeeeeeeee}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4048991) 20.874455762s ago: executing program 3 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a01010000000000000000000000000000070073797a31000000000900010073797a310000000020000380180000800c00018006000100d103000008000340000000010400000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 18.256448766s ago: executing program 4 (id=4504): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)={[&(0x7f0000000440)='\x8c*]:}\x00']}, 0x800) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000000180)="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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x800}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x201d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x43, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 16.197973344s ago: executing program 1 (id=4506): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xb559, 0x80, 0x2, 0xbd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x4, r2, 0x0, 0x0, 0x0, 0x10140, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68b6, 0x0, 0x0, 0x10}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000c3e000/0x4000)=nil, &(0x7f0000d08000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r7}, 0x25) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r13, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r13, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r12, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r14, r13, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) 12.480825891s ago: executing program 1 (id=4507): syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) setxattr(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='c'], 0x0, 0x0, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket(0x11, 0x3, 0x7fffffff) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000001880)={0x3, r5, 0xfff, 0x3ff, 0x2, 0x944}) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000140)=0x7, 0x4) setns(r3, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000028c0)={{r0, &(0x7f0000002900)='5\x1cO\x9ec*&1>\x16\xbf\xe5E\xd0\xc0:P\x91\xc3>Cz\xf6\xa4\x19\x9d\x86\x82\xb9b\x1d\x89\x88}/\xf0\x8f\x1bj\xe5\x97\x04\xbb\x05\x7f\xc8\xf0', 0x44082, &(0x7f0000000400)={@_ha_fsid={[0x7, 0xffffffff]}, {0x0, 0x7, 0x40005, 0x7fffffffffffffff}}, 0x8002, 0x0, &(0x7f0000002800)=0x3}, {[0x10000, 0x3, 0x3, 0x9]}, 0x8001, 0x7c, &(0x7f0000002840)=""/124}) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x75, {{0x2, 0x4e23, @empty}}}, 0xe8) unshare(0x24060400) 10.673008632s ago: executing program 8 (id=4508): socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x5, 0x2934) write(r1, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x101441, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010029bd0000ffdbdf2500000000", @ANYRES32=r0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0xf2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfc}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0xf4, 0x7}]}) r9 = msgget$private(0x0, 0x4a0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r9, 0x2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x9, 0x102000000000001, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0xffffffffffff574b, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.595152983s ago: executing program 3 (id=4509): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x7f6b3000) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8080) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) (async) r5 = gettid() tkill(r5, 0x12) (async) fcntl$setown(r2, 0x8, r5) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101, 0xf83, 0x5}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r9, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.368268266s ago: executing program 6 (id=4510): openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffff, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x2, 0x2c, 0x2, 0x6e, 0x20}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7, 0x18}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x6, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getaddr={0x14, 0x16, 0x10, 0x2070bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000002400)=[{0x5, 0x8400, 0x1, &(0x7f0000002340)="8c"}], 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000d40)=[@wr_drn={0x68, 0x20, {0x4, 0x7fffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x202b, 0xc, 0xb745, 0xd}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}], 0xa0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x898, &(0x7f0000000040)={0x0, 0x80000000, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0x700, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.367458333s ago: executing program 3 (id=4511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xeff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x100, 0x80, 0x8, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x4, 0x7, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0xfffffffe, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80000001, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0xb, 0x3ff, 0x84, 0x0, 0xe, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x6, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f4, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x7, 0x5, 0x2f, 0x80008, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8002, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x100005, 0x2, 0x2, 0x5, 0x20000008, 0x4, 0x6cff, 0x6, 0x40038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x24], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0x2, 0x9d2, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0216e8050a0000002dbd7000fcdbdf250804120003000300b76b6e000400000006006c000300000001000000000000000000000000000000000080ff000000000a010100000000000000000000000000fcf27c79c6"], 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) 9.684263358s ago: executing program 1 (id=4512): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = shmget$private(0x0, 0x1000, 0xbacc214ffa239947, &(0x7f0000ffc000/0x1000)=nil) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x16, r3, {r5, r7}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f00000005c0)={{0x1, r5, r8, 0x0, 0x0, 0x41, 0x7}, 0x7ff, 0x3, 0x8, 0x3, r9, 0xffffffffffffffff, 0x9}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 9.464318909s ago: executing program 8 (id=4513): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x2, 0x0, {0x15, 0x4, 0x1, 0x39, 0x2, 0x64, 0x88, 0x0, 0x29, 0x4, @empty, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @end, @timestamp_addr={0x44, 0x14, 0x87, 0x1, 0x7, [{@multicast1, 0x80000001}, {@multicast2, 0x81}]}, @ssrr={0x89, 0x13, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102, @multicast2]}, @cipso={0x86, 0x10, 0x3, [{0x7, 0xa, "3607a2b59dd9cbf7"}]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35b]}}) 9.32704288s ago: executing program 8 (id=4514): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x8, &(0x7f0000000240)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010600000000000000000a0000010900010073797a3100000000300004802c0001800900010068617368000000001c0002800800024000000014080004400000000008000740000000100900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) poll(&(0x7f0000000040)=[{r5, 0x8188}], 0x1, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.325851813s ago: executing program 1 (id=4515): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r3, 0x0, 0x2, 0x5, &(0x7f0000000400)="697ab143ae", 0x4}) r4 = socket(0x10, 0x803, 0x0) r5 = signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffff801]}, 0x8, 0x80000) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4000001) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={{r6, r7/1000+10000}}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e0e000c800b4806558000000001000"], 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r11, &(0x7f0000000040)='reno\x00', 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) 9.08448165s ago: executing program 8 (id=4516): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) close(0x3) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x9f0, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x9c0, 0x2, [@TCA_BASIC_ACT={0x1e4, 0x3, [@m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x84, 0x6, "5a0ca25b7438c93246018f7c82a55b68a84eb3c64c14f5bdb3e75689c3512fcad0130f85654dca4d3e84da923d3cb1a96373aded8a837044fe3fd52e5a2690c87d84ab8c90fef034383b9bb884867930aa980cac9377b78749f1f1fed0ea5b718a4858ed29e37e4f6aa3f09976e62961c07626f5f240935fd35064c82087568a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x100, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x710, 0x20000000, 0xb, 0x80000000}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0xffffffff, 0x8, 0xf, 0x6}, 0x1, r1}}]}, {0x91, 0x6, "371a038d0cce3b434eb7849ef817695c8f3e9fd425d251d9c7203cd92463ac21147e14e5319a8b444160566dad756f99520525e6e701cf3436f996322b877ebe743d60cde1d2e8e48c3f329fc9dd3c14ef5e6135d99ee96ca12bc1d57def7ef0720a1af17c20f8d0d8dc89ae11a3124dce86f79a737ce298854a6ad8407ee7b85e14e3c04d111a010697397d9c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xd}}, @TCA_BASIC_ACT={0x7d0, 0x3, [@m_gact={0xb8, 0x15, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2eb, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10fd, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f07, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x35e, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x63, 0x10000000, 0x91e, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x441, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3e1}}]}, {0x2c, 0x6, "304feed9fc93ceb3f64b7c11320c697cacdd9bdf0e58353da64c13fa3bff39cf582098a31699822a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x16c, 0x5, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1671, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x7, 0x1, 0x4, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x3, 0x7, 0x2, 0xfffffff7}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0xb0, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xb}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}]}, {0x63, 0x6, "73bcad7df272c95b8333dce4f84c02da0e7a17ac5627c40311f30ab4c6224fe14f0d09a06271887a013d754876d18a86a97518135a0c6d9bf005750a07f17c42234bff8e5e20f05fb4e2989a34d5c94a436a3717c01736f785cdacdd6764bd"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}, @m_mirred={0xd4, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x40, 0x20000000, 0x2, 0x58db}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x576131b2, 0x2, 0x0, 0x0, 0x8000}, 0x3, r1}}]}, {0x68, 0x6, "1e6a1d059ba2f0a92d45998e08b6f5de928a4d80e5ae9c62af9fffb62e5a0c01e594e2fe1816d81021cb60b95c2c2dbaa4ed4fe9a3e71e5a96cf835d810e80389fb37a2f8bb66213480cce6c2237e74a2837644d648b9c5184cdca371580d5b276691ea7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x150, 0x1f, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_PARMS={0x18, 0x1, {0x10000, 0x99, 0x10000000, 0x0, 0xffff}}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x9, 0x10000000, 0xc00000, 0x200}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0xb6, 0x6, "f48d3bf0d0b9b7cacadf53c03533e3e4ec64d63e57a6df26b062754898c2fd21a0de5f78aa2f800277faa78d33926ad3f88015a7915d037e143a46cb8fa24449ec266ed5bf25a8d3b33f3db1a1bbaa0926aa53755b5a107ec02b3f7f6163ae10c5578f97a477fed829338815bc4de162a2b21d829ae0948f81fcb88de4c6fc055ddf42e4fa99de646a1e5fd30e9f59590e6a4832dd95674852f4116db2eae0fe0f0021235fa9fe22f7de347ad5184c049260"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x108, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x81}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xc1, 0x6, "24c681aecd24535b5901dccc5bcb8e394af7c5c35f2b3ffae23d4de2b44b61aa2d32b8ca1f576186dfa7d021dc3622d7f035639f4b49cb7c7c04d0dbedc4d804e967839da6f2a57e5926ad09fc61612e5458fbc2f4c0af67f2c110c66853ee6c4147f4a77f4d3556a7900111bd0aaf7e775a9a8b634942f3c470a670b598ca38e290b44277f2cfb28b5504a1f4766412de7dc60d1d66b07f8c6af8470ee2eb32d74197bb58c890bd5bcfd4ce2f1a34138a0992436460491db63937d28c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x138, 0x12, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0x5, 0x5, 0x6}, {0xf5, 0x1, 0x2, 0x200}, {0x3ff, 0xa, 0x6, 0x10001}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xcb5e, 0x1ff, 0x10000000, 0x4, 0xa}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0xab, 0x6, "f1e3ba12f4bff35c8984e921523c1ad6f1b710c4df70c347ad4bea4fc733e762a4738b9f59a90c69526753d6ed612a1df0e2952b7089e2526661ef3b11d12a2edfadda60530a6af6f17426a0ac4edeaed0646e7fc11f5429ba1f92735e65cbbd5e11dcf06557ba3ab0ba7de77a63c49d8fcc9e5c426f0deed4694b1a47d142fa2c824d6ede9c58f501722f41863eef74fc6f9ddd8640165bc8ad488827ea0755d02b2bafadc4a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x94, 0x1b, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xb9, 0x80000001, 0x5, 0x8001, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xb7ed, 0x1}}, @TCA_DEF_DATA={0x6, 0x3, '\'\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x20000000, 0x0, 0x9840}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0xb, 0x6, "bf34c324ba6d2c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.14283832s ago: executing program 36 (id=4504): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)={[&(0x7f0000000440)='\x8c*]:}\x00']}, 0x800) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000000180)="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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x800}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x201d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x43, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 1.323430162s ago: executing program 8 (id=4518): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x10012, r0, 0x0) socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_proto_private(r1, 0x89e3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0xff7}], 0x3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.271226444s ago: executing program 6 (id=4519): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2000008, 0x3b6}) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x6145, 0x7721, 0x17, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.196670155s ago: executing program 3 (id=4520): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=[r1], &(0x7f0000000280)=[0x9, 0x60, 0x7, 0x6, 0x44f, 0x4], &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000540)={0x0, @frame_sync}) 1.04129459s ago: executing program 1 (id=4521): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x38, 0x4c00}, 0x810) mkdir(&(0x7f0000000140)='./control\x00', 0x152) r1 = inotify_init1(0x800) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f00000001c0)='./control\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r4, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0x4, 0x4, {0x4, 0xfffffffffffffffb, 0x100, 0xa5, 0xa, 0x2000000000000008, 0x800008, 0xfff, 0x10000008, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0cc7dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000a000000000005001e0000000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x44810}, 0x4040) syz_clone3(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=4522): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000004000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000950048b56fec14ab85004b2a0f004000000000"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0xfffffffd, 0x80800) (async) r1 = eventfd2(0xfffffffd, 0x80800) fsetxattr$security_ima(r1, &(0x7f0000003980), 0x0, 0x0, 0x3) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) (async) r2 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000180)=0xda) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000180)=0xda) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/250, 0xfa}], 0x1, 0x7fffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/250, 0xfa}], 0x1, 0x7fffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[]) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3fc, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwritev(r6, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) (async) pwritev(r6, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) kernel console output (not intermixed with test programs): 8 [ 1437.786582][T11496] udevd[11496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.922436][ T42] usb usb46-port1: unable to enumerate USB device [ 1438.523066][T22303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.597837][T22303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.739929][T12370] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1438.924275][T12370] usb 7-1: Using ep0 maxpacket: 16 [ 1438.986157][T12370] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1439.025576][T12370] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.071369][T12370] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1439.114109][T12370] usb 7-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1439.216801][T12370] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1439.284273][T12370] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1439.363908][T12370] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1439.401593][T12370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.464981][T12370] usb 7-1: Product: syz [ 1439.495288][T12370] usb 7-1: Manufacturer: syz [ 1439.516177][T12370] usb 7-1: SerialNumber: syz [ 1439.807348][T12370] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1439.828282][T12370] cdc_ncm 7-1:1.0: bind() failure [ 1439.846440][T12370] usb 7-1: USB disconnect, device number 25 [ 1440.451185][T22320] syzkaller0: entered promiscuous mode [ 1440.467113][T22320] syzkaller0: entered allmulticast mode [ 1440.753522][T22324] loop5: detected capacity change from 0 to 7 [ 1440.762202][T22324] loop5: p1 < > p3 p4 [ 1440.768929][T22324] loop5: partition table partially beyond EOD, truncated [ 1440.785456][T22324] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1440.796565][T22324] loop5: p4 start 33554432 is beyond EOD, truncated [ 1440.889324][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1440.903715][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1441.190016][T12370] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1441.359932][T12370] usb 2-1: Using ep0 maxpacket: 16 [ 1441.370874][T12370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.387703][T12370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.401605][T12370] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1441.418638][T12370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.432858][T12370] usb 2-1: config 0 descriptor?? [ 1441.890210][T12370] usbhid 2-1:0.0: can't add hid device: -71 [ 1441.907979][T12370] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1441.976824][T12370] usb 2-1: USB disconnect, device number 58 [ 1441.986012][T22332] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1442.316434][T22339] netlink: 'syz.3.4275': attribute type 3 has an invalid length. [ 1442.338113][T22339] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1442.540059][T19773] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1442.680324][T19773] usb 4-1: device descriptor read/64, error -71 [ 1442.940112][T19773] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1442.969593][T22343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.977488][T22343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.091521][T19773] usb 4-1: device descriptor read/64, error -71 [ 1443.210954][T19773] usb usb4-port1: attempt power cycle [ 1443.228011][T22343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.264342][T22343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.581202][T19773] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1443.632492][T19773] usb 4-1: device descriptor read/8, error -71 [ 1443.671284][ T12] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.694767][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.725435][T11067] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.744496][T11067] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.764743][T11067] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.784732][T11067] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.889973][T19773] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1443.924358][T19773] usb 4-1: device descriptor read/8, error -71 [ 1444.040707][T19773] usb usb4-port1: unable to enumerate USB device [ 1444.368777][T22357] sctp: [Deprecated]: syz.6.4283 (pid 22357) Use of int in max_burst socket option. [ 1444.368777][T22357] Use struct sctp_assoc_value instead [ 1444.548649][T22360] netlink: 'syz.8.4284': attribute type 1 has an invalid length. [ 1444.595274][T22364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1444.926072][T19773] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1444.942565][T22375] kvm: kvm [22361]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1445.080084][T19773] usb 2-1: Using ep0 maxpacket: 32 [ 1445.087583][T19773] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1445.104645][T19773] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1445.129470][T19773] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1445.148361][T19773] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1445.162212][T19773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.177259][T19773] usb 2-1: Product: syz [ 1445.186235][T19773] usb 2-1: Manufacturer: syz [ 1445.194850][T19773] usb 2-1: SerialNumber: syz [ 1445.205397][T19773] usb 2-1: config 0 descriptor?? [ 1445.467701][T22379] loop5: detected capacity change from 0 to 7 [ 1445.489981][T22379] loop5: p1 < > p3 p4 [ 1445.495825][T22379] loop5: partition table partially beyond EOD, truncated [ 1445.510211][T22379] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1445.530819][T22379] loop5: p4 start 33554432 is beyond EOD, truncated [ 1445.655222][T13487] udevd[13487]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1445.669506][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1446.254328][T22391] syz_tun: entered allmulticast mode [ 1446.406991][T22392] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[21988] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[22392] [ 1446.867312][T22391] syz_tun: left allmulticast mode [ 1447.219827][ T42] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1447.240277][T19773] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 1447.275399][T19773] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1447.380001][T17119] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1447.432200][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.468955][ T42] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1447.481188][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.500686][ T42] usb 5-1: Product: syz [ 1447.520192][ T42] usb 5-1: Manufacturer: syz [ 1447.532606][ T42] usb 5-1: SerialNumber: syz [ 1447.539818][T17119] usb 7-1: Using ep0 maxpacket: 16 [ 1447.551082][ T42] usb 5-1: config 0 descriptor?? [ 1447.590366][T17119] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.607874][ T42] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1447.641333][T17119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1447.687743][T17119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1447.717818][T17119] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1447.764324][T17119] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1447.796259][T17119] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1447.814780][T17119] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1447.832250][T17119] usb 7-1: Manufacturer: syz [ 1447.883537][T17119] usb 7-1: config 0 descriptor?? [ 1448.270122][T17119] rc_core: IR keymap rc-hauppauge not found [ 1448.282892][T17119] Registered IR keymap rc-empty [ 1448.293365][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.330471][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.365800][T17119] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1448.399191][T22399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.410462][T22399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.423721][T17119] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input115 [ 1448.456045][T22399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.480435][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.502444][T22399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.511907][ T42] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input116 [ 1448.538053][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.585201][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.639899][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.700297][ T42] usb 5-1: USB disconnect, device number 59 [ 1448.715260][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.789915][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.860024][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.890233][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.959979][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.990427][T17119] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.003246][T22425] usb usb8: usbfs: process 22425 (syz.4.4297) did not claim interface 0 before use [ 1449.052457][T22425] usb usb8: selecting invalid altsetting 5 [ 1449.110412][T17119] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1449.138498][T17119] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1449.211539][T22401] bond3 (unregistering): Released all slaves [ 1449.353562][ T24] usb 2-1: USB disconnect, device number 59 [ 1450.392304][T17119] usb 7-1: USB disconnect, device number 26 [ 1450.423217][T22434] loop5: detected capacity change from 0 to 7 [ 1450.445441][T22434] loop5: p1 < > p3 p4 [ 1450.466151][T22434] loop5: partition table partially beyond EOD, truncated [ 1450.547372][T22434] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1450.579076][T22434] loop5: p4 start 33554432 is beyond EOD, truncated [ 1450.749513][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1450.784969][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1450.989890][T17119] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1451.176318][T17119] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1451.203005][T17119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.231550][T17119] usb 7-1: Product: syz [ 1451.274492][T17119] usb 7-1: Manufacturer: syz [ 1451.287063][T17119] usb 7-1: SerialNumber: syz [ 1451.341856][T17119] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1451.362839][T12370] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1451.515749][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1451.660686][ T42] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1451.729339][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4307'. [ 1451.859966][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1451.869062][ T42] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1451.888115][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1451.910093][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.928680][ T42] usb 5-1: Product: syz [ 1451.940120][T19773] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1451.948593][ T42] usb 5-1: Manufacturer: syz [ 1451.955127][ T42] usb 5-1: SerialNumber: syz [ 1452.049411][ T42] snd-ua101 5-1:1.1: invalid format type [ 1452.081506][ T42] snd-ua101 5-1:1.0: invalid num_altsetting [ 1452.090202][T19773] usb 2-1: device descriptor read/64, error -71 [ 1452.185304][T22444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.201486][T22444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.315153][ T42] usb 5-1: USB disconnect, device number 60 [ 1452.339882][T19773] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1452.439991][T12370] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1452.447349][T12370] ath9k_htc: Failed to initialize the device [ 1452.481120][T12370] usb 7-1: ath9k_htc: USB layer deinitialized [ 1452.482158][T19773] usb 2-1: device descriptor read/64, error -71 [ 1452.612103][T19773] usb usb2-port1: attempt power cycle [ 1452.890807][ T42] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1452.945270][T22467] loop5: detected capacity change from 0 to 7 [ 1452.954218][T22467] loop5: p1 < > p3 p4 [ 1452.958495][T22467] loop5: partition table partially beyond EOD, truncated [ 1452.968936][T22467] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1452.976706][T19773] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1452.986808][T22467] loop5: p4 start 33554432 is beyond EOD, truncated [ 1453.012330][T19773] usb 2-1: device descriptor read/8, error -71 [ 1453.063492][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.083077][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1453.088876][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1453.104414][ T42] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1453.114376][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.135792][ T42] usb 4-1: config 0 descriptor?? [ 1453.259916][T19773] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1453.281639][T19773] usb 2-1: device descriptor read/8, error -71 [ 1453.391670][T19773] usb usb2-port1: unable to enumerate USB device [ 1453.566799][ T42] keytouch 0003:0926:3333.0068: fixing up Keytouch IEC report descriptor [ 1453.592069][ T24] usb 7-1: USB disconnect, device number 27 [ 1453.623387][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0068/input/input117 [ 1453.779656][ T42] keytouch 0003:0926:3333.0068: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1454.139872][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1454.294846][ T42] usb 4-1: USB disconnect, device number 64 [ 1454.303188][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1454.318473][ T24] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1454.341205][ T24] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1454.362030][ T24] usb 7-1: config 0 has no interface number 0 [ 1454.370276][ T24] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.385561][ T24] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1454.403802][ T24] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1454.442064][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1454.456633][ T24] usb 7-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1454.471581][ T24] usb 7-1: Product: syz [ 1454.475865][ T24] usb 7-1: Manufacturer: syz [ 1454.496752][ T24] usb 7-1: config 0 descriptor?? [ 1454.513045][T22477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1454.736524][ T24] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input118 [ 1454.924307][T22485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1454.995400][T22485] ip6gre1: entered promiscuous mode [ 1455.011477][T22485] ip6gre1: entered allmulticast mode [ 1455.263616][T22501] fuse: Bad value for 'fd' [ 1455.381231][T17119] usb 7-1: USB disconnect, device number 28 [ 1455.381452][ C1] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1455.400889][T22504] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4319'. [ 1455.546305][ T5636] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1455.584446][T22510] loop5: detected capacity change from 0 to 7 [ 1455.609079][T22510] loop5: p1 < > p3 p4 [ 1455.623799][T22510] loop5: partition table partially beyond EOD, truncated [ 1455.661972][T22510] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1455.680539][T22510] loop5: p4 start 33554432 is beyond EOD, truncated [ 1455.764333][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1455.785752][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1455.802435][T22515] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4325'. [ 1455.909897][T17119] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1456.070143][T17119] usb 7-1: Using ep0 maxpacket: 8 [ 1456.084858][T17119] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1456.109921][T17119] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1456.129194][T17119] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1456.141916][T17119] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1456.152969][T17119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 1456.164496][T17119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 1456.175810][T17119] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1456.195258][T17119] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1456.204898][T17119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.213096][T17119] usb 7-1: Product: syz [ 1456.218260][T17119] usb 7-1: Manufacturer: syz [ 1456.229790][T17119] usb 7-1: SerialNumber: syz [ 1456.244437][T17119] usb 7-1: config 0 descriptor?? [ 1456.267885][T22513] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1456.291832][T17119] hub 7-1:0.0: bad descriptor, ignoring hub [ 1456.301960][T17119] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1456.324373][T17119] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input119 [ 1456.591495][T17119] usb 7-1: USB disconnect, device number 29 [ 1456.708607][T22521] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4326'. [ 1457.149880][ T42] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1457.329849][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 1457.344623][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1457.378101][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1457.399433][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.435104][ T42] usb 5-1: config 0 descriptor?? [ 1457.664005][ T42] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1457.865890][T17828] usb 5-1: USB disconnect, device number 61 [ 1457.872081][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1457.907396][T22548] hsr0: entered allmulticast mode [ 1457.920171][T22548] hsr_slave_0: entered allmulticast mode [ 1457.932234][T22548] hsr_slave_1: entered allmulticast mode [ 1457.948799][T22543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1457.985727][T22549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4334'. [ 1458.004867][T22549] hsr_slave_0: left promiscuous mode [ 1458.013752][T22549] hsr_slave_1: left promiscuous mode [ 1458.020028][T22552] loop5: detected capacity change from 0 to 7 [ 1458.055078][T22549] hsr0 (unregistering): left allmulticast mode [ 1458.300251][T22552] Dev loop5: unable to read RDB block 7 [ 1458.311276][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1458.317472][T22552] loop5: unable to read partition table [ 1458.321277][ C1] buffer_io_error: 16 callbacks suppressed [ 1458.321295][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1458.342842][T22552] loop5: partition table beyond EOD, truncated [ 1458.349202][T22552] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1458.570573][T22558] syz_tun: entered promiscuous mode [ 1458.586781][T22558] syz_tun: left promiscuous mode [ 1458.597313][T22562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.766920][T22569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4339'. [ 1458.988400][T22577] netlink: 'syz.3.4340': attribute type 10 has an invalid length. [ 1459.421368][T22577] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1459.527096][T22593] openvswitch: netlink: Actions may not be safe on all matching packets [ 1460.546467][T22614] FAULT_INJECTION: forcing a failure. [ 1460.546467][T22614] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.635326][T22614] CPU: 0 UID: 0 PID: 22614 Comm: syz.4.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.635363][T22614] Tainted: [L]=SOFTLOCKUP [ 1460.635371][T22614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1460.635385][T22614] Call Trace: [ 1460.635394][T22614] [ 1460.635404][T22614] dump_stack_lvl+0xe8/0x150 [ 1460.635445][T22614] should_fail_ex+0x40c/0x560 [ 1460.635476][T22614] should_failslab+0xa8/0x100 [ 1460.635512][T22614] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1460.635539][T22614] ? security_file_alloc+0x34/0x310 [ 1460.635567][T22614] ? security_file_alloc+0x34/0x310 [ 1460.635603][T22614] security_file_alloc+0x34/0x310 [ 1460.635636][T22614] init_file+0x90/0x2b0 [ 1460.635666][T22614] alloc_empty_file+0x74/0x1d0 [ 1460.635695][T22614] alloc_file_pseudo+0x115/0x1e0 [ 1460.635727][T22614] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1460.635767][T22614] __shmem_file_setup+0x2e9/0x370 [ 1460.635806][T22614] ? __pfx___shmem_file_setup+0x10/0x10 [ 1460.635851][T22614] shmem_zero_setup+0x90/0x130 [ 1460.635876][T22614] mmap_region+0x1974/0x2310 [ 1460.635921][T22614] ? __lock_acquire+0x683/0x2cf0 [ 1460.635979][T22614] ? __pfx_mmap_region+0x10/0x10 [ 1460.636011][T22614] ? __lock_acquire+0x683/0x2cf0 [ 1460.636120][T22614] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 1460.636193][T22614] ? cap_mmap_addr+0xaf/0x100 [ 1460.636224][T22614] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1460.636246][T22614] ? security_mmap_addr+0x71/0x240 [ 1460.636284][T22614] do_mmap+0xc3b/0x10c0 [ 1460.636320][T22614] ? __pfx_do_mmap+0x10/0x10 [ 1460.636339][T22614] ? down_write_killable+0x180/0x240 [ 1460.636377][T22614] ? __pfx_down_write_killable+0x10/0x10 [ 1460.636410][T22614] ? apparmor_mmap_file+0x197/0x3e0 [ 1460.636438][T22614] ? security_mmap_file+0xf9/0xa20 [ 1460.636473][T22614] vm_mmap_pgoff+0x272/0x4e0 [ 1460.636514][T22614] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1460.636543][T22614] ? ksys_write+0x242/0x270 [ 1460.636579][T22614] ? __pfx_ksys_write+0x10/0x10 [ 1460.636614][T22614] ? ksys_mmap_pgoff+0xf3/0x760 [ 1460.636636][T22614] ? __x64_sys_mmap+0x7f/0x140 [ 1460.636666][T22614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.636694][T22614] do_syscall_64+0x174/0x580 [ 1460.636722][T22614] ? trace_irq_disable+0x3b/0x140 [ 1460.636749][T22614] ? clear_bhb_loop+0x40/0x90 [ 1460.636775][T22614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.636794][T22614] RIP: 0033:0x7f2e9459de59 [ 1460.636853][T22614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.636872][T22614] RSP: 002b:00007f2e95437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1460.636895][T22614] RAX: ffffffffffffffda RBX: 00007f2e94825fa0 RCX: 00007f2e9459de59 [ 1460.636912][T22614] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 1460.636934][T22614] RBP: 00007f2e95437090 R08: ffffffffffffffff R09: 0000000000000000 [ 1460.636949][T22614] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1460.636962][T22614] R13: 00007f2e94826038 R14: 00007f2e94825fa0 R15: 00007f2e9494fa48 [ 1460.637006][T22614] [ 1461.520029][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1461.679949][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1461.694399][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.712941][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.734658][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1461.762047][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1461.781604][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.809213][ T24] usb 5-1: config 0 descriptor?? [ 1462.153385][T22651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.283900][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.305522][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.321363][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.328894][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.336807][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.345952][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.353720][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.361755][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.369155][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.382174][ T24] microsoft 0003:045E:07DA.0069: unknown main item tag 0x0 [ 1462.412538][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0069/input/input120 [ 1462.472816][ T24] microsoft 0003:045E:07DA.0069: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1462.719917][T17119] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1462.837650][T22624] bridge0: port 3(vlan2) entered blocking state [ 1462.844168][T22624] bridge0: port 3(vlan2) entered forwarding state [ 1462.895878][T17119] usb 7-1: config 0 has no interfaces? [ 1462.903710][T17119] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1462.918768][T22624] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1462.930334][T17119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.954624][T17119] usb 7-1: config 0 descriptor?? [ 1462.969506][T22624] virt_wifi0: entered promiscuous mode [ 1463.006821][T22624] virt_wifi0: entered allmulticast mode [ 1463.106738][ T42] usb 5-1: USB disconnect, device number 62 [ 1463.145918][T11061] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1463.210754][T11061] bond1: (slave veth3): making interface the new active one [ 1463.231426][T22658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.276755][T22658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.301437][T22665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.308901][T11061] bond1: active interface up! [ 1463.322529][ T24] usb 7-1: USB disconnect, device number 30 [ 1463.524103][T22669] can: request_module (can-proto-0) failed. [ 1463.659833][ T11] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1463.671728][T22677] PM: Enabling pm_trace changes system date and time during resume. [ 1463.671728][T22677] PM: Correct system time has to be restored manually after resume. [ 1463.822504][ T11] usb 2-1: config 1 has an invalid interface number: 69 but max is 0 [ 1463.835400][ T11] usb 2-1: config 1 has no interface number 0 [ 1463.842592][ T11] usb 2-1: config 1 interface 69 has no altsetting 0 [ 1463.849894][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1463.857503][ T11] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 1463.857536][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.857560][ T11] usb 2-1: Product: syz [ 1463.891944][ T11] usb 2-1: Manufacturer: syz [ 1463.896820][ T11] usb 2-1: SerialNumber: syz [ 1464.051832][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.079805][ T24] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 1464.090469][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.104981][ T24] usb 7-1: config 0 descriptor?? [ 1464.156679][ T5636] Bluetooth: hci5: urb ffff8880a6efb900 submission failed (2) [ 1464.165035][ T42] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1464.329516][T17828] usb 7-1: USB disconnect, device number 31 [ 1464.340012][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1464.354031][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.370241][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.380805][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1464.426976][ T42] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1464.439952][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.484410][ T42] usb 5-1: config 0 descriptor?? [ 1464.484724][T22687] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4369'. [ 1464.888415][T22697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.951122][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.965834][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.977184][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.986482][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.002475][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.030689][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.057727][T22684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.069385][T22702] tc_dump_action: action bad kind [ 1465.076009][T22684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.092425][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 1465.103020][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1465.116639][ T42] usb 5-1: USB disconnect, device number 63 [ 1465.279875][T19773] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1465.444336][T19773] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1465.453262][T19773] usb 7-1: not running at top speed; connect to a high speed hub [ 1465.466854][T19773] usb 7-1: config 2 has an invalid interface number: 77 but max is 0 [ 1465.475592][T19773] usb 7-1: config 2 has no interface number 0 [ 1465.489145][T19773] usb 7-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 1465.498620][T19773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.506857][T19773] usb 7-1: Product: syz [ 1465.511444][T19773] usb 7-1: Manufacturer: syz [ 1465.517022][T19773] usb 7-1: SerialNumber: syz [ 1465.737289][T19773] rndis_host 7-1:2.77: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1465.761848][T19773] usb 7-1: USB disconnect, device number 32 [ 1465.908811][T22710] FAULT_INJECTION: forcing a failure. [ 1465.908811][T22710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.924142][T22710] CPU: 0 UID: 0 PID: 22710 Comm: syz.4.4375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1465.924178][T22710] Tainted: [L]=SOFTLOCKUP [ 1465.924187][T22710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1465.924200][T22710] Call Trace: [ 1465.924209][T22710] [ 1465.924219][T22710] dump_stack_lvl+0xe8/0x150 [ 1465.924258][T22710] should_fail_ex+0x40c/0x560 [ 1465.924301][T22710] prepare_alloc_pages+0x230/0x650 [ 1465.924341][T22710] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1465.924377][T22710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1465.924413][T22710] ? __pfx_policy_nodemask+0x10/0x10 [ 1465.924458][T22710] alloc_pages_mpol+0x212/0x380 [ 1465.924497][T22710] alloc_pages_noprof+0xac/0x2a0 [ 1465.924532][T22710] pte_alloc_one+0x22/0x370 [ 1465.924559][T22710] do_pte_missing+0x13c8/0x34b0 [ 1465.924613][T22710] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1465.924644][T22710] ? mtree_range_walk+0x707/0x8b0 [ 1465.924686][T22710] handle_mm_fault+0x1b36/0x3080 [ 1465.924709][T22710] ? mt_find+0x186/0x630 [ 1465.924752][T22710] ? handle_mm_fault+0xec/0x3080 [ 1465.924786][T22710] ? __pfx_handle_mm_fault+0x10/0x10 [ 1465.924839][T22710] __get_user_pages+0x1678/0x2720 [ 1465.924910][T22710] populate_vma_page_range+0x2be/0x3c0 [ 1465.924949][T22710] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1465.924989][T22710] ? down_read+0x2be/0x330 [ 1465.925025][T22710] __mm_populate+0x25f/0x390 [ 1465.925061][T22710] ? __pfx___mm_populate+0x10/0x10 [ 1465.925106][T22710] vm_mmap_pgoff+0x353/0x4e0 [ 1465.925145][T22710] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1465.925175][T22710] ? ksys_write+0x242/0x270 [ 1465.925210][T22710] ? __pfx_ksys_write+0x10/0x10 [ 1465.925245][T22710] ? ksys_mmap_pgoff+0xf3/0x760 [ 1465.925276][T22710] ? __x64_sys_mmap+0x7f/0x140 [ 1465.925317][T22710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.925341][T22710] do_syscall_64+0x174/0x580 [ 1465.925371][T22710] ? trace_irq_disable+0x3b/0x140 [ 1465.925399][T22710] ? clear_bhb_loop+0x40/0x90 [ 1465.925427][T22710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.925450][T22710] RIP: 0033:0x7f2e9459de59 [ 1465.925471][T22710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.925491][T22710] RSP: 002b:00007f2e95437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1465.925515][T22710] RAX: ffffffffffffffda RBX: 00007f2e94825fa0 RCX: 00007f2e9459de59 [ 1465.925532][T22710] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 1465.925548][T22710] RBP: 00007f2e95437090 R08: ffffffffffffffff R09: 0000000000000000 [ 1465.925597][T22710] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1465.925611][T22710] R13: 00007f2e94826038 R14: 00007f2e94825fa0 R15: 00007f2e9494fa48 [ 1465.925647][T22710] [ 1466.445306][ T11] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 1466.453482][ T11] usbduxfast 2-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 1466.483953][ T11] usb 2-1: USB disconnect, device number 64 [ 1466.559370][T22717] input: syz0 as /devices/virtual/input/input121 [ 1466.729953][T17119] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1466.915360][T17119] usb 5-1: Using ep0 maxpacket: 8 [ 1466.929374][T17119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.941318][T17119] usb 5-1: config 0 has no interfaces? [ 1466.949051][T17119] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1466.960013][T19773] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1466.964031][T17119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.979527][T17119] usb 5-1: Product: syz [ 1466.988562][T17119] usb 5-1: Manufacturer: syz [ 1467.003942][T17119] usb 5-1: SerialNumber: syz [ 1467.017213][T17119] usb 5-1: config 0 descriptor?? [ 1467.133810][T19773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.157411][T19773] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1467.177439][T19773] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.202703][T19773] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1467.212216][T19773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.220707][T19773] usb 4-1: Product: syz [ 1467.225119][T19773] usb 4-1: Manufacturer: syz [ 1467.231010][T19773] usb 4-1: SerialNumber: syz [ 1467.251073][ T24] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1467.289048][T22750] FAULT_INJECTION: forcing a failure. [ 1467.289048][T22750] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.306534][T22750] CPU: 0 UID: 0 PID: 22750 Comm: syz.6.4386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.306569][T22750] Tainted: [L]=SOFTLOCKUP [ 1467.306577][T22750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1467.306595][T22750] Call Trace: [ 1467.306602][T22750] [ 1467.306609][T22750] dump_stack_lvl+0xe8/0x150 [ 1467.306653][T22750] should_fail_ex+0x40c/0x560 [ 1467.306686][T22750] should_failslab+0xa8/0x100 [ 1467.306719][T22750] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1467.306749][T22750] ? alloc_pages_mpol+0x24a/0x380 [ 1467.306772][T22750] ? ptlock_alloc+0x20/0x70 [ 1467.306791][T22750] ? ptlock_alloc+0x20/0x70 [ 1467.306836][T22750] ptlock_alloc+0x20/0x70 [ 1467.306859][T22750] pte_alloc_one+0x7a/0x370 [ 1467.306884][T22750] do_pte_missing+0x13c8/0x34b0 [ 1467.306917][T22750] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1467.306977][T22750] ? mtree_range_walk+0x707/0x8b0 [ 1467.307029][T22750] handle_mm_fault+0x1b36/0x3080 [ 1467.307057][T22750] ? mt_find+0x186/0x630 [ 1467.307087][T22750] ? handle_mm_fault+0xec/0x3080 [ 1467.307130][T22750] ? __pfx_handle_mm_fault+0x10/0x10 [ 1467.307182][T22750] __get_user_pages+0x1678/0x2720 [ 1467.307242][T22750] populate_vma_page_range+0x2be/0x3c0 [ 1467.307300][T22750] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1467.307336][T22750] ? down_read+0x2be/0x330 [ 1467.307372][T22750] __mm_populate+0x25f/0x390 [ 1467.307399][T22750] ? __pfx___mm_populate+0x10/0x10 [ 1467.307457][T22750] vm_mmap_pgoff+0x353/0x4e0 [ 1467.307495][T22750] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1467.307524][T22750] ? ksys_write+0x242/0x270 [ 1467.307551][T22750] ? __pfx_ksys_write+0x10/0x10 [ 1467.307600][T22750] ? ksys_mmap_pgoff+0xf3/0x760 [ 1467.307622][T22750] ? __x64_sys_mmap+0x7f/0x140 [ 1467.307659][T22750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.307677][T22750] do_syscall_64+0x174/0x580 [ 1467.307698][T22750] ? trace_irq_disable+0x3b/0x140 [ 1467.307735][T22750] ? clear_bhb_loop+0x40/0x90 [ 1467.307763][T22750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.307785][T22750] RIP: 0033:0x7fdb6ff9de59 [ 1467.307811][T22750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.307826][T22750] RSP: 002b:00007fdb70e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1467.307843][T22750] RAX: ffffffffffffffda RBX: 00007fdb70225fa0 RCX: 00007fdb6ff9de59 [ 1467.307855][T22750] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 1467.307885][T22750] RBP: 00007fdb70e66090 R08: ffffffffffffffff R09: 0000000000000000 [ 1467.307901][T22750] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 1467.307914][T22750] R13: 00007fdb70226038 R14: 00007fdb70225fa0 R15: 00007fdb7034fa48 [ 1467.307947][T22750] [ 1467.492245][T19773] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1467.594237][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1467.605208][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.659187][ T24] usb 2-1: config 0 descriptor?? [ 1467.670184][ T24] cp210x 2-1:0.0: cp210x converter detected [ 1467.714355][T19773] usb 4-1: MIDIStreaming interface descriptor not found [ 1467.730962][T19773] usb 4-1: 0:2 : does not exist [ 1467.748975][T19773] usb 4-1: unit 4 not found! [ 1467.852306][T19773] usb 4-1: USB disconnect, device number 65 [ 1467.929422][T11502] udevd[11502]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.081986][T22745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.100353][T22745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.133061][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1468.160895][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1468.186786][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1468.210223][ T24] usb 2-1: USB disconnect, device number 65 [ 1468.216107][T22761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1468.233053][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1468.252362][ T24] cp210x 2-1:0.0: device disconnected [ 1468.413785][T22770] netlink: 'syz.6.4391': attribute type 9 has an invalid length. [ 1468.421777][T22770] netlink: 'syz.6.4391': attribute type 6 has an invalid length. [ 1468.599990][T19773] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1468.706045][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1468.717010][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1468.749919][T19773] usb 4-1: Using ep0 maxpacket: 32 [ 1468.763408][T19773] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1468.777498][T19773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1468.788014][T19773] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1468.798742][T19773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.816939][T19773] usb 4-1: config 0 descriptor?? [ 1469.189881][T17119] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1469.339795][T17119] usb 2-1: Using ep0 maxpacket: 16 [ 1469.347080][T17119] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1469.356679][T17119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.368463][T17119] usb 2-1: config 0 descriptor?? [ 1469.373752][ T11] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1469.394059][T17119] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1469.422909][T22790] sg_write: data in/out 418781/354 bytes for SCSI command 0x0-- guessing data in; [ 1469.422909][T22790] program syz.4.4376 not setting count and/or reply_len properly [ 1469.549777][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 1469.557142][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.568273][ T11] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.584608][ T11] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1469.605472][ T11] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 1469.607870][T19773] corsair-cpro 0003:1B1C:0C10.006A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1469.641839][ T11] usb 7-1: Product: syz [ 1469.646122][ T11] usb 7-1: Manufacturer: syz [ 1469.651218][ T11] usb 7-1: SerialNumber: syz [ 1469.668965][ T11] appletouch 7-1:1.0: Could not find int-in endpoint [ 1469.680587][ T11] appletouch 7-1:1.0: probe with driver appletouch failed with error -5 [ 1469.690955][ T11] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 1469.871163][ T24] usb 7-1: USB disconnect, device number 33 [ 1469.994125][T19773] corsair-cpro 0003:1B1C:0C10.006A: probe with driver corsair-cpro failed with error -110 [ 1470.011044][T19773] usb 4-1: USB disconnect, device number 66 [ 1470.376860][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.405202][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.420307][ T42] usb 2-1: USB disconnect, device number 66 [ 1470.491819][T22798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1470.517049][ T24] usb 5-1: USB disconnect, device number 64 [ 1470.584230][T22800] netlink: 'syz.4.4400': attribute type 1 has an invalid length. [ 1470.610090][T19773] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1470.618310][T22800] bond2: entered promiscuous mode [ 1470.624060][T22800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1470.675531][T22800] macvtap1: entered allmulticast mode [ 1470.716632][T22800] macvtap2: entered allmulticast mode [ 1470.739863][ T11] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1470.755250][T22800] bond2: (slave bridge3): making interface the new active one [ 1470.763051][T22800] bridge3: entered promiscuous mode [ 1470.770847][T22800] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1470.801751][T19773] usb 4-1: Using ep0 maxpacket: 16 [ 1470.832750][T19773] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1470.867261][T19773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.889568][T19773] usb 4-1: Product: syz [ 1470.900224][T19773] usb 4-1: Manufacturer: syz [ 1470.905006][ T11] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.916635][T19773] usb 4-1: SerialNumber: syz [ 1470.941580][T19773] usb 4-1: config 0 descriptor?? [ 1470.965338][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1470.975252][ T11] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 1471.000265][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.162876][T19773] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1471.209494][T19773] usb 4-1: USB disconnect, device number 67 [ 1471.251977][T22798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.274926][T22812] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1471.315570][T22798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.389924][ T11] usb 7-1: string descriptor 0 read error: -71 [ 1471.434076][ T11] cypress_m8 7-1:2.0: HID->COM RS232 Adapter converter detected [ 1471.483799][ T11] cyphidcom ttyUSB0: required endpoint is missing [ 1471.504574][ T11] usb 7-1: USB disconnect, device number 34 [ 1471.528091][ T11] cypress_m8 7-1:2.0: device disconnected [ 1472.153596][ T11] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1472.179377][T22832] FAULT_INJECTION: forcing a failure. [ 1472.179377][T22832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1472.194347][T22832] CPU: 0 UID: 0 PID: 22832 Comm: syz.3.4408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.194381][T22832] Tainted: [L]=SOFTLOCKUP [ 1472.194389][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1472.194402][T22832] Call Trace: [ 1472.194411][T22832] [ 1472.194420][T22832] dump_stack_lvl+0xe8/0x150 [ 1472.194460][T22832] should_fail_ex+0x40c/0x560 [ 1472.194491][T22832] prepare_alloc_pages+0x230/0x650 [ 1472.194530][T22832] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1472.194564][T22832] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1472.194600][T22832] ? __pfx_policy_nodemask+0x10/0x10 [ 1472.194642][T22832] alloc_pages_mpol+0x212/0x380 [ 1472.194680][T22832] folio_alloc_mpol_noprof+0x39/0x160 [ 1472.194714][T22832] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1472.194739][T22832] ? filemap_get_entry+0xcd/0x3f0 [ 1472.194772][T22832] ? __pfx_filemap_get_entry+0x10/0x10 [ 1472.194795][T22832] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1472.194824][T22832] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1472.194870][T22832] shmem_get_folio_gfp+0x5da/0x16d0 [ 1472.194930][T22832] shmem_fault+0x179/0x390 [ 1472.194963][T22832] __do_fault+0x138/0x2a0 [ 1472.194991][T22832] ? do_pte_missing+0x140c/0x34b0 [ 1472.195019][T22832] do_pte_missing+0x2215/0x34b0 [ 1472.195060][T22832] ? handle_mm_fault+0xec/0x3080 [ 1472.195088][T22832] handle_mm_fault+0x1b36/0x3080 [ 1472.195127][T22832] ? handle_mm_fault+0xec/0x3080 [ 1472.195159][T22832] ? __pfx_handle_mm_fault+0x10/0x10 [ 1472.195183][T22832] ? follow_page_pte+0x6ce/0xe70 [ 1472.195217][T22832] ? __pfx_follow_page_pte+0x10/0x10 [ 1472.195251][T22832] __get_user_pages+0x1678/0x2720 [ 1472.195320][T22832] populate_vma_page_range+0x2be/0x3c0 [ 1472.195358][T22832] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1472.195396][T22832] ? down_read+0x2be/0x330 [ 1472.195433][T22832] __mm_populate+0x25f/0x390 [ 1472.195469][T22832] ? __pfx___mm_populate+0x10/0x10 [ 1472.195513][T22832] vm_mmap_pgoff+0x353/0x4e0 [ 1472.195551][T22832] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1472.195580][T22832] ? ksys_write+0x242/0x270 [ 1472.195615][T22832] ? __pfx_ksys_write+0x10/0x10 [ 1472.195651][T22832] ? ksys_mmap_pgoff+0xf3/0x760 [ 1472.195674][T22832] ? __x64_sys_mmap+0x7f/0x140 [ 1472.195707][T22832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.195732][T22832] do_syscall_64+0x174/0x580 [ 1472.195760][T22832] ? trace_irq_disable+0x3b/0x140 [ 1472.195788][T22832] ? clear_bhb_loop+0x40/0x90 [ 1472.195814][T22832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.195837][T22832] RIP: 0033:0x7f5778f9de59 [ 1472.195858][T22832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.195877][T22832] RSP: 002b:00007f5779e48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1472.195909][T22832] RAX: ffffffffffffffda RBX: 00007f5779225fa0 RCX: 00007f5778f9de59 [ 1472.195925][T22832] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 1472.195941][T22832] RBP: 00007f5779e48090 R08: ffffffffffffffff R09: 0000000000000000 [ 1472.195955][T22832] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 1472.195968][T22832] R13: 00007f5779226038 R14: 00007f5779225fa0 R15: 00007f577934fa48 [ 1472.196002][T22832] [ 1472.749848][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 1472.757500][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.769998][ T11] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice= 0.03 [ 1472.779498][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1472.787854][ T11] usb 5-1: SerialNumber: syz [ 1472.796029][ T11] usb 5-1: config 0 descriptor?? [ 1472.801171][T17828] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1472.968313][T17828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.988968][T17828] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1473.010519][T17828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.037690][T17828] usb 7-1: config 0 descriptor?? [ 1473.429933][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1473.468895][T17828] keytouch 0003:0926:3333.006B: fixing up Keytouch IEC report descriptor [ 1473.507189][T17828] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.006B/input/input122 [ 1473.607182][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.627204][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1473.644738][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1473.679462][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1473.691314][ T24] usb 4-1: SerialNumber: syz [ 1473.712348][T17828] keytouch 0003:0926:3333.006B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1474.260467][ T24] usb 4-1: 0:2 : does not exist [ 1474.273563][ T24] usb 4-1: unit 5 not found! [ 1474.455642][ T24] usb 4-1: USB disconnect, device number 68 [ 1474.583639][ T11] cdc_ether 5-1:0.0: skipping garbage [ 1474.607957][ T11] usb 5-1: No union descriptors [ 1474.635736][ T11] usb 5-1: unsupported MDLM descriptors [ 1474.674401][ T11] usb 5-1: USB disconnect, device number 65 [ 1474.887449][T11530] udevd[11530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.840418][T22863] pimreg: entered allmulticast mode [ 1476.866142][T22863] pimreg: left allmulticast mode [ 1477.058947][T22866] loop5: detected capacity change from 0 to 7 [ 1477.096737][T22866] loop5: p1 < > p3 p4 [ 1477.110036][T22866] loop5: partition table partially beyond EOD, truncated [ 1477.140439][T22866] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1477.175365][T22866] loop5: p4 start 33554432 is beyond EOD, truncated [ 1477.203501][T17828] usb 7-1: USB disconnect, device number 35 [ 1477.401784][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1477.438579][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1477.657000][T22881] syzkaller0: entered promiscuous mode [ 1477.664067][T22881] syzkaller0: entered allmulticast mode [ 1477.689322][T22881] tipc: Started in network mode [ 1477.695913][T22881] tipc: Node identity d61c6a23745e, cluster identity 4711 [ 1477.706127][T22881] tipc: Enabled bearer , priority 0 [ 1477.723634][T22881] tipc: Resetting bearer [ 1478.095400][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1478.467534][T22880] tipc: Resetting bearer [ 1478.536800][T22880] tipc: Disabling bearer [ 1478.912398][T19773] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1478.979669][T22909] loop5: detected capacity change from 0 to 7 [ 1479.012124][T22909] loop5: p1 < > p3 p4 [ 1479.018248][T22909] loop5: partition table partially beyond EOD, truncated [ 1479.039650][T22909] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1479.075948][T22909] loop5: p4 start 33554432 is beyond EOD, truncated [ 1479.130542][T19773] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1479.154493][T19773] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1479.170435][T19773] usb 4-1: Product: syz [ 1479.190269][T19773] usb 4-1: Manufacturer: syz [ 1479.201187][T19773] usb 4-1: SerialNumber: syz [ 1479.228975][T19773] usb 4-1: config 0 descriptor?? [ 1479.269369][T11530] udevd[11530]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1479.280064][T11531] udevd[11531]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1479.563171][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1479.729835][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1479.740032][T22918] raw_sendmsg: syz.6.4432 forgot to set AF_INET. Fix it! [ 1479.749255][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.780742][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1479.809775][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1479.829808][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1479.846062][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1479.856212][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.864471][ T24] usb 5-1: Product: syz [ 1479.869034][ T24] usb 5-1: Manufacturer: syz [ 1479.873820][ T24] usb 5-1: SerialNumber: syz [ 1479.902398][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1479.941128][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input123 [ 1479.970512][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4432'. [ 1480.130304][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1480.156280][ T24] (id 0x00) [ 1480.252092][ T24] rc_core: IR keymap rc-imon-pad not found [ 1480.265543][ T24] Registered IR keymap rc-empty [ 1480.273539][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1480.293306][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1480.340842][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1480.356096][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input124 [ 1480.378428][ T24] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:66> initialized [ 1480.706451][T22939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1481.019892][ T11] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1481.149971][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1481.169847][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 1481.177265][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.189745][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.201972][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1481.212183][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1481.221708][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.233218][ T11] usb 2-1: config 0 descriptor?? [ 1481.251488][ T11] hub 2-1:0.0: USB hub found [ 1481.310509][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1481.329875][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.344039][T22948] imon:send_packet: packet tx failed (-71) [ 1481.350095][T19773] usb 5-1: USB disconnect, device number 66 [ 1481.357212][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1481.377037][ T24] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1481.387536][ T24] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1481.394357][T22948] imon:vfd_write: send packet #2 failed [ 1481.401227][ T24] usb 7-1: Product: syz [ 1481.406280][ T24] usb 7-1: Manufacturer: syz [ 1481.414481][ T24] usb 7-1: SerialNumber: syz [ 1481.436310][ T24] usb 7-1: config 0 descriptor?? [ 1481.451693][ T11] hub 2-1:0.0: 1 port detected [ 1481.512142][ T24] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1481.577122][ T24] usb 4-1: USB disconnect, device number 69 [ 1481.668111][T22942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.694793][T22947] loop6: detected capacity change from 0 to 2640 [ 1481.703334][T22942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.744937][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.756222][T22958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.784210][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.792548][T22958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.792955][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793101][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793226][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793463][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793611][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793738][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.793758][T22947] ldm_validate_partition_table(): Disk read failed. [ 1481.793890][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.794022][T22947] Buffer I/O error on dev loop6, logical block 0, async page read [ 1481.794978][T22947] Dev loop6: unable to read RDB block 0 [ 1481.796273][T22947] loop6: unable to read partition table [ 1481.810003][T22960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.831013][T22947] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1481.928878][T22947] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1481.940344][T22960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.957542][T22947] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1481.990447][T22947] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1482.001432][T22947] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1482.013805][T22947] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1482.034770][T22947] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1482.050551][ T11] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1482.072859][ T11] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1482.086101][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 1482.090991][T22947] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1482.094729][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1482.115472][T22947] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1482.153062][ T11] usb 2-1: USB disconnect, device number 67 [ 1482.601377][ T14] usb 7-1: Failed to submit usb control message: -110 [ 1482.610363][ T11] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1482.625819][ T14] usb 7-1: unable to send the bmi data to the device: -110 [ 1482.634120][ T14] usb 7-1: unable to get target info from device [ 1482.641222][ T14] usb 7-1: could not get target info (-110) [ 1482.647582][ T14] usb 7-1: could not probe fw (-110) [ 1482.674962][T22979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.688015][T19773] usb 7-1: USB disconnect, device number 36 [ 1482.760022][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 1482.779918][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1482.791250][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.805773][T22979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.833995][ T11] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1482.879950][T17119] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1482.889308][ T11] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 1482.911559][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.945155][ T11] usb 4-1: Product: syz [ 1482.956544][ T11] usb 4-1: Manufacturer: syz [ 1482.969568][ T11] usb 4-1: SerialNumber: syz [ 1483.420056][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1483.584275][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1483.615597][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.626251][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1483.648678][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1483.658460][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.660500][T17119] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1483.668282][ T24] usb 5-1: Product: syz [ 1483.678740][ T24] usb 5-1: Manufacturer: syz [ 1483.683874][ T24] usb 5-1: SerialNumber: syz [ 1483.716947][ T24] usb 5-1: selecting invalid altsetting 1 [ 1483.733830][ T24] usb 5-1: unit 6 not found! [ 1483.764325][T22995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1483.851567][T17119] usb 2-1: Using ep0 maxpacket: 8 [ 1483.869807][T17119] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1483.911364][T17119] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1483.936789][T17119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1483.961102][T17119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1483.977903][T17119] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1483.988181][T17119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.996632][T17119] usb 2-1: Product: syz [ 1484.001853][T17119] usb 2-1: Manufacturer: syz [ 1484.006738][T17119] usb 2-1: SerialNumber: syz [ 1484.016859][T17119] usb 2-1: config 0 descriptor?? [ 1484.031380][T22986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1484.260095][T17119] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1484.294010][T17119] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input125 [ 1484.501061][ C0] powermate: config urb returned -71 [ 1484.511095][ C0] powermate: config urb returned -71 [ 1484.512435][T19773] usb 2-1: USB disconnect, device number 69 [ 1484.516450][ C0] powermate: usb_submit_urb(config) failed [ 1484.522481][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1484.631917][T23014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.682307][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.688944][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.735025][T23014] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1484.989946][ T5756] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1485.079060][T23017] sysfs: cannot create duplicate filename '/devices/virtual/xt_idletimer/timers/syz0' [ 1485.091153][T23017] CPU: 0 UID: 0 PID: 23017 Comm: syz.1.4463 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.091190][T23017] Tainted: [L]=SOFTLOCKUP [ 1485.091199][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.091212][T23017] Call Trace: [ 1485.091222][T23017] [ 1485.091230][T23017] dump_stack_lvl+0xe8/0x150 [ 1485.091277][T23017] sysfs_warn_dup+0x8e/0xa0 [ 1485.091306][T23017] sysfs_add_file_mode_ns+0x285/0x300 [ 1485.091337][T23017] sysfs_create_file_ns+0x12b/0x1b0 [ 1485.091366][T23017] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1485.091392][T23017] ? __asan_memcpy+0x40/0x70 [ 1485.091421][T23017] idletimer_tg_checkentry+0x41a/0xa70 [ 1485.091448][T23017] xt_check_target+0x619/0xca0 [ 1485.091485][T23017] ? __pfx_xt_check_target+0x10/0x10 [ 1485.091514][T23017] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1485.091548][T23017] ? xt_find_target+0x20f/0x260 [ 1485.091578][T23017] translate_table+0x1821/0x2040 [ 1485.091620][T23017] ? __pfx_translate_table+0x10/0x10 [ 1485.091641][T23017] ? __might_fault+0xaf/0x130 [ 1485.091665][T23017] ? __might_fault+0xaf/0x130 [ 1485.091705][T23017] ? _copy_from_user+0x94/0xb0 [ 1485.091742][T23017] do_ip6t_set_ctl+0xa5c/0xe30 [ 1485.091772][T23017] ? rcu_is_watching+0x15/0xb0 [ 1485.091808][T23017] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1485.091847][T23017] ? __mutex_unlock_slowpath+0x731/0x900 [ 1485.091879][T23017] ? aa_sk_perm+0x6d5/0x900 [ 1485.091913][T23017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1485.091949][T23017] ? __pfx_aa_sk_perm+0x10/0x10 [ 1485.091989][T23017] nf_setsockopt+0x26f/0x290 [ 1485.092020][T23017] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1485.092050][T23017] do_sock_setsockopt+0x17c/0x1b0 [ 1485.092087][T23017] __x64_sys_setsockopt+0x13d/0x1b0 [ 1485.092129][T23017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.092155][T23017] do_syscall_64+0x174/0x580 [ 1485.092185][T23017] ? trace_irq_disable+0x3b/0x140 [ 1485.092214][T23017] ? clear_bhb_loop+0x40/0x90 [ 1485.092241][T23017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.092262][T23017] RIP: 0033:0x7faf0ed9de59 [ 1485.092283][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.092301][T23017] RSP: 002b:00007faf0fd1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1485.092323][T23017] RAX: ffffffffffffffda RBX: 00007faf0f025fa0 RCX: 00007faf0ed9de59 [ 1485.092340][T23017] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 1485.092353][T23017] RBP: 00007faf0ee33e6f R08: 0000000000000580 R09: 0000000000000000 [ 1485.092366][T23017] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.092380][T23017] R13: 00007faf0f026038 R14: 00007faf0f025fa0 R15: 00007faf0f14fa48 [ 1485.092412][T23017] [ 1485.210747][ T5756] usb 7-1: Using ep0 maxpacket: 16 [ 1485.395096][ T5756] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1485.404938][ T5756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1485.413659][ T5756] usb 7-1: SerialNumber: syz [ 1485.424253][ T5756] usb 7-1: config 0 descriptor?? [ 1485.441537][ T5756] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1485.452273][ T5756] usb 7-1: Detected FT232A [ 1485.464625][ T5756] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1485.644900][T17828] usb 7-1: USB disconnect, device number 37 [ 1485.660304][T17828] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1485.684694][T17828] ftdi_sio 7-1:0.0: device disconnected [ 1486.209541][ T24] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1486.311941][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1486.339584][ T24] usb 5-1: USB disconnect, device number 67 [ 1486.389329][T11530] udevd[11530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.436031][T23027] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1486.461878][T23027] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1486.494639][ T11] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1486.505254][ T11] usb 4-1: selecting invalid altsetting 1 [ 1486.513225][ T11] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 1486.525617][ T11] usb 4-1: unable to init card! (ret=-5) [ 1486.537251][ T11] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 1486.567273][ T11] usb 4-1: selecting invalid altsetting 1 [ 1486.574741][ T11] snd-usb-caiaq 4-1:1.1: can't set alt interface. [ 1486.583450][ T11] usb 4-1: unable to init card! (ret=-5) [ 1486.590391][ T11] snd-usb-caiaq 4-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 1486.610212][ T11] usb 4-1: USB disconnect, device number 70 [ 1486.631650][T11530] udevd[11530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.789858][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1486.939969][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1486.952726][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1486.966180][ T11] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1486.992799][ T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 1487.006182][T23038] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.010309][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1487.039418][ T24] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1487.041881][T23038] binder: 23037:23038 ioctl 4018620d 2000000000c0 returned -16 [ 1487.062607][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.073377][ T24] usb 7-1: Product: syz [ 1487.082413][ T24] usb 7-1: Manufacturer: syz [ 1487.088658][ T24] usb 7-1: SerialNumber: syz [ 1487.141867][ T11] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1487.167235][ T11] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1487.194587][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1487.214887][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1487.256036][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1487.308171][ T11] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1487.336957][ T11] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1487.349618][ T11] usb 4-1: Product: syz [ 1487.357875][ T11] usb 4-1: Manufacturer: syz [ 1487.396217][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1487.412421][ T24] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1487.427195][ T11] usb 4-1: can't set config #1, error -71 [ 1487.466804][ T11] usb 4-1: USB disconnect, device number 71 [ 1487.478632][ T24] usb 7-1: USB disconnect, device number 38 [ 1487.849899][ T11] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1487.999919][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1488.011869][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1488.030200][ T11] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 1488.051435][ T11] usb 4-1: config index 0 descriptor too short (expected 1550, got 70) [ 1488.069907][ T11] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1488.087307][ T11] usb 4-1: can't read configurations, error -22 [ 1488.229830][ T11] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1488.259653][ T29] audit: type=1400 audit(1783551608.314:6467): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=23055 comm="syz.4.4476" [ 1488.389793][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1488.402245][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1488.417152][ T11] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 1488.435618][ T11] usb 4-1: config index 0 descriptor too short (expected 1550, got 70) [ 1488.451673][ T11] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1488.468765][ T11] usb 4-1: can't read configurations, error -22 [ 1488.483891][ T11] usb usb4-port1: attempt power cycle [ 1488.829960][ T11] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1488.840140][T17828] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1488.850720][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1488.858318][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1488.866497][T17119] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1488.874398][ T11] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 1488.884130][ T11] usb 4-1: config index 0 descriptor too short (expected 1550, got 70) [ 1488.892705][ T11] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1488.901300][ T11] usb 4-1: can't read configurations, error -22 [ 1488.989880][T17828] usb 7-1: Using ep0 maxpacket: 32 [ 1488.998824][T17828] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1489.008311][T17828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.016745][T17828] usb 7-1: Product: syz [ 1489.021325][T17828] usb 7-1: Manufacturer: syz [ 1489.025978][T17828] usb 7-1: SerialNumber: syz [ 1489.033385][T17828] usb 7-1: config 0 descriptor?? [ 1489.039844][T17119] usb 2-1: Using ep0 maxpacket: 8 [ 1489.045084][ T11] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1489.064900][T17119] usb 2-1: config 0 has no interfaces? [ 1489.074833][T17119] usb 2-1: config 0 has no interfaces? [ 1489.081643][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1489.087696][T17119] usb 2-1: config 0 has no interfaces? [ 1489.096117][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1489.104078][ T11] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 1489.112243][T17119] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1489.121723][T17119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.130208][T17119] usb 2-1: Product: syz [ 1489.135006][ T11] usb 4-1: config index 0 descriptor too short (expected 1550, got 70) [ 1489.143458][T17119] usb 2-1: Manufacturer: syz [ 1489.148140][ T11] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 1489.156811][T17119] usb 2-1: SerialNumber: syz [ 1489.163658][ T11] usb 4-1: can't read configurations, error -22 [ 1489.177998][T17119] usb 2-1: config 0 descriptor?? [ 1489.194210][ T11] usb usb4-port1: unable to enumerate USB device [ 1489.278498][T17828] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1489.301927][T17828] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1489.360460][T17828] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 1489.385723][T17828] usb 7-1: USB disconnect, device number 39 [ 1489.403421][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.413184][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.425761][ T11] usb 2-1: USB disconnect, device number 70 [ 1489.639018][ T29] audit: type=1804 audit(1783551609.694:6468): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4478" name="/newroot/304/cgroup.controllers" dev="tmpfs" ino=1602 res=1 errno=0 [ 1489.675317][ T29] audit: type=1800 audit(1783551609.694:6469): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4478" name="cgroup.controllers" dev="tmpfs" ino=1602 res=0 errno=0 [ 1489.689231][T23078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.707733][ T29] audit: type=1800 audit(1783551609.724:6470): pid=23078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4478" name="cgroup.controllers" dev="tmpfs" ino=1602 res=0 errno=0 [ 1489.744878][T23078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.754512][T23078] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1489.762517][T23078] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1489.770775][T23078] veth0_to_bridge: entered allmulticast mode [ 1489.790134][T23078] veth0_to_bridge: entered promiscuous mode [ 1489.806167][T23078] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1489.813587][T23078] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1489.909878][ T11] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1490.040696][ T11] usb 2-1: device descriptor read/64, error -71 [ 1490.080050][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1490.230221][ T24] usb 7-1: device descriptor read/64, error -71 [ 1490.279963][ T11] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1490.409928][ T11] usb 2-1: device descriptor read/64, error -71 [ 1490.469961][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1490.520289][ T11] usb usb2-port1: attempt power cycle [ 1490.598701][T23082] syzkaller1: entered promiscuous mode [ 1490.605735][T23082] syzkaller1: entered allmulticast mode [ 1490.610384][ T24] usb 7-1: device descriptor read/64, error -71 [ 1490.730294][ T24] usb usb7-port1: attempt power cycle [ 1490.860969][ T11] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1490.881335][ T11] usb 2-1: device descriptor read/8, error -71 [ 1490.918914][ T29] audit: type=1326 audit(1783551610.974:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1490.945959][ T29] audit: type=1326 audit(1783551610.974:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1490.976376][ T29] audit: type=1326 audit(1783551611.014:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1491.003975][ T29] audit: type=1326 audit(1783551611.014:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1491.031017][T17119] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1491.047060][ T29] audit: type=1326 audit(1783551611.014:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1491.072340][ T29] audit: type=1326 audit(1783551611.014:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23090 comm="syz.8.4486" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f070d39de59 code=0x7ffc0000 [ 1491.100247][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1491.120587][ T24] usb 7-1: device descriptor read/8, error -71 [ 1491.130011][ T11] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1491.152843][ T11] usb 2-1: device descriptor read/8, error -71 [ 1491.193153][T17119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.211678][T17119] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1491.222357][T17119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.237413][T17119] usb 4-1: config 0 descriptor?? [ 1491.271899][ T11] usb usb2-port1: unable to enumerate USB device [ 1491.369822][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1491.400552][ T24] usb 7-1: device descriptor read/8, error -71 [ 1491.520071][ T24] usb usb7-port1: unable to enumerate USB device [ 1491.662910][T17119] keytouch 0003:0926:3333.006C: fixing up Keytouch IEC report descriptor [ 1491.724129][T17119] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006C/input/input126 [ 1491.881746][T17119] keytouch 0003:0926:3333.006C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1492.358032][ T24] usb 4-1: USB disconnect, device number 76 [ 1492.449931][ T5756] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1492.658266][ T5756] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.707783][ T5756] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1492.718116][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1492.726996][ T5756] usb 2-1: Product: syz [ 1492.731731][ T5756] usb 2-1: Manufacturer: syz [ 1492.743227][ T5756] usb 2-1: SerialNumber: syz [ 1493.014453][ T5756] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1493.090088][T23129] input: syz0 as /devices/virtual/input/input127 [ 1493.110034][T23129] input: failed to attach handler leds to device input127, error: -6 [ 1493.243563][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4493'. [ 1493.280609][ T42] usb 2-1: USB disconnect, device number 75 [ 1493.354175][ T42] usblp0: removed [ 1493.505410][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4496'. [ 1493.722619][T23146] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4497'. [ 1493.838552][T23146] syzkaller0: entered promiscuous mode [ 1493.845558][T23146] syzkaller0: entered allmulticast mode [ 1493.981806][T23155] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1494.570551][ T11] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1494.765165][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 1494.785498][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1494.842908][ T11] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1494.851616][ T11] usb 5-1: config 0 has no interface number 0 [ 1494.866083][ T11] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1494.905559][ T11] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1494.982237][ T11] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 1495.025420][ T11] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1495.066245][ T11] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1495.099997][ T11] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 1495.134315][ T11] usb 5-1: config 0 interface 122 has no altsetting 0 [ 1495.152394][ T11] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 1495.183178][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.199970][ T11] usb 5-1: Product: syz [ 1495.209868][ T11] usb 5-1: Manufacturer: syz [ 1495.234837][ T11] usb 5-1: SerialNumber: syz [ 1495.251444][ T11] usb 5-1: config 0 descriptor?? [ 1495.301046][T23137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1495.336124][T23137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1495.582937][ T11] pl2303 5-1:0.122: pl2303 converter detected [ 1495.593322][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1495.602104][ T11] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1495.612006][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1495.662019][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1495.674943][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1495.710903][ T11] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1495.719610][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1495.773747][ T11] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1495.786573][ T11] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 1495.795795][ T11] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 1495.831924][ T11] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 1495.866795][ T11] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 1495.905226][ T11] usb 5-1: USB disconnect, device number 68 [ 1495.922226][ T11] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1495.957902][ T11] pl2303 5-1:0.122: device disconnected [ 1496.632685][ T42] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1496.689872][ T11] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1496.826827][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 1496.861900][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.873370][ T11] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1496.884312][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.898622][ T42] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 1496.910901][ T42] usb 2-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1496.924468][ T42] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1496.934113][ T11] usb 5-1: config 0 descriptor?? [ 1496.988810][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.40 [ 1496.998164][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.038782][ T42] usb 2-1: Product: 承ﱥ㿯귧뇄䨿ꝝ㩊䟜顮ﶦ蠀ख़裿こꣶ稜㣷ႍ [ 1497.048319][ T42] usb 2-1: Manufacturer: 튢磄蛇빹៲뢂ᨙ [ 1497.055112][ T42] usb 2-1: SerialNumber: ᥱ媦擄썜⇰摕帙寣༸ꬺ㑩氀뗻噮䃖䍔․ꕃ䰛䦞ꇴഴ딊᰼苼욀㓣慐谴ⰃꙪ꟰⭒ܝ䅎蕁⸶構玢㐶鐎弴쩘嶳딎롎὎噏刁僽㎣袕ゐ⯴셯➨䁬礐뒳ﲩó幗੾裚脍봴ጞ䱴녓珮틬མ竺믱Ꮎ⦃崬췃揵 [ 1497.353493][ T11] keytouch 0003:0926:3333.006D: fixing up Keytouch IEC report descriptor [ 1497.383494][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006D/input/input128 [ 1497.486069][ T42] usbhid 2-1:1.0: can't add hid device: -71 [ 1497.492493][ T42] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1497.506446][ T42] usb 2-1: USB disconnect, device number 76 [ 1497.601704][ T11] keytouch 0003:0926:3333.006D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1498.802119][ T11] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1498.969875][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 1498.989428][ T11] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1499.001150][ T11] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1499.028239][ T11] usb 2-1: config 0 has no interface number 0 [ 1499.036568][ T11] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1499.049478][ T11] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1499.062750][ T11] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1499.078263][ T11] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1499.090282][ T11] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1499.098477][ T11] usb 2-1: Product: syz [ 1499.103487][ T11] usb 2-1: Manufacturer: syz [ 1499.133682][ T11] usb 2-1: config 0 descriptor?? [ 1499.161787][T23189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1500.083729][T23191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.146833][ T11] usb 2-1: USB disconnect, device number 77 [ 1504.309034][T23206] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4508'. [ 1504.440984][T23206] gretap0: entered allmulticast mode [ 1505.453059][T23222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1505.769852][ T11] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1505.930307][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 1505.938208][ T11] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1505.979931][ T11] usb 2-1: config 0 has no interface number 0 [ 1505.988160][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.009801][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1506.050842][ T11] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1506.066517][ T11] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1506.080764][ T11] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1506.090953][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.125879][ T11] usb 2-1: config 0 descriptor?? [ 1506.205704][ T11] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1511.858778][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1511.901722][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1511.917826][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1511.931934][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1511.967078][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1513.288956][ T24] usb 5-1: USB disconnect, device number 69 [ 1513.602387][ T11] usb 2-1: USB disconnect, device number 78 [ 1513.631290][ T11] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1513.980120][T17119] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1514.040177][ T50] Bluetooth: hci5: command tx timeout [ 1514.129815][T17119] usb 7-1: Using ep0 maxpacket: 8 [ 1514.165378][T17119] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1514.201196][T17119] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1514.248176][T17119] usb 7-1: string descriptor 0 read error: -22 [ 1514.267575][T17119] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1514.283782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.296802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.309818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.322640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.335473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.348233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.360990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.373959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.386759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.399530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1514.461757][T17119] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1514.823749][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.859573][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.889293][T11061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.345185][T17119] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1515.542808][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1516.382232][ T50] Bluetooth: hci5: command tx timeout [ 1518.669558][ T50] Bluetooth: hci5: command tx timeout [ 1519.289858][ C0] net_ratelimit: 12852 callbacks suppressed [ 1519.289880][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.289888][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.291552][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.297211][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.308919][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.320088][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.331754][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.342878][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.354239][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1519.365318][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1520.105305][ C1] sched: DL replenish lagged too much [ 1521.232591][ T50] Bluetooth: hci5: command tx timeout [ 1524.299983][ C0] net_ratelimit: 13399 callbacks suppressed [ 1524.300007][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.301084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.317655][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.332324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.342338][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.355598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.365996][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.379014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.389304][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1524.402647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.310008][ C0] net_ratelimit: 12788 callbacks suppressed [ 1529.310030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.310882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.318255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.330997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.342505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.355265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.366652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.379250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.391027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1529.403363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.319697][ C1] net_ratelimit: 12705 callbacks suppressed [ 1534.319722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.320100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.327757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.340091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.351843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.363978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.376036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.387822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.400115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1534.412387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1536.599586][ T24] usb 2-1: device descriptor read/64, error -110 [ 1539.329882][ C1] net_ratelimit: 13543 callbacks suppressed [ 1539.329905][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.330962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.337499][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.350923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.360923][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.373445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.384014][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.396266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.407368][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1539.420474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.339871][ C0] net_ratelimit: 13559 callbacks suppressed [ 1544.339895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.340877][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.348096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.359785][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.371454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.383041][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.394970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.406371][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.418125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1544.429806][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.350441][ C0] net_ratelimit: 13087 callbacks suppressed [ 1549.350465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.350627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.358455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.371558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.382620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.395134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.406824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.419294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.431088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1549.443605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.359952][ C1] net_ratelimit: 13117 callbacks suppressed [ 1554.359976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.360989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.368034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.380255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.392345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.404343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.416440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.429070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.441584][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1554.453040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.369725][ C0] net_ratelimit: 13228 callbacks suppressed [ 1559.369749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.369871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.378739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.390143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.403012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.414192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.427330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.438273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.451080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1559.462175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.379739][ C0] net_ratelimit: 13223 callbacks suppressed [ 1564.379764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.380618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.388036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.400398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.412602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.424417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.436313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.448643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.460441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1564.472517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.389724][ C1] net_ratelimit: 13388 callbacks suppressed [ 1569.389748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.390620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.397892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.410753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.421997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.434264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.445988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.458599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.470355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1569.491656][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.399902][ C1] net_ratelimit: 13448 callbacks suppressed [ 1574.399933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.400765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.408490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.420322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.432580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.443990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.456663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.469215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.481088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1574.492902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.410119][ C1] net_ratelimit: 13561 callbacks suppressed [ 1579.410142][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.412109][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.417572][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.428980][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.440186][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.451777][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.462834][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.474318][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.485367][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1579.496904][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.420010][ C1] net_ratelimit: 13542 callbacks suppressed [ 1584.420034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.420703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.428672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.440685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.452707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.465009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.476808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.489325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.500968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1584.512762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.429761][ C0] net_ratelimit: 13601 callbacks suppressed [ 1589.429785][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.431124][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.437402][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.448601][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.460289][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.471150][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.490522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.494016][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.506082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1589.517578][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.439948][ C0] net_ratelimit: 13455 callbacks suppressed [ 1594.439971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.440381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.448444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.460728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.472975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.485945][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.496780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.507984][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.520120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1594.531326][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.449686][ C1] net_ratelimit: 13449 callbacks suppressed [ 1599.449710][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.450753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.457091][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.469175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.480766][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.492776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.504150][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.515794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.527281][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1599.539801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.459868][ C0] net_ratelimit: 13399 callbacks suppressed [ 1604.459892][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.460521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.467573][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.479207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.491042][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.502758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.521204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.526270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.538216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1604.550233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.469875][ C0] net_ratelimit: 13381 callbacks suppressed [ 1609.469900][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.471143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.477771][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.489596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.501239][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.513015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.524494][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.536557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.547800][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1609.559842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.479793][ C0] net_ratelimit: 13392 callbacks suppressed [ 1614.479818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.479840][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.487727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.499342][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.511503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.522718][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.534425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.546086][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.557806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1614.569567][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.490012][ C1] net_ratelimit: 13546 callbacks suppressed [ 1619.490036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.490686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.499579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.510507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.523033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.540927][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.546989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.557970][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.570401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1619.581323][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.500221][ C0] net_ratelimit: 13573 callbacks suppressed [ 1624.500245][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.500279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.508485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.520028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.532961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.544162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.556837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.568582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.581425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1624.593220][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1627.179650][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1627.186664][ C1] rcu: (detected by 1, t=10502 jiffies, g=204537, q=160587 ncpus=2) [ 1627.194758][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10271 (4295099819-4295089548), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1627.208181][ C1] rcu: rcu_preempt kthread starved for 10272 jiffies! g204537 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1627.219805][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1627.229826][ C1] rcu: RCU grace-period kthread stack dump: [ 1627.235754][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1627.249320][ C1] Call Trace: [ 1627.252642][ C1] [ 1627.255623][ C1] __schedule+0x17d9/0x56c0 [ 1627.260207][ C1] ? __pfx___schedule+0x10/0x10 [ 1627.265162][ C1] ? schedule+0x90/0x2b0 [ 1627.269459][ C1] schedule+0x164/0x2b0 [ 1627.273670][ C1] schedule_timeout+0x152/0x2c0 [ 1627.278579][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1627.284008][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1627.289350][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1627.295209][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1627.300815][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1627.305722][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1627.310987][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1627.316893][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1627.323110][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1627.328456][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1627.333715][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1627.339586][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1627.344228][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1627.349478][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1627.354453][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1627.359554][ C1] kthread+0x388/0x470 [ 1627.363679][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1627.368934][ C1] ? __pfx_kthread+0x10/0x10 [ 1627.373585][ C1] ret_from_fork+0x514/0xb70 [ 1627.378250][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1627.383430][ C1] ? __switch_to+0xc89/0x1420 [ 1627.388218][ C1] ? __pfx_kthread+0x10/0x10 [ 1627.392858][ C1] ret_from_fork_asm+0x1a/0x30 [ 1627.397709][ C1] [ 1627.400771][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1627.407130][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1627.412391][ C0] NMI backtrace for cpu 0 [ 1627.412413][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1627.412450][ C0] Tainted: [L]=SOFTLOCKUP [ 1627.412460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1627.412476][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1627.412513][ C0] Code: 89 44 11 20 c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 78 f9 a5 11 65 8b 0d 99 f9 a5 11 81 e1 00 01 ff 00 74 [ 1627.412530][ C0] RSP: 0018:ffffc900000067e8 EFLAGS: 00000246 [ 1627.412548][ C0] RAX: ffffffff89a10355 RBX: 0000000000000001 RCX: ffffffff8e88ef40 [ 1627.412562][ C0] RDX: 0000000059944983 RSI: 0000000000000001 RDI: 0000000000000000 [ 1627.412574][ C0] RBP: 0000000000000000 R08: ffffffff89a10324 R09: 0000000000000000 [ 1627.412587][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff888063698000 [ 1627.412600][ C0] R13: ffffffff89a10324 R14: ffff8881895e08d8 R15: dffffc0000000000 [ 1627.412615][ C0] FS: 0000000000000000(0000) GS:ffff888124f59000(0000) knlGS:0000000000000000 [ 1627.412631][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1627.412644][ C0] CR2: 00007f37c0e9a54e CR3: 0000000062116000 CR4: 00000000003526f0 [ 1627.412660][ C0] Call Trace: [ 1627.412668][ C0] [ 1627.412674][ C0] netdev_pick_tx+0xae5/0xf20 [ 1627.412698][ C0] netdev_core_pick_tx+0x145/0x360 [ 1627.412717][ C0] __dev_queue_xmit+0x5c8/0x37f0 [ 1627.412734][ C0] ? br_flood+0x3e6/0x8d0 [ 1627.412756][ C0] ? br_handle_frame_finish+0x1175/0x1990 [ 1627.412783][ C0] ? __napi_poll+0xaa/0x330 [ 1627.412806][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1627.412827][ C0] ? default_idle_call+0x72/0xb0 [ 1627.412854][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 1627.412871][ C0] ? cpu_startup_entry+0x43/0x60 [ 1627.412895][ C0] ? rest_init+0x2de/0x300 [ 1627.412911][ C0] ? x86_64_start_reservations+0x24/0x30 [ 1627.412942][ C0] ? x86_64_start_kernel+0x137/0x1b0 [ 1627.412970][ C0] ? common_startup_64+0x13e/0x157 [ 1627.412994][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1627.413017][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1627.413041][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1627.413073][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1627.413106][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1627.413130][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1627.413154][ C0] NF_HOOK+0x64e/0x6e0 [ 1627.413181][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1627.413207][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1627.413234][ C0] ? net_generic+0x1e/0x240 [ 1627.413258][ C0] ? net_generic+0x1e/0x240 [ 1627.413284][ C0] br_nf_post_routing+0xa53/0xee0 [ 1627.413310][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1627.413346][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1627.413373][ C0] nf_hook_slow+0xc5/0x220 [ 1627.413394][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1627.413418][ C0] NF_HOOK+0x23e/0x3f0 [ 1627.413441][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1627.413462][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1627.413482][ C0] ? net_generic+0x1e/0x240 [ 1627.413507][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1627.413533][ C0] ? net_generic+0x1e/0x240 [ 1627.413558][ C0] br_forward_finish+0xd3/0x130 [ 1627.413579][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1627.413603][ C0] br_nf_forward_finish+0xa76/0xea0 [ 1627.413635][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1627.413663][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1627.413687][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1627.413711][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1627.413735][ C0] NF_HOOK+0x64e/0x6e0 [ 1627.413762][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1627.413785][ C0] ? net_generic+0x1e/0x240 [ 1627.413809][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1627.413837][ C0] ? net_generic+0x1e/0x240 [ 1627.413862][ C0] ? net_generic+0x1e/0x240 [ 1627.413888][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 1627.413914][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1627.413942][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1627.413969][ C0] nf_hook_slow+0xc5/0x220 [ 1627.413990][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1627.414013][ C0] NF_HOOK+0x23e/0x3f0 [ 1627.414037][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1627.414058][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1627.414081][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1627.414107][ C0] ? br_handle_vlan+0x5e/0x530 [ 1627.414129][ C0] __br_forward+0x397/0x540 [ 1627.414151][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1627.414176][ C0] br_flood+0x3e6/0x8d0 [ 1627.414206][ C0] br_handle_frame_finish+0x1175/0x1990 [ 1627.414257][ C0] ? kasan_save_track+0x4f/0x80 [ 1627.414287][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1627.414317][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1627.414343][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1627.414362][ C0] ? nf_hook_slow+0x176/0x220 [ 1627.414383][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1627.414426][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1627.414451][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1627.414511][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1627.414539][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1627.414566][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1627.414617][ C0] ? lock_acquire+0x106/0x350 [ 1627.414653][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1627.414706][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1627.414762][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1627.414791][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1627.414819][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1627.414849][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1627.414878][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1627.414908][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1627.414933][ C0] br_handle_frame+0x127f/0x1510 [ 1627.414965][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1627.414992][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1627.415018][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1627.415041][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1627.415069][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1627.415095][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1627.415124][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1627.415151][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1627.415173][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1627.415198][ C0] ? NF_HOOK+0x336/0x3c0 [ 1627.415227][ C0] ? process_backlog+0x3c3/0x1860 [ 1627.415254][ C0] ? process_backlog+0x3c3/0x1860 [ 1627.415281][ C0] ? process_backlog+0x3c3/0x1860 [ 1627.415307][ C0] process_backlog+0x706/0x1860 [ 1627.415339][ C0] ? process_backlog+0x3c3/0x1860 [ 1627.415370][ C0] __napi_poll+0xaa/0x330 [ 1627.415392][ C0] net_rx_action+0x61d/0xf50 [ 1627.415422][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1627.415462][ C0] handle_softirqs+0x225/0x840 [ 1627.415486][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1627.415511][ C0] __irq_exit_rcu+0xca/0x220 [ 1627.415532][ C0] irq_exit_rcu+0x9/0x30 [ 1627.415551][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1627.415574][ C0] [ 1627.415581][ C0] [ 1627.415588][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1627.415608][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1627.415633][ C0] Code: dc 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ca 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1627.415648][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 1627.415665][ C0] RAX: 000000000202d8cd RBX: ffffffff819ab33c RCX: 0000000080000001 [ 1627.415678][ C0] RDX: 0000000000000001 RSI: ffffffff8e229caa RDI: ffffffff8c4bd380 [ 1627.415691][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1627.415705][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1627.415718][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1627.415735][ C0] ? do_idle+0x1cc/0x540 [ 1627.415765][ C0] default_idle+0x9/0x20 [ 1627.415791][ C0] default_idle_call+0x72/0xb0 [ 1627.415818][ C0] do_idle+0x1cc/0x540 [ 1627.415844][ C0] ? __pfx_do_idle+0x10/0x10 [ 1627.415873][ C0] cpu_startup_entry+0x43/0x60 [ 1627.415897][ C0] rest_init+0x2de/0x300 [ 1627.415915][ C0] start_kernel+0x392/0x3e0 [ 1627.415939][ C0] x86_64_start_reservations+0x24/0x30 [ 1627.415968][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1627.415997][ C0] common_startup_64+0x13e/0x157 [ 1627.416026][ C0] [ 1629.509846][ C0] net_ratelimit: 11578 callbacks suppressed [ 1629.509869][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.509980][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.517328][ C0] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.528561][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.540755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.551327][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.564104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.574765][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.587094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1629.599381][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.519709][ C0] net_ratelimit: 14777 callbacks suppressed [ 1634.519732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.520030][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.527607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.539563][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.551066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.562503][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.574196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.585819][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.597828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0) [ 1634.609270][ C1] bridge0: received packet on geneve0 with own address as source address (addr:32:3f:e3:8a:69:6d, vlan:0)