last executing test programs: 1m29.333560791s ago: executing program 1 (id=7313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) io_setup(0x7, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000002c0)=""/204) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe4) preadv(r4, &(0x7f0000000080), 0x0, 0x10001, 0x1) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000100001000000000000000000fc000000000000000000000000000001e000000200000000000000000000000000f70500"/64, @ANYBLOB="234fd3e5e8258d8f5460b3b0841a0d9268c404cfc8e82456038fc303c2a8ce58ef864322560ce9f711718fb4c0b5d92004827a27a1a7af8548b8f7b3a3d533d2bfd34e099b97a05b937b07d16cdd7a53e0c06bfaac86a9bd67491bcfabe1387633571926b76c73cde267120d23f59734708cf758fe3500e7d47ca4de7abe76c7af76055ef868cff64272207f0939de767c4ce8a041973b90421dfaf4548f78c962c5f0f946b173942a464cee2b9e18eb288fe9429a9134c647ecb9eebac3f65520ddeb69a43efa50fa6f17da0645e90edc18b380f2dccac2e126b64db82d331803da16625c2b39042695ec5df6804006ecc865a9d196efbfe17ee6e2a2e3", @ANYRES32, @ANYBLOB="fe80000000000000000000000000008a000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000050000000000000000000000000000000a00000040000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c001500590735000500000008001e0030040000"], 0x154}}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x504b, 0x1, 0x4, 0x70000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRES16=0x0, @ANYBLOB="00000000000000640000003dfbe52dd4dd400018000700"/35], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmmsg$inet(r8, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1m25.928062181s ago: executing program 1 (id=7324): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) 1m25.649906213s ago: executing program 1 (id=7326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv', 0x2) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d", 0x1}], 0x1}}], 0x1, 0x400c0) 1m25.604692507s ago: executing program 4 (id=7327): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1m25.189988054s ago: executing program 1 (id=7329): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) (rerun: 32) write$binfmt_misc(r5, &(0x7f0000000740), 0xff67) (async) sendfile(r4, r5, &(0x7f0000000040), 0xffff) (async) fcntl$addseals(r5, 0x409, 0x8) lseek(r5, 0x0, 0x4) fcntl$getownex(r3, 0x10, &(0x7f00000005c0)) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000000c0)={0x1, 0x2}, 0x2) (async, rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r6, 0x0, 0x0) (async, rerun: 32) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", "0000f0ff", "0300", "fcffff7f", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/81, 0x51}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x3000, 0xe, 0x1, 0x8, 0x0, [{0x37, 0x6, 0xae, '\x00', 0x6}, {0x7, 0x8, 0x5, '\x00', 0x7}, {0x60, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x6, 0x7f, '\x00', 0x55}, {0x6, 0xa2, 0x1, '\x00', 0x1}, {0x7, 0xc, 0x9, '\x00', 0x18}, {0x4, 0x5, 0x4, '\x00', 0x65}, {0x5, 0x5, 0x7, '\x00', 0x1}, {0x25, 0x3, 0xb, '\x00', 0x10}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x1, 0x10, 0x40, '\x00', 0x7f}, {0x3, 0x9, 0xef, '\x00', 0xe}, {0xa, 0x0, 0xaf, '\x00', 0xf}, {0x80, 0x2, 0x0, '\x00', 0x53}, {0x8, 0x2, 0x3, '\x00', 0x9}, {0xf, 0x18, 0xfb, '\x00', 0x1c}, {0x5, 0x80, 0x1, '\x00', 0x3}, {0xf9, 0xd0, 0x6, '\x00', 0xe9}, {0x5, 0x4, 0x18, '\x00', 0x1}, {0xf, 0x40, 0x6, '\x00', 0x3}, {0xe, 0x1, 0x9, '\x00', 0x2}, {0x7, 0xb, 0x32, '\x00', 0xc4}, {0xb, 0x7, 0x4, '\x00', 0x6}, {0x6, 0x4, 0x80, '\x00', 0x13}]}}) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) 1m25.045403381s ago: executing program 4 (id=7332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r2, r2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r6, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "010eb7e3e7090300"}, 0x10}, 0x1, 0x0, 0x0, 0x4041810}, 0x4) readv(r5, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) syz_usb_connect(0x2, 0x52, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m24.87411754s ago: executing program 1 (id=7334): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="020900e8001128d840e8e705101e8c100000090901"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) r1 = gettid() openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xffffffffffffff2d, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14bb43321cb18cb2f9000000100001000000000000000000f8254463c6674517e6070300000a50007265646972000000100001800a000100696e6e65720000000900001223187a30000000000900020073797a3200000000140000001100010000000000000000000700000a00000000000000000000000000000000ba"], 0x78}}, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x21, 0x0) 1m23.925787041s ago: executing program 2 (id=7338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) recvmmsg(r0, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m22.953161118s ago: executing program 0 (id=7339): syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x9c) r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x240882, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2c6}}, './file0\x00'}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.690493524s ago: executing program 3 (id=7340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0x3, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "def8bc750bcf6fc3070b4f8f8dbfa3c10bd53d27537330202b9387"}}]}, 0x154}}, 0x804) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @timestamp, @window={0x3, 0x0, 0x4}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x13) sendto$inet(r0, &(0x7f0000000580)="400f68cdbbf6fc9688bcbeb7109aa674de7617cebe4d27f6ba6d8cc3", 0x1c, 0x40c0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d000100000000"], 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x84) 1m21.30861453s ago: executing program 1 (id=7341): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x4a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000952aade36101f69f4b000a00000000000000040004d1e178882c5d6d871a55cb6833ac0c"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$tcp_mem(r5, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 1m21.30838274s ago: executing program 2 (id=7342): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1m21.099164868s ago: executing program 2 (id=7343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xe}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0xfffc, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) 1m20.263115022s ago: executing program 0 (id=7344): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @local, {[@end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000004}, {@private=0xa010101}, {@broadcast}, {@local}, {@private, 0xc}, {@multicast2}, {@private}]}]}}}}}}}, 0x0) 1m20.022871281s ago: executing program 4 (id=7345): r0 = fsopen(&(0x7f0000000280)='efivarfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="ff5737e406bc15fe9e99cd479e718e157e23932f", 0x14}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aac010000200a0300000000000000000002000000bc000380900003801400010076657468305f746f5f627269646765001400010074756e6c3000000000000000000000001400010076657468315f766c616e0000000000001400010069703665727370616e3000000000000014000100767863616e310000000000000000000014000100697036746e6c300000000000000000001400010067656e65766530000000000000000000180003801400010065727370616e30000000000000000000080002400000000508000240000004010c00054000000000200000050900010073797a30"], 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x165) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) shutdown(r5, 0x1) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, 0x0, &(0x7f0000000400)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000000ff02"]) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r5, &(0x7f0000003b80)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsopen(&(0x7f0000000180)='romfs\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1m19.835186479s ago: executing program 0 (id=7346): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, {0xfffffff8, 0xe6, 0x9, 0x5}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000480)={0x1, 0x0, {0x40401, 0x3, 0x3001, 0x0, 0x4, 0x8, 0x0, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) 1m19.82410721s ago: executing program 2 (id=7347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000000)="03020000008002ff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x18, 0x9c, 0x75, 0x20, 0x54c, 0x6c1, 0x3416, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0x90, 0xfc, 0x19, 0x0, [], [{{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x0, 0x82}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x8, 0x2}}]}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f00"], 0x58}}, 0x0) 1m19.633979985s ago: executing program 3 (id=7348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000eb0900010073797a310000000014000380100000800c00018006000100d101000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r2, 0x4, &(0x7f00000000c0)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 1m18.191142532s ago: executing program 3 (id=7349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000440)="e1da1210a672f814683235123de28a0068014452de0f70fa365a9f5d94e61d92c652d794a7b72b99fb7e5c2c1295de31761d25ab6a26b5f686e438b0ef828093d3a6d9235e2aeebad58b5e340ecb0f720599f7b93572122a4f23faf152e68b99138fa4f4073d020bdcb2af5cd42807b3fa0dcf86f6ca92452d7bf7fb46e8225a90df3ea12c3ee57340fc077fac309d98e2857875bb4828d2b63bbe3e6505046e730ba05cb9ad0dcf04e4e004a67d0b53a02bcdca15ac29d782c585d14aebc506e3b06f", 0xc3}], 0x1, &(0x7f0000000740)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x18}}], 0x30, 0x40004840}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="99742bbd7000fbdbdf251500000030000280000002000c000000140003800000020001000000010002000600000008000200080000000800020001000000000003800000020005000000000002000500000000000100ff010000", @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x200000d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000540)=0x96, 0x4) sendto$inet6(r8, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(r6, 0x3, 0x1, &(0x7f00000000c0)="c9a13e03", 0x4) sendmmsg$inet(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) rt_sigpending(&(0x7f0000000140), 0x8) 1m18.075780832s ago: executing program 0 (id=7350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x4, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) fdatasync(r2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r8, 0x80086303, &(0x7f0000000000)) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x29, 0x2, 0x81, 0x1, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/235, 0xeb}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200)=0x1, 0x1) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r9 = semget(0x0, 0x6, 0x210) semctl$GETNCNT(r9, 0x7, 0xe, &(0x7f0000000080)=""/231) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1m12.985710297s ago: executing program 4 (id=7351): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xda, 0x47, 0x56, 0x8, 0x93b, 0xa102, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x65, 0xa8}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x5000000, 0x0, {0x0, 0x0, 0x74, r7, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 1m12.464061077s ago: executing program 2 (id=7352): r0 = socket(0x80000000000000a, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x800, 0x7) (async) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x3, 0x5}, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0xc, {{0xa, 0x4e22, 0x1000, @mcast1={0xff, 0x7}, 0x288e}}, {{0xa, 0x0, 0x40000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}}}, 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newchain={0x2564, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x8, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x24f4, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x1}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x2410, 0x9, 0x0, 0x1, [@m_xt={0x200, 0x7, 0x0, 0x0, {{0x7}, {0x17c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xc8, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6c8550b7a42d517fccd490a6cbbb6f7c917"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x3ff, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0xfffffffd, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_police={0x1d94, 0x7, 0x0, 0x0, {{0xb}, {0x1d2c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x61, 0x800, 0x0, 0x8001, 0xff, 0x6, 0x9, 0x0, 0x5, 0xf, 0x8, 0x7, 0x15d, 0x8f, 0x2b, 0x1, 0xd, 0x9, 0x6, 0x4, 0x5, 0x8, 0xfffffffe, 0x9, 0x8, 0xf83, 0x1, 0x1, 0x4, 0x100, 0x4, 0x1c7, 0xffffffff, 0x80, 0x101, 0x7485, 0x2, 0x2, 0x3, 0x7, 0x401, 0xfffffff8, 0x4, 0x8, 0x9, 0x498, 0x4, 0x9d9, 0x3, 0x10001, 0x2b, 0xb88, 0x57dd, 0x5, 0x6, 0x3, 0x4, 0x7fff, 0x2, 0x1, 0x4, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x48, 0xe5f, 0x4, 0xc962, 0xdc8e, 0xffffffff, 0x1, 0x3, 0x81, 0x0, 0x5, 0xb, 0xb3ec, 0x9, 0xffff7fff, 0x8001, 0xfffffe01, 0x3a, 0x8001, 0x5, 0xfa2, 0x4, 0xffffffff, 0x7, 0x5, 0x5, 0x2, 0x4, 0x1, 0x2, 0x1d, 0x9, 0x8, 0x0, 0x4, 0x401, 0xc, 0x4, 0x4, 0x9, 0x0, 0x4, 0x6, 0x2, 0x3f2, 0x9, 0x7, 0x1, 0x9f82, 0x3, 0x0, 0x1ff, 0x5, 0xf, 0x9, 0x7fffffff, 0xffffffff, 0x3, 0x76c4, 0xb6d, 0x4000000, 0x2, 0xca, 0xc727, 0xb8, 0x5, 0x10, 0xafc8, 0x43f7, 0x2, 0x27a, 0x30d3c17a, 0x6, 0x7, 0x3, 0x6, 0x5, 0x4, 0x8001, 0xff, 0x7, 0x7, 0x5, 0x6b, 0x80000001, 0x5, 0x9, 0x100, 0x69, 0x7, 0x4, 0x10000, 0xfffffffd, 0xa5, 0x8, 0x3, 0x8, 0x7, 0x8, 0x3, 0x5, 0x5, 0x9038, 0xffffffff, 0x10, 0x8, 0x4, 0x966, 0x8506, 0xff, 0x4, 0x1, 0x9, 0x0, 0x6, 0x6, 0x7fff, 0x3, 0x0, 0xfffffff7, 0x5, 0x3, 0x8, 0x9, 0x1000, 0x3, 0x7f, 0x3, 0x0, 0x77f, 0xb1, 0x200, 0x6, 0x0, 0xf7, 0x2, 0x3, 0x9, 0x2, 0x83f, 0x6b7, 0x60d, 0x9, 0x559, 0xff, 0x8, 0x4, 0x6, 0xef, 0x9, 0x223, 0x6, 0x0, 0x1, 0x2, 0x4, 0xfe, 0x5768, 0x9, 0x0, 0x8, 0x7, 0xffffffff, 0x5, 0x3, 0x5, 0x0, 0x100, 0x0, 0x1ff, 0x3, 0x6, 0x3, 0x7, 0xb, 0x4, 0x3, 0x67, 0x7, 0x6, 0x3, 0x2, 0x9, 0x40, 0x3, 0xb, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x12da}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x2, 0x7, 0x80000001, 0xb8a1fcc, 0x7, 0x5, 0xfff, 0xffffffff, 0x3, 0xfffffff9, 0x69ffd501, 0x23, 0x538, 0x77, 0x6, 0x200, 0x3, 0xc49, 0x3, 0x0, 0x80000001, 0x7, 0x10001, 0x10001, 0x2, 0x8, 0x7e2e8aa4, 0x6, 0x4, 0xefd, 0x5, 0x1, 0xe, 0xfffeffff, 0x6, 0x3, 0x7f, 0x4, 0x482, 0x2, 0x1588, 0x10000, 0x7, 0x9, 0x6, 0x7, 0xffffffff, 0x989d, 0x0, 0x40000, 0x200, 0x72, 0x0, 0x80000001, 0x4, 0x7fff, 0x3, 0x9, 0xca59, 0x5, 0x3, 0x6, 0x9, 0x8, 0x829, 0x20f, 0x9, 0x1, 0x9, 0x3b5e, 0x10000, 0x1ff, 0x5, 0x4, 0x4, 0xf, 0xff2, 0xfffffffa, 0x3ff, 0x8, 0xa, 0x101, 0xa, 0x80000001, 0x2, 0x0, 0x3, 0x3ff, 0x7, 0x0, 0x0, 0x6, 0x10000, 0x7a89, 0x1, 0xfffffffc, 0xfbb, 0x4, 0x8, 0xffff, 0x731c8282, 0x6, 0x3, 0x8, 0x3, 0x5, 0x0, 0x9b, 0x81, 0xeaec, 0xb, 0x8, 0x7, 0x3ff, 0x3ff, 0xb9c, 0xa40, 0x7, 0x7ff, 0x5, 0x4, 0xf, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x27, 0x0, 0xffff, 0x200, 0xaf32, 0x6, 0x3, 0xfffffffa, 0xe, 0x5, 0x2, 0x21, 0x1, 0x7, 0x3, 0x0, 0x6, 0x0, 0x9, 0x3, 0x9, 0xe7, 0xe20, 0x30300000, 0x8, 0x6, 0x4000000, 0xff, 0x9a, 0x0, 0xd, 0x3, 0x81, 0x1, 0x4c06, 0xfffffff9, 0x25, 0x2, 0x200, 0x3, 0x4, 0x6, 0x10, 0x1, 0x2, 0x200, 0xa, 0x7, 0xec37, 0x1, 0x4, 0x14be, 0x1, 0x80000000, 0x26, 0x5, 0x1000, 0x0, 0x5, 0x9, 0xfff, 0x1, 0x5, 0x7fffffff, 0x1, 0xffff, 0x5, 0x80000001, 0x9f4, 0x3, 0x7fffffff, 0x3, 0x927ffc6, 0xfffffff9, 0x400, 0x2, 0xfff, 0x80000000, 0x6, 0x9, 0x0, 0x8000, 0xd64, 0x6, 0x8, 0x7, 0x101, 0x3, 0x20000, 0x2, 0x6, 0x2, 0x82c, 0x1, 0x10000, 0x7, 0x401, 0xdd7b, 0x6, 0x1, 0x23a, 0x2, 0x7, 0x0, 0xe4, 0xb, 0x2, 0x4, 0x8, 0x6d, 0x1, 0x9b0, 0x8, 0x2, 0x200, 0x43, 0xe8, 0x80000001, 0x18d, 0x8, 0x56, 0x6, 0x9, 0x9, 0x4, 0x80, 0x6a9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x9, 0x5, 0x3, {0x9, 0x0, 0x80, 0xd, 0x0, 0x8}, {0x4, 0x2, 0x0, 0xef0a, 0x3, 0x60}, 0x9, 0xe227, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xc7, 0x80000001, 0x8, 0x30b, 0x4, 0x65f2, 0x9, 0x2, 0x8, 0x86, 0x7, 0x4, 0x7ff, 0x2, 0x2, 0x2, 0x4, 0xe, 0x1, 0x7, 0x1, 0x9, 0x0, 0x5, 0x7, 0x4, 0x6, 0x80000001, 0x7, 0x9, 0x0, 0x80, 0x4, 0x4, 0xbc9, 0x7, 0x2, 0xfffffff7, 0x6, 0x40000000, 0x7, 0x9, 0x5, 0x0, 0x10001, 0x7, 0x0, 0xfffffbff, 0x3, 0xc5, 0x976, 0x4, 0x40, 0x6, 0xffff, 0x8, 0x3ff, 0x9, 0xe4, 0x7, 0xea, 0x1, 0x1, 0x3b2, 0x4, 0x3, 0x9, 0x7fffffff, 0x3, 0x8, 0x7051, 0x7, 0x7, 0x2, 0x3, 0xe, 0xc4, 0xe9, 0x40, 0x100, 0x3ff, 0x3, 0x0, 0x2, 0x7ff, 0x8, 0x0, 0x7, 0xaa, 0x4, 0x0, 0x0, 0xffff4eaa, 0x4, 0x9, 0x7f, 0x9, 0x2, 0xffffffc0, 0xfffffffc, 0x3, 0x400, 0x1, 0x8, 0x4, 0x3c, 0xffffff81, 0x3, 0x3, 0xfff, 0x7, 0x2, 0x5, 0xffffffff, 0x3, 0xfffffff9, 0xf516, 0xff, 0x984, 0x6, 0x2, 0xffffff65, 0x0, 0x7ff, 0x6, 0x5, 0x4, 0x1000, 0x80000000, 0x4, 0x2, 0x2, 0x1, 0xe, 0x3, 0xbb2c, 0x100, 0xfffffff8, 0x0, 0x2, 0xfe3b, 0x10000, 0x0, 0x32a, 0xd, 0x2, 0x4, 0x7, 0x9, 0x5, 0x1, 0x0, 0x6, 0x6, 0xb2, 0x6bb0, 0x3ff, 0x3, 0xb, 0x6c92119e, 0x4, 0x7fff, 0x7, 0x10001, 0x4, 0xe, 0xf, 0xfffffff7, 0x3, 0x5, 0x0, 0x9, 0x2, 0x0, 0x9, 0x7fff, 0xe, 0x7a, 0xe87, 0x25e, 0xffe8, 0xb, 0x3a34c3db, 0xf7bf, 0xfffffffd, 0x9, 0xe, 0x3ff, 0x0, 0x6c, 0x6, 0x80, 0xfa, 0x1, 0x4, 0xfffffff9, 0x7f, 0x0, 0x6, 0x40000000, 0xe8a, 0x4, 0x4, 0x7fff, 0x4, 0x7, 0x1, 0x1, 0x0, 0x9, 0x4, 0xb, 0x4, 0x101, 0x2, 0x19ab, 0x9, 0x101, 0xffffff7f, 0x4, 0x7fffffff, 0xf, 0x28, 0x400, 0x26, 0x9, 0xffff, 0x6, 0x8, 0x2, 0x7, 0x5, 0xa8e00000, 0x1, 0x1, 0x7, 0x10000, 0x3, 0x4, 0x2, 0x7, 0x101, 0xfffffffd, 0x7f, 0x0, 0x48, 0x5, 0x3, 0x9, 0xc7b, 0x400, 0x1, 0x4, 0x1, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x986, 0x7, 0xfffffff2, 0x0, 0x8, 0xb03, 0x7, 0xb2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x5, 0x4, 0xd07, 0x6, 0xca1, 0xffffff81, 0xd, 0x34100, 0x1, 0x8c7d, 0x1, 0x9, 0x6, 0x8, 0x6b7, 0x9, 0x0, 0x9, 0x0, 0x7f01, 0xffff8000, 0x5, 0xa, 0x3018, 0x3, 0xfff, 0x4e3, 0x8a, 0x7, 0xb8eb, 0xe8, 0x80000000, 0x1, 0x0, 0x0, 0x9, 0x5, 0x6, 0x4, 0x27, 0x9, 0x1c28, 0xb, 0x6, 0x2, 0xf, 0x11, 0x1, 0x7, 0xfffffddf, 0x80000000, 0xe, 0x5, 0x3, 0x1ff, 0x7, 0x1, 0x6, 0xc0000000, 0x5, 0x7fffffff, 0x81, 0x6, 0x8, 0x800, 0x1, 0xfffffffa, 0x3, 0x7, 0x0, 0x1d, 0xcf39, 0x820, 0x9d, 0x3b5, 0x0, 0xe, 0x10, 0x6, 0x6, 0x1, 0x65, 0x0, 0x402, 0x425525b2, 0x7, 0x19b0, 0x200, 0x7, 0xfffffffc, 0x3ff, 0x1, 0xb8, 0x6, 0x0, 0x0, 0xc7, 0x8, 0x7, 0x1aa, 0x1, 0x7f, 0xffff0001, 0x56, 0x7, 0x7, 0x8, 0xa7, 0x101, 0x264e0d79, 0x8, 0x2, 0xf25f, 0x441, 0x3, 0xff, 0x2, 0x623730b, 0x7fffffff, 0x4, 0x8, 0x6, 0x81, 0x800, 0xa0000000, 0xb, 0x80000000, 0x3, 0x3, 0x6, 0x2, 0xfffffffd, 0x1000, 0xac0, 0x10000, 0x3, 0xbaf, 0x101, 0x0, 0x200, 0x9, 0x2, 0xce6, 0xc, 0x6, 0x8, 0xff, 0x6, 0x4, 0x6, 0x3, 0xfffffffa, 0x8, 0x1, 0x6, 0x6, 0x0, 0x8, 0x5, 0x5, 0x80000000, 0x4, 0x4, 0x7, 0x0, 0xfc, 0x4, 0x7, 0x6e, 0x1000, 0xffff7fff, 0x7fffffff, 0x8, 0x5, 0x9, 0x3d, 0x3, 0xcefe, 0x9, 0xe, 0x9, 0x9, 0x7, 0x2000000, 0x3df2ed77, 0x3ff, 0x4, 0x7, 0xffff0f30, 0x4, 0x8000000, 0x0, 0x5, 0xf1b, 0x7, 0x1, 0x49, 0x7, 0x1, 0xe3f8, 0x9, 0x8, 0x1, 0x9, 0x1, 0x2, 0x101, 0x4, 0x8, 0x3, 0x3ff, 0x0, 0x0, 0x9, 0x28f42cc8, 0x2, 0x8, 0x0, 0x6, 0x6, 0xed, 0x7fffffff, 0x7, 0x6, 0x2, 0x1, 0xfffffc01, 0x844, 0x5, 0x8, 0xe, 0xd, 0x4, 0x8001, 0xfffffffb, 0x9, 0x3f1, 0x4, 0xe, 0x2, 0x1, 0x7, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x4, 0x9, 0xd, {0x3, 0x1, 0xfff8, 0x9, 0x4, 0x1}, {0x9, 0x2, 0x4, 0x5480, 0x6, 0x6b}, 0x6, 0xc, 0xfffffff6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x9, 0x80000001, 0xbf, 0x7fffffff, 0x8, 0x1, 0xf84c, 0x2, 0x697, 0x0, 0x8, 0x3, 0x0, 0x8, 0x0, 0x6, 0x1, 0x88, 0x0, 0x7fffffff, 0x6, 0x7d, 0x5, 0x0, 0x6, 0x50, 0x2, 0x5, 0x8, 0x44, 0x8, 0x7, 0x3, 0x46, 0x8001, 0x4, 0x2, 0x80000001, 0x8, 0xe35a, 0xd6, 0xffffbfde, 0x6, 0x0, 0x5, 0xb340, 0xfff, 0xa1d, 0x1, 0x58, 0x9, 0x5, 0x4, 0x7, 0x6, 0xfffffffb, 0x9, 0x40, 0x1, 0x10001, 0x4, 0xf, 0x3, 0x0, 0x0, 0x3ff, 0x3, 0x1, 0xb, 0x3, 0x8, 0x2c0, 0x7, 0xffffffa4, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x1, 0x80000000, 0x6, 0x4, 0xfec, 0x9, 0x5, 0xb, 0x8, 0xe, 0x8852, 0xffff, 0x8001, 0x7, 0x9, 0x8000, 0x7, 0x7, 0x3, 0x9, 0x8, 0xf3d1, 0x7ff, 0xad0, 0x80000000, 0x58686b66, 0x5, 0x5, 0x9, 0x6, 0x3, 0xce, 0x80000000, 0x6, 0x8, 0x0, 0x8, 0x4, 0x2, 0x4, 0x401, 0x1, 0x9, 0x800, 0x6, 0xff, 0x0, 0x8, 0x0, 0x71ceccff, 0xffffffff, 0x9, 0x0, 0x3ff, 0x7b4, 0x8a, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0xc, 0x9, 0x41, 0x3, 0x7f, 0x2, 0x7, 0x8, 0x4ed, 0x6, 0x7, 0x7fff, 0x9, 0x6, 0x9, 0x400000, 0x2, 0x0, 0x5, 0x9, 0x0, 0x0, 0x40, 0x1, 0x8, 0x331f, 0x6, 0x0, 0x7fff, 0x7, 0x1, 0x1, 0x2, 0x4f2e, 0x1ff, 0xdb4, 0x4, 0x8765, 0xfffffffb, 0xb5a3, 0x6f1, 0xfffffffb, 0x2d, 0x5, 0x1, 0xbe, 0x400, 0x4, 0xffffffff, 0x9, 0x8, 0x4, 0xc, 0x5, 0x9, 0x9da, 0x3, 0x3, 0xe3, 0x7, 0x0, 0x100, 0xc, 0x8, 0x4, 0x2, 0x4, 0xfffffffe, 0xd3b76a9, 0x8, 0x0, 0x9, 0x2, 0x3, 0x6, 0x9, 0xea7, 0x8, 0x8, 0x12, 0x10000, 0x1, 0x7, 0x9, 0x2, 0x1, 0x98, 0x3, 0x800, 0x40, 0x1, 0x2, 0x80, 0x7, 0x8, 0x1, 0x3, 0x4, 0x40, 0x7, 0x80, 0x9, 0x7, 0x3, 0x1, 0x7, 0x9, 0x50, 0x3, 0x400, 0x2db7, 0x8, 0x2e, 0xcc, 0x1363]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0xffffffffffffffff, 0x60000000, 0x2, 0x0, {0x2, 0x24470b257b9da7c4, 0x5, 0x6, 0x9, 0x8}, {0x40, 0x1, 0x6, 0x38ea, 0xfee9, 0x5}, 0x7ff, 0x81, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x2, 0x80, 0x4, 0x53, 0x5, 0x9, 0x6, 0xde77, 0xbd, 0x3, 0xd9, 0x2d5, 0x7fffffff, 0xaa, 0xa25, 0xffffff5e, 0xfffffffe, 0x8000, 0x2, 0x41, 0x0, 0x0, 0x4, 0x6, 0x200, 0x1, 0x81, 0x3, 0x3, 0xff, 0x1000, 0x3, 0x800, 0x1ff, 0x1, 0x0, 0x0, 0x7, 0x6, 0x1, 0xffffffed, 0xd, 0x2, 0x2, 0x200, 0x4, 0x5, 0xffff, 0x4, 0x6, 0xfffffffb, 0x5cd8, 0x8, 0x2, 0x8, 0xe6, 0x10000, 0x8, 0xd, 0x9, 0x6, 0x3, 0x9, 0xe019, 0x3a79, 0xffff, 0x1240000, 0xa, 0x2, 0x1, 0xd5, 0xf5, 0x2478, 0x5, 0x67592942, 0x3, 0x8, 0x200, 0x5, 0x1000, 0x6, 0xe, 0x80000001, 0x53da, 0x35, 0x2, 0xd0f8, 0xffffffff, 0xffffffbe, 0x6, 0x63, 0x8, 0x800, 0x0, 0x5, 0x4, 0x0, 0x3, 0x1e, 0x32380000, 0x4, 0x9, 0xc, 0x3, 0x10000, 0x2, 0x7, 0x3, 0x6, 0x0, 0x3, 0x3, 0xfffffff3, 0x88, 0x1, 0x7e, 0x4, 0x5, 0x401, 0x7fff, 0x40, 0x7, 0x0, 0x3, 0x8, 0x4, 0x0, 0x2ba, 0x1, 0x101, 0x8, 0x401, 0x5, 0xd679, 0x9, 0xfc0d, 0xfffffffe, 0xfffffffa, 0x3ff, 0xce, 0x0, 0x1, 0x5, 0x7, 0x2, 0x400, 0x6f1789ae, 0x1, 0x6fc, 0xff, 0x9, 0x7, 0x3, 0x5, 0x4, 0x7, 0x100, 0x8, 0x4, 0x8, 0x81, 0x2, 0x7, 0xb6, 0x4, 0x3, 0x5, 0x2f, 0xa219, 0x5, 0x6, 0x58, 0x6, 0x4, 0x21ff, 0x3ff, 0x7, 0x9, 0x7eed, 0x9, 0x2, 0x7, 0x1, 0xf7, 0x10001, 0x4, 0x1, 0xc19, 0x80, 0x8000, 0x9, 0x3ff, 0x6316, 0x3, 0x1ff, 0xfffffeff, 0xb, 0x0, 0xf3, 0x8000, 0x0, 0x7, 0x7, 0x3, 0x8, 0x4, 0xfffffff7, 0x1, 0x6, 0x3ff, 0xaeb1, 0x1ff, 0xa30, 0xc5, 0x1, 0x3ff, 0x8, 0x9, 0x8000, 0x28584665, 0xb, 0x1, 0x800, 0x5, 0x1, 0x53, 0x2, 0x401, 0x0, 0x5, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, 0x2, 0x1, 0x3ff, 0x3ff, 0x80000000, 0x7, 0x6, 0xed43, 0x8, 0x80000000, 0x3, 0x4, 0x6, 0xffffff68]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x9, 0xd, 0x4, 0x7, 0x401, 0x7, 0xaf, 0x8, 0x100, 0x7, 0x1, 0x2c, 0xc69, 0x8bb, 0x5, 0x9, 0x5, 0x1, 0x6, 0x7, 0x200, 0xb, 0x9, 0x4, 0x7fffffff, 0x9, 0x8, 0x81, 0xf, 0x0, 0x9, 0x0, 0x1000, 0x7, 0xffffffff, 0x10001, 0x3c3, 0x6, 0x7fffffff, 0x2, 0x1, 0x6, 0x2, 0x5, 0x6, 0x224f3e2d, 0x7, 0x5, 0x2353, 0x8000, 0x3, 0xcbc, 0x5, 0x3, 0xfffffffd, 0x4, 0x3, 0x9, 0x6, 0x40, 0x7fff, 0x48, 0x2, 0xfffffe8c, 0x0, 0x6, 0x101, 0x5, 0x8, 0x9aa, 0xd, 0x9, 0x6536, 0x5, 0xf, 0x2, 0x40, 0x7, 0x1, 0x5, 0x0, 0x3, 0x3ff, 0x7fff, 0x5, 0x4, 0x3ff8000, 0x5, 0x6, 0x568b, 0x9b5, 0x4, 0x8, 0x7, 0x7, 0x0, 0x32780e8a, 0x1, 0x6, 0x6, 0x4, 0xa, 0x6, 0x4, 0x4, 0x2, 0x8, 0x9, 0x9, 0x0, 0x111, 0x70000000, 0x2, 0x3, 0xb, 0x3, 0x87, 0x3, 0x3c, 0x6, 0x401, 0x49e20000, 0x7ff, 0x3, 0x7, 0x100, 0xfffffffe, 0x8000, 0x5f, 0x8b3, 0xbec1, 0x516, 0x0, 0x80000001, 0x7, 0x0, 0x7f, 0x6, 0x4, 0x8001, 0x9, 0x100, 0x1c0000, 0x2, 0x2, 0xc, 0x4, 0x0, 0x2, 0x0, 0xe2d, 0xd, 0xc8, 0x5a, 0x2, 0x4, 0xfffff000, 0x20c0, 0x7, 0x3, 0x0, 0x4, 0x5, 0x93, 0x80000001, 0x6ec, 0x8, 0x400, 0x2, 0xffff, 0x4, 0x800, 0x8, 0x23cd, 0x9, 0x7b4625d9, 0x10001, 0x7, 0x5, 0x6, 0x0, 0x7, 0x5, 0x100, 0xffffffff, 0x6, 0x800, 0x8, 0x8, 0x50b, 0x0, 0xfffffffe, 0x8, 0x2, 0x8fc3, 0x7898, 0x6, 0xe, 0x5, 0x7, 0x9, 0x5a1, 0x8, 0x9, 0x3ff, 0x3272, 0x6695, 0x3, 0x2, 0x7, 0x3, 0xa6, 0x6, 0x2, 0x3, 0x7, 0x3, 0x5d96, 0x2, 0x7, 0x7f, 0x9, 0x4, 0x1, 0x2, 0x6, 0x10, 0x4, 0x0, 0x4, 0x0, 0xfffffff9, 0x7fff, 0xce0b, 0x4, 0x100, 0x8, 0x20061, 0x1, 0x2, 0x2, 0x976, 0x1000, 0x27, 0x3, 0x7, 0xd8c4, 0x7fff, 0xff, 0x5, 0xfffeffff, 0xc, 0xffffff2e, 0x1, 0x36580000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x3d, 0x6, "f4d877a90d41d32d4e8d64bd48ab50613ee26537d9187c431b94aed19288d84ebf16477ecfd92cbc888e9ca60185bb2e646cf459b68df6d1f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2564}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m12.462167863s ago: executing program 0 (id=7353): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1m12.048240688s ago: executing program 3 (id=7354): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a020400) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x2e, @loopback, 0x4e24, 0x2, 'wlc\x00', 0xc, 0x9, 0x40}, 0x2c) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 1m10.683820198s ago: executing program 0 (id=7355): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettaction={0x6c, 0x32, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000003c0)=0x8) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x2, r7, 0x1, 0xffff, 0xa, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m10.267558922s ago: executing program 2 (id=7356): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r2, r2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r6, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "010eb7e3e7090300"}, 0x10}, 0x1, 0x0, 0x0, 0x4041810}, 0x4) readv(r5, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) syz_usb_connect(0x2, 0x52, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m9.162276262s ago: executing program 4 (id=7357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xe}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0xfffc, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) 1m9.142393862s ago: executing program 3 (id=7358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000000000000000000000001042081000002892f00000800000086dd88a888"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x6) write$UHID_INPUT(r2, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b70300002f07ffff85000000d400000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000200)=""/30, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m8.624343863s ago: executing program 3 (id=7359): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)={0x30000011}) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) 1m8.324194168s ago: executing program 4 (id=7360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x3b0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES64=r4, @ANYRES64=r4], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="01002cb57000fbdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="9c007a801400010068a7d1ee3c3c54e5eb27e395da2a4d850c0003008373c83e0e76cde11c000200f7543636eb198f9ae0d1058bdb76974bd383d5a6b1387a89240001009d"], 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 32 (id=7341): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x4a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000952aade36101f69f4b000a00000000000000040004d1e178882c5d6d871a55cb6833ac0c"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$tcp_mem(r5, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) kernel console output (not intermixed with test programs): 80] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 654.202842][T23080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.202869][T23080] [ 654.455368][ T30] audit: type=1326 audit(1763423171.321:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 654.477775][ T30] audit: type=1326 audit(1763423171.321:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 654.499917][ T30] audit: type=1326 audit(1763423171.321:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 654.523033][ T30] audit: type=1326 audit(1763423171.321:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 654.545154][ T30] audit: type=1326 audit(1763423171.321:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23067 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 654.832633][T23091] FAULT_INJECTION: forcing a failure. [ 654.832633][T23091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.845986][T23091] CPU: 0 UID: 0 PID: 23091 Comm: syz.0.6997 Not tainted syzkaller #0 PREEMPT(full) [ 654.846011][T23091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.846023][T23091] Call Trace: [ 654.846032][T23091] [ 654.846040][T23091] dump_stack_lvl+0x189/0x250 [ 654.846068][T23091] ? __pfx____ratelimit+0x10/0x10 [ 654.846088][T23091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.846106][T23091] ? __pfx__printk+0x10/0x10 [ 654.846120][T23091] ? __might_fault+0xb0/0x130 [ 654.846147][T23091] should_fail_ex+0x414/0x560 [ 654.846170][T23091] _copy_from_user+0x2d/0xb0 [ 654.846189][T23091] get_compat_msghdr+0xad/0x4a0 [ 654.846208][T23091] ? __pfx_get_compat_msghdr+0x10/0x10 [ 654.846230][T23091] ___sys_sendmsg+0x193/0x2a0 [ 654.846248][T23091] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.846263][T23091] ? __lock_acquire+0xab9/0xd20 [ 654.846297][T23091] ? __fget_files+0x2a/0x420 [ 654.846309][T23091] ? __fget_files+0x3a0/0x420 [ 654.846328][T23091] __sys_sendmmsg+0x28e/0x430 [ 654.846347][T23091] ? __pfx___sys_sendmmsg+0x10/0x10 [ 654.846360][T23091] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 654.846397][T23091] ? ksys_write+0x22a/0x250 [ 654.846418][T23091] ? __pfx_ksys_write+0x10/0x10 [ 654.846440][T23091] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 654.846457][T23091] __do_fast_syscall_32+0xb6/0x2b0 [ 654.846475][T23091] do_fast_syscall_32+0x34/0x80 [ 654.846487][T23091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.846504][T23091] RIP: 0023:0xf700d539 [ 654.846515][T23091] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 654.846527][T23091] RSP: 002b:00000000f53dc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 654.846541][T23091] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080003dc0 [ 654.846551][T23091] RDX: 0000000000000001 RSI: 0000000020004841 RDI: 0000000000000000 [ 654.846559][T23091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.846567][T23091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 654.846575][T23091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.846594][T23091] [ 655.063530][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.241313][T23097] loop6: detected capacity change from 0 to 7 [ 655.251825][T23097] Dev loop6: unable to read RDB block 7 [ 655.257426][T23097] loop6: unable to read partition table [ 655.273564][T23097] loop6: partition table beyond EOD, truncated [ 655.280051][T23097] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 655.694268][T21349] usb 3-1: USB disconnect, device number 52 [ 656.112308][T23117] loop6: detected capacity change from 0 to 7 [ 656.196848][T23117] Dev loop6: unable to read RDB block 7 [ 656.202923][T23117] loop6: unable to read partition table [ 656.282016][T23117] loop6: partition table beyond EOD, truncated [ 656.329296][T23117] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 656.383629][T21344] IPVS: starting estimator thread 0... [ 656.570078][T23123] IPVS: using max 46 ests per chain, 110400 per kthread [ 656.790608][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7006'. [ 656.979126][T21344] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 657.165169][T21344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.182178][T21344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.220019][T21344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.301040][T23143] gretap0: entered promiscuous mode [ 657.311894][T23143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7010'. [ 657.321562][T23143] gretap0: left promiscuous mode [ 657.378125][T21344] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.579340][T21344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.767493][T21344] usb 2-1: config 0 descriptor?? [ 658.307811][T23159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7015'. [ 658.379086][T23155] random: crng reseeded on system resumption [ 658.428755][T23163] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 659.354898][T21344] usbhid 2-1:0.0: can't add hid device: -71 [ 659.361165][T21344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 659.390706][T23155] Unrecognized hibernate image header format! [ 659.397064][T23155] PM: hibernation: Image mismatch: architecture specific data [ 659.424431][T21344] usb 2-1: USB disconnect, device number 44 [ 659.698968][T23180] netlink: 'syz.3.7018': attribute type 10 has an invalid length. [ 660.809103][T21350] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 660.982718][T21350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 661.003244][T21350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.078759][T21350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.135544][T21350] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 661.205430][T21350] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 661.241576][T21350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.303202][T21350] usb 4-1: config 0 descriptor?? [ 661.331753][T23199] program syz.4.7025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.781123][T23212] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 661.790107][T23212] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 662.067856][T23217] macsec2: entered promiscuous mode [ 662.073529][T23217] macvlan0: entered promiscuous mode [ 662.261222][T23217] macvlan0: left promiscuous mode [ 664.105992][ T5952] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 664.389290][ T5952] usb 2-1: device descriptor read/64, error -71 [ 664.412806][T21350] usbhid 4-1:0.0: can't add hid device: -71 [ 664.433615][T21350] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 664.466177][T21350] usb 4-1: USB disconnect, device number 63 [ 664.482682][T23246] FAULT_INJECTION: forcing a failure. [ 664.482682][T23246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.505927][T23246] CPU: 0 UID: 0 PID: 23246 Comm: syz.0.7037 Not tainted syzkaller #0 PREEMPT(full) [ 664.505954][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.505967][T23246] Call Trace: [ 664.505974][T23246] [ 664.505983][T23246] dump_stack_lvl+0x189/0x250 [ 664.506016][T23246] ? __pfx____ratelimit+0x10/0x10 [ 664.506043][T23246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.506069][T23246] ? __pfx__printk+0x10/0x10 [ 664.506089][T23246] ? __might_fault+0xb0/0x130 [ 664.506137][T23246] should_fail_ex+0x414/0x560 [ 664.506169][T23246] _copy_from_user+0x2d/0xb0 [ 664.506193][T23246] get_compat_msghdr+0xad/0x4a0 [ 664.506218][T23246] ? __pfx_get_compat_msghdr+0x10/0x10 [ 664.506249][T23246] ___sys_sendmsg+0x193/0x2a0 [ 664.506272][T23246] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.506323][T23246] ? __fget_files+0x2a/0x420 [ 664.506340][T23246] ? __fget_files+0x3a0/0x420 [ 664.506366][T23246] __sys_sendmsg+0x164/0x220 [ 664.506388][T23246] ? __pfx___sys_sendmsg+0x10/0x10 [ 664.506415][T23246] ? __pfx_ksys_write+0x10/0x10 [ 664.506443][T23246] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 664.506477][T23246] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.506506][T23246] __do_fast_syscall_32+0xb6/0x2b0 [ 664.506523][T23246] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.506552][T23246] do_fast_syscall_32+0x34/0x80 [ 664.506575][T23246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.506596][T23246] RIP: 0023:0xf700d539 [ 664.506611][T23246] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 664.506627][T23246] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 664.506646][T23246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 664.506659][T23246] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.506669][T23246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.506679][T23246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 664.506690][T23246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.506717][T23246] [ 664.899225][ T5952] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 664.984425][T23255] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 665.044289][ T5952] usb 2-1: device descriptor read/64, error -71 [ 665.080841][T21350] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 665.159415][ T5952] usb usb2-port1: attempt power cycle [ 665.219099][T21350] usb 1-1: device descriptor read/64, error -71 [ 665.459068][T21350] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 665.499194][ T5952] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 665.531588][ T5952] usb 2-1: device descriptor read/8, error -71 [ 665.581033][T23260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7053'. [ 665.650063][T21350] usb 1-1: device descriptor read/64, error -71 [ 665.761043][T21350] usb usb1-port1: attempt power cycle [ 665.798107][T23268] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 665.835937][ T5952] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 665.991939][ T5952] usb 2-1: device descriptor read/8, error -71 [ 666.099743][ T5952] usb usb2-port1: unable to enumerate USB device [ 666.219103][T21344] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 666.259221][T21350] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 666.284632][T21350] usb 1-1: device descriptor read/8, error -71 [ 666.539394][T21350] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 666.721590][T21350] usb 1-1: device descriptor read/8, error -71 [ 666.760057][T21344] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 666.781211][T21344] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 666.851281][T21350] usb usb1-port1: unable to enumerate USB device [ 666.868735][T21344] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 666.888825][T21344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.023913][T21344] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 667.056545][T21344] usb 4-1: invalid MIDI out EP 0 [ 667.430794][T21344] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 667.589136][T21350] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 667.620115][T21366] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 667.750947][T21350] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 667.759173][T21350] usb 2-1: config 0 has no interface number 0 [ 667.765347][T21350] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 667.775499][T21350] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 667.779186][T21366] usb 5-1: Using ep0 maxpacket: 16 [ 667.793154][T21350] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 667.801464][T21366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.813733][T21350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.813973][T21366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.832950][T21366] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 667.842105][T21350] usb 2-1: Product: syz [ 667.842122][T21350] usb 2-1: Manufacturer: syz [ 667.842137][T21350] usb 2-1: SerialNumber: syz [ 667.857983][T21366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.863575][T21350] usb 2-1: config 0 descriptor?? [ 667.873770][T21366] usb 5-1: config 0 descriptor?? [ 667.895034][T23280] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 667.910691][T21350] HFC-S_USB 2-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 668.113444][T21344] usb 2-1: USB disconnect, device number 49 [ 668.321266][T21366] saitek 0003:06A3:0621.0019: item fetching failed at offset 3/5 [ 668.359806][T21366] saitek 0003:06A3:0621.0019: parse failed [ 668.365776][T21366] saitek 0003:06A3:0621.0019: probe with driver saitek failed with error -22 [ 668.538897][T21366] usb 5-1: USB disconnect, device number 51 [ 668.765841][T21349] usb 4-1: USB disconnect, device number 64 [ 669.392331][T23303] loop6: detected capacity change from 0 to 7 [ 669.418539][T23305] FAULT_INJECTION: forcing a failure. [ 669.418539][T23305] name failslab, interval 1, probability 0, space 0, times 0 [ 669.452153][T23303] Dev loop6: unable to read RDB block 7 [ 669.462259][T23303] loop6: unable to read partition table [ 669.482304][T23303] loop6: partition table beyond EOD, truncated [ 669.508944][T23303] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.539468][T23305] CPU: 0 UID: 0 PID: 23305 Comm: syz.2.7057 Not tainted syzkaller #0 PREEMPT(full) [ 669.539494][T23305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.539507][T23305] Call Trace: [ 669.539515][T23305] [ 669.539525][T23305] dump_stack_lvl+0x189/0x250 [ 669.539556][T23305] ? __pfx____ratelimit+0x10/0x10 [ 669.539583][T23305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.539608][T23305] ? __pfx__printk+0x10/0x10 [ 669.539632][T23305] ? __pfx___might_resched+0x10/0x10 [ 669.539658][T23305] should_fail_ex+0x414/0x560 [ 669.539691][T23305] should_failslab+0xa8/0x100 [ 669.539712][T23305] kmem_cache_alloc_node_noprof+0x77/0x710 [ 669.539740][T23305] ? __alloc_skb+0x112/0x2d0 [ 669.539764][T23305] __alloc_skb+0x112/0x2d0 [ 669.539786][T23305] netlink_ack+0x146/0xa50 [ 669.539803][T23305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.539825][T23305] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 669.539847][T23305] ? __pfx_nl80211_post_doit+0x10/0x10 [ 669.539905][T23305] netlink_rcv_skb+0x28c/0x470 [ 669.539922][T23305] ? __lock_acquire+0xab9/0xd20 [ 669.539942][T23305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.539968][T23305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.540007][T23305] ? down_read+0x1ad/0x2e0 [ 669.540029][T23305] genl_rcv+0x28/0x40 [ 669.540051][T23305] netlink_unicast+0x82f/0x9e0 [ 669.540095][T23305] ? __pfx_netlink_unicast+0x10/0x10 [ 669.540125][T23305] ? netlink_sendmsg+0x642/0xb30 [ 669.540142][T23305] ? skb_put+0x11b/0x210 [ 669.540165][T23305] netlink_sendmsg+0x805/0xb30 [ 669.540194][T23305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.540216][T23305] ? __import_iovec+0x5d4/0x7f0 [ 669.540238][T23305] ? aa_sock_msg_perm+0xf1/0x1d0 [ 669.540268][T23305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.540287][T23305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.540308][T23305] __sock_sendmsg+0x21c/0x270 [ 669.540338][T23305] ____sys_sendmsg+0x505/0x830 [ 669.540365][T23305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.540402][T23305] ___sys_sendmsg+0x21f/0x2a0 [ 669.540426][T23305] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.540488][T23305] ? __fget_files+0x2a/0x420 [ 669.540506][T23305] ? __fget_files+0x3a0/0x420 [ 669.540534][T23305] __sys_sendmsg+0x164/0x220 [ 669.540558][T23305] ? __pfx___sys_sendmsg+0x10/0x10 [ 669.540588][T23305] ? __pfx_ksys_write+0x10/0x10 [ 669.540619][T23305] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 669.540650][T23305] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.540681][T23305] __do_fast_syscall_32+0xb6/0x2b0 [ 669.540700][T23305] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.540731][T23305] do_fast_syscall_32+0x34/0x80 [ 669.540749][T23305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.540778][T23305] RIP: 0023:0xf7fa1539 [ 669.540795][T23305] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 669.540812][T23305] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 669.540832][T23305] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 669.540846][T23305] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.540857][T23305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.540868][T23305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 669.540880][T23305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.540909][T23305] [ 670.019282][T21344] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 670.036450][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7060'. [ 670.152522][T21344] usb 4-1: device descriptor read/64, error -71 [ 670.399119][T21344] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 670.540281][T21344] usb 4-1: device descriptor read/64, error -71 [ 670.649701][T21344] usb usb4-port1: attempt power cycle [ 670.849598][T21349] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 670.979363][T21349] usb 2-1: device descriptor read/64, error -71 [ 670.989251][T21344] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 671.010861][T21344] usb 4-1: device descriptor read/8, error -71 [ 671.284936][T21349] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 671.293765][ T5952] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 671.349341][T21344] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 671.370219][T21344] usb 4-1: device descriptor read/8, error -71 [ 671.419320][T21349] usb 2-1: device descriptor read/64, error -71 [ 671.479216][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 671.479803][T21344] usb usb4-port1: unable to enumerate USB device [ 671.486781][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 671.529411][T21349] usb usb2-port1: attempt power cycle [ 671.545558][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 671.557670][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.569116][T21351] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 671.581186][ T5952] usb 1-1: Product: syz [ 671.587943][ T5952] usb 1-1: Manufacturer: syz [ 671.596365][ T5952] usb 1-1: SerialNumber: syz [ 671.609424][ T5952] usb 1-1: config 0 descriptor?? [ 671.617624][ T5952] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 671.631953][ T5952] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 671.723420][T21351] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 671.735392][T21351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.745369][T21351] usb 5-1: Product: syz [ 671.750069][T21351] usb 5-1: Manufacturer: syz [ 671.756755][T21351] usb 5-1: SerialNumber: syz [ 671.778590][T21351] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 671.794111][T21351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.813204][T21351] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 671.828003][T21351] usb 5-1: media controller created [ 671.867114][T21351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.875646][T21349] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 671.899740][T21349] usb 2-1: device descriptor read/8, error -71 [ 671.957259][T21351] DVB: Unable to find symbol mt352_attach() [ 672.030395][T23348] dvb-usb: bulk message failed: -22 (7/0) [ 672.061716][T21351] DVB: Unable to find symbol nxt6000_attach() [ 672.072137][T21351] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 672.096308][T21351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 672.120332][T21351] dvb-usb: schedule remote query interval to 1000 msecs. [ 672.131443][T21351] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 672.145922][T21351] dvb-usb: bulk message failed: -22 (7/0) [ 672.151897][T21349] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 672.164131][T21351] dvb-usb: bulk message failed: -22 (7/0) [ 672.176433][T21351] usb 5-1: USB disconnect, device number 52 [ 672.183365][T21349] usb 2-1: device descriptor read/8, error -71 [ 672.237312][ T5952] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 672.330172][T21349] usb usb2-port1: unable to enumerate USB device [ 672.382956][T21351] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 672.741233][ T5952] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 672.752613][ T5952] em28xx 1-1:0.0: board has no eeprom [ 672.890910][T23365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7072'. [ 673.209154][T21367] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 673.362428][T21367] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 673.370767][T21367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.382363][T21367] usb 5-1: config 0 has no interface number 0 [ 673.394972][T21367] usb 5-1: config 0 interface 4 has no altsetting 0 [ 673.406939][T21367] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 673.425753][T21367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.458474][T21367] usb 5-1: config 0 descriptor?? [ 673.481819][T21367] usb 5-1: selecting invalid altsetting 0 [ 673.871735][T23338] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 673.935774][T23368] loop6: detected capacity change from 0 to 7 [ 673.942184][ T5952] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 673.968438][ T5952] em28xx 1-1:0.0: dvb set to bulk mode. [ 673.989790][T21030] Dev loop6: unable to read RDB block 7 [ 673.999577][T21371] em28xx 1-1:0.0: Binding DVB extension [ 674.056859][T21349] usb 5-1: USB disconnect, device number 53 [ 674.159385][T21030] loop6: unable to read partition table [ 674.165247][ T5952] usb 1-1: USB disconnect, device number 68 [ 674.184609][T21030] loop6: partition table beyond EOD, truncated [ 674.199976][ T5952] em28xx 1-1:0.0: Disconnecting em28xx [ 674.214338][T23368] Dev loop6: unable to read RDB block 7 [ 674.238366][T23368] loop6: unable to read partition table [ 674.274969][T23368] loop6: partition table beyond EOD, truncated [ 674.297123][T23368] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 674.328371][T21371] em28xx 1-1:0.0: Registering input extension [ 674.362819][ T5952] em28xx 1-1:0.0: Closing input extension [ 674.436375][ T5952] em28xx 1-1:0.0: Freeing device [ 678.536384][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7089'. [ 678.560910][T23426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7088'. [ 678.570983][T23426] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7088'. [ 678.581815][T23426] netlink: 'syz.2.7088': attribute type 3 has an invalid length. [ 678.592649][T23426] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7088'. [ 679.223360][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7091'. [ 679.234877][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7091'. [ 679.489086][T21344] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 679.537982][T23442] loop6: detected capacity change from 0 to 7 [ 679.550262][T23442] Dev loop6: unable to read RDB block 7 [ 679.555900][T23442] loop6: unable to read partition table [ 679.565358][T23442] loop6: partition table beyond EOD, truncated [ 679.580068][T23442] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.650996][T21344] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 679.660926][T21344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.690641][T21344] usb 3-1: config 0 descriptor?? [ 679.700959][T21344] gspca_main: spca508-2.14.0 probing 8086:0110 [ 679.902367][T21344] gspca_spca508: reg_read err -32 [ 679.908395][T21344] gspca_spca508: reg_read err -32 [ 679.918547][T21344] gspca_spca508: reg_read err -32 [ 680.162794][T21344] gspca_spca508: reg_read err -71 [ 680.224501][T21344] gspca_spca508: reg write: error -71 [ 680.227267][T23444] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 680.238954][T21344] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 680.281679][T21344] usb 3-1: USB disconnect, device number 53 [ 680.336414][T23444] netlink: 'syz.4.7094': attribute type 2 has an invalid length. [ 680.473709][T23450] netlink: 'syz.1.7096': attribute type 13 has an invalid length. [ 680.490603][T23450] netlink: 'syz.1.7096': attribute type 17 has an invalid length. [ 680.540240][T23453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7097'. [ 680.580428][T23450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.830725][T23462] FAULT_INJECTION: forcing a failure. [ 680.830725][T23462] name failslab, interval 1, probability 0, space 0, times 0 [ 680.848809][T23462] CPU: 1 UID: 0 PID: 23462 Comm: syz.4.7101 Not tainted syzkaller #0 PREEMPT(full) [ 680.848835][T23462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.848847][T23462] Call Trace: [ 680.848855][T23462] [ 680.848862][T23462] dump_stack_lvl+0x189/0x250 [ 680.848890][T23462] ? __pfx____ratelimit+0x10/0x10 [ 680.848914][T23462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.848937][T23462] ? __pfx__printk+0x10/0x10 [ 680.848961][T23462] ? __pfx___might_resched+0x10/0x10 [ 680.848980][T23462] ? fs_reclaim_acquire+0x7d/0x100 [ 680.849016][T23462] should_fail_ex+0x414/0x560 [ 680.849047][T23462] should_failslab+0xa8/0x100 [ 680.849067][T23462] kmem_cache_alloc_noprof+0x74/0x6e0 [ 680.849092][T23462] ? ptlock_alloc+0x20/0x70 [ 680.849122][T23462] ? set_page_refcounted+0xa0/0x1e0 [ 680.849144][T23462] ptlock_alloc+0x20/0x70 [ 680.849167][T23462] pte_alloc_one+0x7a/0x310 [ 680.849192][T23462] __do_fault+0xd1/0x390 [ 680.849211][T23462] __handle_mm_fault+0x1847/0x5400 [ 680.849268][T23462] ? __pfx___handle_mm_fault+0x10/0x10 [ 680.849313][T23462] ? find_vma+0xe7/0x160 [ 680.849336][T23462] ? __pfx_find_vma+0x10/0x10 [ 680.849364][T23462] handle_mm_fault+0x40a/0x8e0 [ 680.849400][T23462] do_user_addr_fault+0x764/0x1380 [ 680.849436][T23462] exc_page_fault+0x82/0x100 [ 680.849467][T23462] asm_exc_page_fault+0x26/0x30 [ 680.849485][T23462] RIP: 0010:__put_user_4+0xd/0x20 [ 680.849512][T23462] Code: 66 89 01 31 c9 0f 01 ca e9 10 68 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 680.849529][T23462] RSP: 0018:ffffc9000b8bfb98 EFLAGS: 00050202 [ 680.849548][T23462] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000000080000040 [ 680.849561][T23462] RDX: 0000000000000000 RSI: ffffffff8d8f4f27 RDI: ffffffff8bbf0760 [ 680.849575][T23462] RBP: ffffc9000b8bfd10 R08: 0000000000000000 R09: ffffffff820d6160 [ 680.849588][T23462] R10: dffffc0000000000 R11: fffffbfff1ef9d6f R12: ffff88802759c160 [ 680.849603][T23462] R13: 0000000080000040 R14: ffff88802759c068 R15: dffffc0000000000 [ 680.849622][T23462] ? __might_fault+0xb0/0x130 [ 680.849657][T23462] sg_ioctl+0x1766/0x2230 [ 680.849687][T23462] ? __pfx_sg_ioctl+0x10/0x10 [ 680.849709][T23462] ? __fget_files+0x2a/0x420 [ 680.849731][T23462] ? __fget_files+0x3a0/0x420 [ 680.849747][T23462] ? __fget_files+0x2a/0x420 [ 680.849767][T23462] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 680.849791][T23462] __ia32_compat_sys_ioctl+0x543/0x840 [ 680.849819][T23462] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 680.849844][T23462] ? __fget_files+0x3a0/0x420 [ 680.849868][T23462] ? fput+0xa0/0xd0 [ 680.849890][T23462] ? ksys_write+0x22a/0x250 [ 680.849913][T23462] ? exc_page_fault+0x82/0x100 [ 680.849940][T23462] ? __pfx_ksys_write+0x10/0x10 [ 680.849967][T23462] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 680.849995][T23462] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.850024][T23462] __do_fast_syscall_32+0xb6/0x2b0 [ 680.850042][T23462] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.850070][T23462] do_fast_syscall_32+0x34/0x80 [ 680.850087][T23462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.850115][T23462] RIP: 0023:0xf7f93539 [ 680.850132][T23462] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 680.850148][T23462] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 680.850167][T23462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000227c [ 680.850180][T23462] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.850192][T23462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.850202][T23462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 680.850214][T23462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.850252][T23462] [ 681.862092][T23479] random: crng reseeded on system resumption [ 681.961774][T23482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 681.982184][T23479] kernel read not supported for file /eth0 (pid: 23479 comm: syz.4.7105) [ 681.993678][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 681.993689][ T30] audit: type=1800 audit(1763423199.681:2437): pid=23479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7105" name="eth0" dev="mqueue" ino=99513 res=0 errno=0 [ 682.648401][ T30] audit: type=1326 audit(1763423200.301:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 682.752222][ T30] audit: type=1326 audit(1763423200.301:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 682.851456][ T30] audit: type=1326 audit(1763423200.301:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 682.920434][ T30] audit: type=1326 audit(1763423200.301:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.001047][ T30] audit: type=1326 audit(1763423200.311:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.055377][ T30] audit: type=1326 audit(1763423200.311:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.118698][ T30] audit: type=1326 audit(1763423200.311:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.321999][ T30] audit: type=1326 audit(1763423200.311:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.402674][ T30] audit: type=1326 audit(1763423200.311:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23484 comm="syz.4.7107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 683.463998][T23501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7111'. [ 684.156125][T23515] random: crng reseeded on system resumption [ 684.159172][T21367] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 684.186240][T23515] kernel read not supported for file /eth0 (pid: 23515 comm: syz.0.7117) [ 684.380934][T21367] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 684.390933][T21367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.408662][T21367] usb 5-1: config 0 descriptor?? [ 684.625404][T23528] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 684.876615][T21367] thrustmaster 0003:044F:B324.001A: nested delimiters [ 684.884804][T21367] thrustmaster 0003:044F:B324.001A: item 0 1 2 10 parsing failed [ 684.908626][T21367] thrustmaster 0003:044F:B324.001A: parse failed [ 684.937202][T21367] thrustmaster 0003:044F:B324.001A: probe with driver thrustmaster failed with error -22 [ 685.105503][T21367] usb 5-1: USB disconnect, device number 54 [ 685.298885][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7121'. [ 685.387444][T23530] netlink: 182 bytes leftover after parsing attributes in process `syz.0.7121'. [ 685.720000][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.726386][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.492136][T21349] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 686.649181][T21349] usb 5-1: device descriptor read/64, error -71 [ 686.960390][T21349] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 687.339502][T21349] usb 5-1: device descriptor read/64, error -71 [ 687.500604][T21349] usb usb5-port1: attempt power cycle [ 687.890804][T21349] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 687.929203][T21349] usb 5-1: device descriptor read/8, error -71 [ 688.239175][T21349] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 688.271542][T21349] usb 5-1: device descriptor read/8, error -71 [ 688.379520][T21349] usb usb5-port1: unable to enumerate USB device [ 688.631384][T23571] random: crng reseeded on system resumption [ 688.695470][T23571] kernel read not supported for file /eth0 (pid: 23571 comm: syz.1.7130) [ 688.705494][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 688.705510][ T30] audit: type=1800 audit(1763423206.391:2471): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7130" name="eth0" dev="mqueue" ino=112147 res=0 errno=0 [ 688.824822][T23575] fuse: Unknown parameter 'grkup_id' [ 689.045491][T23583] syzkaller0: entered promiscuous mode [ 689.070658][T23583] syzkaller0: entered allmulticast mode [ 689.282679][T23589] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.7136'. [ 689.291996][T21367] psmouse serio3: Failed to reset mouse on : -5 [ 689.301579][T23589] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 689.312971][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7136'. [ 689.489155][T21371] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 689.609884][T23597] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 689.683075][T23598] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 689.732150][T21371] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 689.741638][T21371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.766354][T21371] usb 3-1: config 0 descriptor?? [ 690.335200][T21371] thrustmaster 0003:044F:B324.001B: nested delimiters [ 690.344519][T21371] thrustmaster 0003:044F:B324.001B: item 0 1 2 10 parsing failed [ 690.665578][T21371] thrustmaster 0003:044F:B324.001B: parse failed [ 690.680538][T21371] thrustmaster 0003:044F:B324.001B: probe with driver thrustmaster failed with error -22 [ 690.699916][T21371] usb 3-1: USB disconnect, device number 54 [ 693.239145][T21367] misc userio: Buffer overflowed, userio client isn't keeping up [ 693.555595][T23687] netlink: 'syz.4.7168': attribute type 58 has an invalid length. [ 693.564098][T23687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7168'. [ 693.622978][T23688] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 694.392074][T21367] input: PS/2 Generic Mouse as /devices/serio3/input/input53 [ 694.629155][T21367] psmouse serio3: Failed to enable mouse on [ 694.772381][T23694] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7170'. [ 694.851521][T23694] kvm: user requested TSC rate below hardware speed [ 694.862198][T23694] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 694.873001][T23694] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 695.240174][T23706] FAULT_INJECTION: forcing a failure. [ 695.240174][T23706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.299504][T23706] CPU: 0 UID: 0 PID: 23706 Comm: syz.2.7174 Not tainted syzkaller #0 PREEMPT(full) [ 695.299531][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.299542][T23706] Call Trace: [ 695.299548][T23706] [ 695.299555][T23706] dump_stack_lvl+0x189/0x250 [ 695.299579][T23706] ? __pfx____ratelimit+0x10/0x10 [ 695.299598][T23706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.299617][T23706] ? __pfx__printk+0x10/0x10 [ 695.299638][T23706] should_fail_ex+0x414/0x560 [ 695.299661][T23706] _copy_to_user+0x31/0xb0 [ 695.299679][T23706] simple_read_from_buffer+0xe1/0x170 [ 695.299703][T23706] proc_fail_nth_read+0x1b3/0x220 [ 695.299724][T23706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.299751][T23706] ? rw_verify_area+0x2a6/0x4d0 [ 695.299776][T23706] ? __lock_acquire+0xab9/0xd20 [ 695.299793][T23706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.299837][T23706] vfs_read+0x200/0xa30 [ 695.299863][T23706] ? fdget_pos+0x247/0x320 [ 695.299882][T23706] ? __pfx___mutex_lock+0x10/0x10 [ 695.299916][T23706] ? __pfx_vfs_read+0x10/0x10 [ 695.299934][T23706] ? __fget_files+0x2a/0x420 [ 695.299949][T23706] ? __fget_files+0x3a0/0x420 [ 695.299961][T23706] ? __fget_files+0x2a/0x420 [ 695.299978][T23706] ksys_read+0x145/0x250 [ 695.299995][T23706] ? exc_page_fault+0x82/0x100 [ 695.300014][T23706] ? __pfx_ksys_read+0x10/0x10 [ 695.300033][T23706] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 695.300054][T23706] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.300074][T23706] __do_fast_syscall_32+0xb6/0x2b0 [ 695.300086][T23706] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.300107][T23706] do_fast_syscall_32+0x34/0x80 [ 695.300118][T23706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.300134][T23706] RIP: 0023:0xf7fa1539 [ 695.300145][T23706] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 695.300156][T23706] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 695.300170][T23706] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5496620 [ 695.300179][T23706] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 695.300187][T23706] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 695.300194][T23706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 695.300202][T23706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.300220][T23706] [ 695.541554][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.975410][T23710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7175'. [ 696.279137][T21351] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 696.350364][ T30] audit: type=1326 audit(1763423214.041:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23716 comm="syz.2.7178" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x0 [ 696.433170][T21351] usb 2-1: config 0 has an invalid interface number: 181 but max is 0 [ 696.461366][T21351] usb 2-1: config 0 has no interface number 0 [ 696.473976][T21351] usb 2-1: config 0 interface 181 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 696.488262][T21351] usb 2-1: config 0 interface 181 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 696.525658][T23724] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 696.566821][T21351] usb 2-1: config 0 interface 181 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 696.578937][T21351] usb 2-1: config 0 interface 181 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 696.606217][T21351] usb 2-1: config 0 interface 181 has no altsetting 0 [ 696.616249][T21351] usb 2-1: New USB device found, idVendor=2020, idProduct=2060, bcdDevice=c0.af [ 696.627095][T21351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.635278][T21351] usb 2-1: Product: syz [ 696.642465][T21351] usb 2-1: Manufacturer: syz [ 696.648810][T21351] usb 2-1: SerialNumber: syz [ 696.672329][T21351] usb 2-1: config 0 descriptor?? [ 696.917005][T21351] option 2-1:0.181: GSM modem (1-port) converter detected [ 697.257866][T21351] usb 2-1: USB disconnect, device number 54 [ 697.340311][T21351] option 2-1:0.181: device disconnected [ 699.567527][T21351] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 699.745050][T21351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 699.759210][T21351] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 699.831374][T21351] usb 2-1: can't read configurations, error -71 [ 700.014204][T23776] netlink: 'syz.0.7195': attribute type 58 has an invalid length. [ 700.022376][T23776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7195'. [ 700.049428][T21366] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 700.201587][T21366] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 700.219667][T21366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.245822][T21366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.255986][T21366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 700.295391][T21366] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 700.305896][T21366] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 700.315647][T21366] usb 5-1: Manufacturer: syz [ 700.329406][T21366] usb 5-1: config 0 descriptor?? [ 700.381791][ T856] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 700.553507][ T30] audit: type=1326 audit(1763423218.241:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.0.7200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 700.567907][ T856] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 700.616429][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.625458][ T856] usb 4-1: Product: syz [ 700.630465][ T856] usb 4-1: Manufacturer: syz [ 700.635273][ T856] usb 4-1: SerialNumber: syz [ 700.644862][ T30] audit: type=1326 audit(1763423218.261:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.0.7200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 700.657548][ T856] usb 4-1: config 0 descriptor?? [ 700.674890][ T30] audit: type=1326 audit(1763423218.261:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.0.7200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 700.747136][ T856] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 700.783744][ T30] audit: type=1326 audit(1763423218.261:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.0.7200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 700.849330][T21367] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 700.955234][T23797] syzkaller0: entered promiscuous mode [ 700.977171][T23797] syzkaller0: entered allmulticast mode [ 700.995663][T21366] usbhid 5-1:0.0: can't add hid device: -71 [ 701.005355][T21366] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 701.016878][T21367] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 701.025192][T21367] usb 3-1: config 1 has no interface number 0 [ 701.033158][T21366] usb 5-1: USB disconnect, device number 59 [ 701.039665][T21367] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 701.055220][T21367] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 701.068864][T21367] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 701.117049][T21367] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 701.127307][T21367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.142746][T21367] usb 3-1: Product: syz [ 701.147140][T21367] usb 3-1: Manufacturer: syz [ 701.153884][T21367] usb 3-1: SerialNumber: syz [ 701.172349][T23784] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 701.181075][T23784] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 701.198203][T21367] usb 3-1: Expected 3 endpoints, found: 2 [ 701.724073][T21366] usb 3-1: USB disconnect, device number 55 [ 702.490983][ T856] gspca_sunplus: reg_r err -110 [ 702.502489][ T856] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 703.187355][T23815] netlink: 996 bytes leftover after parsing attributes in process `syz.2.7207'. [ 703.526766][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7210'. [ 703.643100][T23829] syzkaller0: entered promiscuous mode [ 703.648717][T23829] syzkaller0: entered allmulticast mode [ 703.733630][T23831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7211'. [ 703.780582][T23831] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 703.787145][T23831] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 703.807471][T23831] vhci_hcd vhci_hcd.0: Device attached [ 703.959121][T21349] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 704.082897][T21344] usb 4-1: USB disconnect, device number 69 [ 704.097535][ T856] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 704.159283][T21349] usb 1-1: Using ep0 maxpacket: 32 [ 704.167779][T21349] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 704.184841][T21349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.201214][T21349] usb 1-1: Product: syz [ 704.211906][T21349] usb 1-1: Manufacturer: syz [ 704.219892][T23844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.222365][T21349] usb 1-1: SerialNumber: syz [ 704.707381][T21349] usb 1-1: config 0 descriptor?? [ 704.724097][T21349] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 704.821549][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7215'. [ 704.830581][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7215'. [ 705.041357][T21349] gspca_vc032x: reg_w err -71 [ 705.046095][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.059121][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.071220][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.079223][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.084541][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.099192][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.104574][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.109410][T23849] netlink: 'syz.3.7215': attribute type 18 has an invalid length. [ 705.118058][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.127788][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.138775][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.151887][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.168148][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.184768][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.199374][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.211913][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.224238][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.296643][T23834] vhci_hcd: connection reset by peer [ 705.312219][T21680] vhci_hcd: stop threads [ 705.314189][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.316524][T21680] vhci_hcd: release socket [ 705.316658][T21680] vhci_hcd: disconnect device [ 705.326945][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.336718][T21349] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.347156][T21349] gspca_vc032x: Unknown sensor... [ 705.353409][T21349] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 705.366247][T21349] usb 1-1: USB disconnect, device number 69 [ 705.485860][T23855] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 705.555525][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7218'. [ 705.575160][T23858] FAULT_INJECTION: forcing a failure. [ 705.575160][T23858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.604464][T23858] CPU: 1 UID: 0 PID: 23858 Comm: syz.3.7218 Not tainted syzkaller #0 PREEMPT(full) [ 705.604485][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.604494][T23858] Call Trace: [ 705.604500][T23858] [ 705.604506][T23858] dump_stack_lvl+0x189/0x250 [ 705.604530][T23858] ? __pfx____ratelimit+0x10/0x10 [ 705.604549][T23858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.604569][T23858] ? __pfx__printk+0x10/0x10 [ 705.604591][T23858] should_fail_ex+0x414/0x560 [ 705.604616][T23858] _copy_to_user+0x31/0xb0 [ 705.604639][T23858] simple_read_from_buffer+0xe1/0x170 [ 705.604664][T23858] proc_fail_nth_read+0x1b3/0x220 [ 705.604684][T23858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.604703][T23858] ? rw_verify_area+0x2a6/0x4d0 [ 705.604722][T23858] ? __lock_acquire+0xab9/0xd20 [ 705.604734][T23858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.604752][T23858] vfs_read+0x200/0xa30 [ 705.604770][T23858] ? fdget_pos+0x247/0x320 [ 705.604785][T23858] ? __pfx___mutex_lock+0x10/0x10 [ 705.604807][T23858] ? __pfx_vfs_read+0x10/0x10 [ 705.604826][T23858] ? __fget_files+0x2a/0x420 [ 705.604842][T23858] ? __fget_files+0x3a0/0x420 [ 705.604853][T23858] ? __fget_files+0x2a/0x420 [ 705.604872][T23858] ksys_read+0x145/0x250 [ 705.604893][T23858] ? __pfx_ksys_read+0x10/0x10 [ 705.604915][T23858] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 705.604936][T23858] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.604958][T23858] __do_fast_syscall_32+0xb6/0x2b0 [ 705.604971][T23858] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.604993][T23858] do_fast_syscall_32+0x34/0x80 [ 705.605005][T23858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 705.605021][T23858] RIP: 0023:0xf70ed539 [ 705.605033][T23858] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 705.605045][T23858] RSP: 002b:00000000f54dd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 705.605059][T23858] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54dd620 [ 705.605068][T23858] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 705.605076][T23858] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 705.605085][T23858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 705.605092][T23858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.605112][T23858] [ 705.843194][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.899521][T23864] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7221'. [ 705.913507][T23864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7221'. [ 706.359920][T23872] vivid-006: disconnect [ 707.095427][T23865] vivid-006: reconnect [ 707.439087][T21344] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 707.599163][T21344] usb 4-1: Using ep0 maxpacket: 32 [ 707.619366][T21344] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 707.647617][T21344] usb 4-1: config 0 has no interface number 0 [ 707.670638][T21344] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 707.694219][T21344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.712400][T21344] usb 4-1: Product: syz [ 708.235774][T21344] usb 4-1: Manufacturer: syz [ 708.306372][T21344] usb 4-1: SerialNumber: syz [ 708.325424][T21344] usb 4-1: config 0 descriptor?? [ 708.338290][T21344] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 708.538197][T23895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.559325][T23894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.603261][T23895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.609914][T23894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.654697][T21344] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 708.723558][T21344] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 709.014004][T23917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7236'. [ 709.032826][T23917] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 709.039389][T23917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 709.117213][T23917] vhci_hcd vhci_hcd.0: Device attached [ 709.284363][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 709.284914][T21371] usb 4-1: USB disconnect, device number 70 [ 709.365706][T21371] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 709.378366][T21367] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 709.386206][ T856] vhci_hcd: vhci_device speed not set [ 709.496439][T21371] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 709.624082][T23928] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 709.764367][T21371] quatech2 4-1:0.51: device disconnected [ 710.065812][T23918] vhci_hcd: connection reset by peer [ 710.095304][T21682] vhci_hcd: stop threads [ 710.099994][T21682] vhci_hcd: release socket [ 710.117802][T21682] vhci_hcd: disconnect device [ 711.253502][T23939] libceph: resolve '. [ 711.253502][T23939] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 711.253502][T23939] ' (ret=-3): failed [ 711.435207][T23939] vivid-000: ================= START STATUS ================= [ 711.465967][T23939] vivid-000: FM Deviation: 75000 [ 711.506337][T23939] vivid-000: ================== END STATUS ================== [ 711.939140][ T856] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 712.099047][ T856] usb 5-1: Using ep0 maxpacket: 16 [ 712.106199][ T856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.142514][ T856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.166872][ T856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.176835][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.186750][ T856] usb 5-1: Product: syz [ 712.191633][ T856] usb 5-1: Manufacturer: syz [ 712.200726][ T856] usb 5-1: SerialNumber: syz [ 712.339525][T21350] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 712.584298][T21350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 712.622239][T21350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.636742][T21350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.710301][T21350] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 712.719501][ T856] usb 5-1: 0:2 : does not exist [ 712.743543][T21350] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 712.763097][T21350] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 712.780532][T21350] usb 4-1: Manufacturer: syz [ 712.787933][T21350] usb 4-1: config 0 descriptor?? [ 712.994862][ T856] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 713.091792][ T856] usb 5-1: USB disconnect, device number 60 [ 713.158870][T20844] udevd[20844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.210765][T21350] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 713.364697][T21350] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 713.439990][T23958] dlm: no locking on control device [ 713.839135][T21344] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 714.179479][T21349] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 714.201916][T21344] usb 3-1: config 4 has an invalid interface number: 247 but max is 0 [ 714.210903][T21344] usb 3-1: config 4 has no interface number 0 [ 714.223209][T21344] usb 3-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 714.240654][T21344] usb 3-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 714.255590][T21344] usb 3-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 714.331650][T21344] usb 3-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 714.399132][T21349] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.399163][T21349] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.399211][T21349] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 714.399257][T21349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.425901][T21349] usb 2-1: config 0 descriptor?? [ 714.430652][T21344] usb 3-1: config 4 interface 247 has no altsetting 0 [ 714.437229][T21349] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 714.449162][T21349] dvb-usb: bulk message failed: -22 (3/0) [ 714.456677][T21349] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 714.463341][T21349] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 714.463379][T21349] usb 2-1: media controller created [ 714.466557][T21344] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 714.466579][T21344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.466593][T21344] usb 3-1: Product: syz [ 714.466604][T21344] usb 3-1: Manufacturer: syz [ 714.466632][T21344] usb 3-1: SerialNumber: syz [ 714.470631][T23983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 714.480294][T21349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.503434][T21367] vhci_hcd: vhci_device speed not set [ 714.521376][T21344] ni6501 3-1:4.247: driver 'ni6501' failed to auto-configure device. [ 714.522739][T21349] dvb-usb: bulk message failed: -22 (6/0) [ 714.522853][T21349] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 714.531802][T21349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 714.570684][T21349] dvb-usb: schedule remote query interval to 150 msecs. [ 714.570709][T21349] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 714.651951][T23979] dvb-usb: bulk message failed: -22 (2/0) [ 714.652151][T23979] dvb-usb: bulk message failed: -22 (4/0) [ 714.693834][T21351] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 714.738627][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 714.738660][ T5919] dvb-usb: error while querying for an remote control event. [ 714.749400][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7257'. [ 714.879494][T23993] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 714.879548][T23993] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 714.880719][T23993] vhci_hcd vhci_hcd.0: Device attached [ 714.889684][T21349] dvb-usb: bulk message failed: -22 (1/0) [ 714.889715][T21349] dvb-usb: error while querying for an remote control event. [ 714.980494][T21349] usb 3-1: USB disconnect, device number 56 [ 715.140928][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 715.140954][ T24] dvb-usb: error while querying for an remote control event. [ 715.289148][ T24] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 715.309241][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 715.309278][ T5919] dvb-usb: error while querying for an remote control event. [ 715.354777][T21371] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 715.504847][T21349] dvb-usb: bulk message failed: -22 (1/0) [ 715.511956][T21349] dvb-usb: error while querying for an remote control event. [ 715.610369][T21344] usb 4-1: USB disconnect, device number 71 [ 715.699138][T21351] dvb-usb: bulk message failed: -22 (1/0) [ 715.705299][T21351] dvb-usb: error while querying for an remote control event. [ 715.777271][T24001] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 715.909337][T21344] dvb-usb: bulk message failed: -22 (1/0) [ 715.915424][T21344] dvb-usb: error while querying for an remote control event. [ 716.032320][T23996] vhci_hcd: connection reset by peer [ 716.039583][ T1148] vhci_hcd: stop threads [ 716.045177][ T1148] vhci_hcd: release socket [ 716.056845][T24003] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 716.072658][ T1148] vhci_hcd: disconnect device [ 716.089203][T21351] dvb-usb: bulk message failed: -22 (1/0) [ 716.095090][T21351] dvb-usb: error while querying for an remote control event. [ 716.118036][T24003] loop6: detected capacity change from 0 to 7 [ 716.155665][T24003] Dev loop6: unable to read RDB block 7 [ 716.169490][T24003] loop6: unable to read partition table [ 716.184366][T24003] loop6: partition table beyond EOD, truncated [ 716.209082][T21371] usb 5-1: device descriptor read/64, error -71 [ 716.213263][T24003] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 716.259652][T21351] dvb-usb: bulk message failed: -22 (1/0) [ 716.266695][T21351] dvb-usb: error while querying for an remote control event. [ 716.519346][T21351] dvb-usb: bulk message failed: -22 (1/0) [ 716.525107][T21351] dvb-usb: error while querying for an remote control event. [ 716.549173][T21371] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 716.699100][T21371] usb 5-1: device descriptor read/64, error -71 [ 716.719307][T21351] dvb-usb: bulk message failed: -22 (1/0) [ 716.725145][T21351] dvb-usb: error while querying for an remote control event. [ 716.764955][T21351] usb 2-1: USB disconnect, device number 57 [ 716.819414][T21371] usb usb5-port1: attempt power cycle [ 716.894758][T21351] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 717.179191][T21371] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 717.201334][T21371] usb 5-1: device descriptor read/8, error -71 [ 717.354159][T21351] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 717.419106][T21367] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 717.439227][T21371] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 717.586513][T21367] usb 1-1: Using ep0 maxpacket: 32 [ 717.600682][T21367] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 717.609870][T21367] usb 1-1: config 0 has no interface number 0 [ 717.616316][T21351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.626880][T21367] usb 1-1: config 0 interface 31 has no altsetting 0 [ 717.634058][T21367] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16 [ 717.648085][T21367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.661991][T24023] FAULT_INJECTION: forcing a failure. [ 717.661991][T24023] name failslab, interval 1, probability 0, space 0, times 0 [ 717.675745][T21371] usb 5-1: device not accepting address 64, error -71 [ 717.683004][T21371] usb usb5-port1: unable to enumerate USB device [ 717.690442][T24023] CPU: 0 UID: 0 PID: 24023 Comm: syz.3.7266 Not tainted syzkaller #0 PREEMPT(full) [ 717.690465][T24023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.690477][T24023] Call Trace: [ 717.690485][T24023] [ 717.690512][T24023] dump_stack_lvl+0x189/0x250 [ 717.690548][T24023] ? __pfx____ratelimit+0x10/0x10 [ 717.690579][T24023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.690608][T24023] ? __pfx__printk+0x10/0x10 [ 717.690636][T24023] ? __pfx___might_resched+0x10/0x10 [ 717.690658][T24023] ? fs_reclaim_acquire+0x7d/0x100 [ 717.690696][T24023] should_fail_ex+0x414/0x560 [ 717.690734][T24023] should_failslab+0xa8/0x100 [ 717.690758][T24023] kmem_cache_alloc_node_noprof+0x77/0x710 [ 717.690788][T24023] ? __alloc_skb+0x112/0x2d0 [ 717.690807][T24023] ? netlink_autobind+0xdb/0x300 [ 717.690835][T24023] __alloc_skb+0x112/0x2d0 [ 717.690859][T24023] netlink_sendmsg+0x5c6/0xb30 [ 717.690891][T24023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.690915][T24023] ? __import_iovec+0x5d4/0x7f0 [ 717.690939][T24023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.690972][T24023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.690993][T24023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.691016][T24023] __sock_sendmsg+0x21c/0x270 [ 717.691048][T24023] ____sys_sendmsg+0x505/0x830 [ 717.691077][T24023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.691116][T24023] ___sys_sendmsg+0x21f/0x2a0 [ 717.691142][T24023] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.691202][T24023] ? __fget_files+0x2a/0x420 [ 717.691222][T24023] ? __fget_files+0x3a0/0x420 [ 717.691252][T24023] __sys_sendmsg+0x164/0x220 [ 717.691278][T24023] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.691328][T24023] ? __pfx_ksys_write+0x10/0x10 [ 717.691359][T24023] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 717.691392][T24023] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.691423][T24023] __do_fast_syscall_32+0xb6/0x2b0 [ 717.691441][T24023] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.691472][T24023] do_fast_syscall_32+0x34/0x80 [ 717.691491][T24023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.691515][T24023] RIP: 0023:0xf70ed539 [ 717.691532][T24023] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 717.691549][T24023] RSP: 002b:00000000f549b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 717.691570][T24023] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 717.691584][T24023] RDX: 0000000000048002 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.691596][T24023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.691608][T24023] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 717.691620][T24023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.691649][T24023] [ 717.979034][T21367] usb 1-1: Product: syz [ 717.983225][T21367] usb 1-1: Manufacturer: syz [ 717.988219][T21367] usb 1-1: SerialNumber: syz [ 718.311865][T21367] usb 1-1: config 0 descriptor?? [ 718.326366][T24024] libceph: resolve '. [ 718.326366][T24024] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 718.326366][T24024] ' (ret=-3): failed [ 718.346063][T21367] port100 1-1:0.31: NFC: Could not find bulk-in or bulk-out endpoint [ 718.387704][T21351] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 718.397305][T24024] vivid-008: ================= START STATUS ================= [ 718.415909][T24024] vivid-008: FM Deviation: 75000 [ 718.426057][T24024] vivid-008: ================== END STATUS ================== [ 718.449077][T21351] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 718.474508][T21351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.497370][T21351] usb 2-1: config 0 descriptor?? [ 718.589860][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7263'. [ 718.626315][T21371] usb 1-1: USB disconnect, device number 70 [ 718.727041][T24007] FAULT_INJECTION: forcing a failure. [ 718.727041][T24007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.769175][T24007] CPU: 1 UID: 0 PID: 24007 Comm: syz.1.7262 Not tainted syzkaller #0 PREEMPT(full) [ 718.769195][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.769204][T24007] Call Trace: [ 718.769209][T24007] [ 718.769216][T24007] dump_stack_lvl+0x189/0x250 [ 718.769239][T24007] ? __pfx____ratelimit+0x10/0x10 [ 718.769258][T24007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.769283][T24007] ? __pfx__printk+0x10/0x10 [ 718.769297][T24007] ? __might_fault+0xb0/0x130 [ 718.769324][T24007] should_fail_ex+0x414/0x560 [ 718.769349][T24007] _copy_from_user+0x2d/0xb0 [ 718.769368][T24007] do_tcp_setsockopt+0x47d/0x1f20 [ 718.769388][T24007] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 718.769406][T24007] ? __pfx_aa_sk_perm+0x10/0x10 [ 718.769438][T24007] ? __fget_files+0x2a/0x420 [ 718.769449][T24007] ? aa_sock_opt_perm+0xff/0x1b0 [ 718.769469][T24007] ? sock_common_setsockopt+0x36/0xc0 [ 718.769486][T24007] ? tcp_setsockopt+0x3d/0xe0 [ 718.769499][T24007] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 718.769518][T24007] do_sock_setsockopt+0x17c/0x1b0 [ 718.769535][T24007] __ia32_sys_setsockopt+0x13f/0x1b0 [ 718.769552][T24007] __do_fast_syscall_32+0xb6/0x2b0 [ 718.769564][T24007] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.769586][T24007] do_fast_syscall_32+0x34/0x80 [ 718.769598][T24007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.769614][T24007] RIP: 0023:0xf70cd539 [ 718.769625][T24007] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 718.769637][T24007] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 718.769651][T24007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 718.769659][T24007] RDX: 0000000000000013 RSI: 0000000080000000 RDI: 0000000000000004 [ 718.769668][T24007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.769675][T24007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 718.769683][T24007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.769701][T24007] [ 718.772716][T21351] usb 2-1: USB disconnect, device number 58 [ 719.122714][T24031] syzkaller1: entered promiscuous mode [ 719.154985][T24031] syzkaller1: entered allmulticast mode [ 719.187967][T24031] tipc: Enabling of bearer rejected, failed to enable media [ 719.201418][T24031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 719.208025][T24031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 719.216000][T24031] vhci_hcd vhci_hcd.0: Device attached [ 719.225709][T24032] vhci_hcd: connection closed [ 719.226229][ T1148] vhci_hcd: stop threads [ 719.242935][ T1148] vhci_hcd: release socket [ 719.247403][ T1148] vhci_hcd: disconnect device [ 719.304739][T24035] netlink: 'syz.2.7270': attribute type 1 has an invalid length. [ 719.348500][T24035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.465318][T24042] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 719.478116][T24042] loop6: detected capacity change from 0 to 7 [ 719.485750][T24042] Dev loop6: unable to read RDB block 7 [ 719.493778][T24042] loop6: unable to read partition table [ 719.499881][T24042] loop6: partition table beyond EOD, truncated [ 719.506211][T24042] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 719.639115][T21344] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 719.789462][T21344] usb 1-1: Using ep0 maxpacket: 8 [ 719.803052][T21344] usb 1-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 719.820770][T21344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.829123][T21344] usb 1-1: Product: syz [ 719.833599][T21344] usb 1-1: Manufacturer: syz [ 719.839862][T21344] usb 1-1: SerialNumber: syz [ 719.853640][T21344] usb 1-1: config 0 descriptor?? [ 719.887594][T21344] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 720.044200][T21371] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 720.132760][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7281'. [ 720.156327][T24061] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 720.215496][T24037] bond_slave_0: entered promiscuous mode [ 720.221537][T24037] bond_slave_1: entered promiscuous mode [ 720.236544][T21371] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 720.246189][T21371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.248098][T24037] macvtap1: entered promiscuous mode [ 720.254502][T21371] usb 2-1: Product: syz [ 720.268642][T21371] usb 2-1: Manufacturer: syz [ 720.282272][T21371] usb 2-1: SerialNumber: syz [ 720.297933][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7281'. [ 720.308468][T21371] usb 2-1: config 0 descriptor?? [ 720.321096][T24037] bond0: entered promiscuous mode [ 720.334906][T21371] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 720.372368][T24037] macvtap1: entered allmulticast mode [ 720.427530][ T24] vhci_hcd: vhci_device speed not set [ 720.437578][T24037] bond0: entered allmulticast mode [ 720.449763][T24037] bond_slave_0: entered allmulticast mode [ 720.456722][T24037] bond_slave_1: entered allmulticast mode [ 720.465412][T24037] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 720.493849][T24062] bond0: left allmulticast mode [ 720.539055][T24062] bond_slave_0: left allmulticast mode [ 720.560274][T24062] bond_slave_1: left allmulticast mode [ 720.621759][T24062] bond0: left promiscuous mode [ 720.669174][T24062] bond_slave_0: left promiscuous mode [ 720.675131][T24062] bond_slave_1: left promiscuous mode [ 720.941223][T21351] usb 1-1: USB disconnect, device number 71 [ 721.707783][T24075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7283'. [ 721.720026][T24075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7283'. [ 721.885127][T24080] bridge0: port 3(veth0_to_bridge) entered blocking state [ 721.906918][T24080] bridge0: port 3(veth0_to_bridge) entered disabled state [ 721.939714][T24084] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20004 [ 721.941701][T24080] veth0_to_bridge: entered allmulticast mode [ 721.947247][T24085] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20004 [ 722.027009][T24080] veth0_to_bridge: entered promiscuous mode [ 722.046893][T24080] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.073580][T24080] bridge0: port 3(veth0_to_bridge) entered blocking state [ 722.081600][T24080] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 722.129923][T24091] deleting an unspecified loop device is not supported. [ 722.259560][T21371] gspca_sunplus: reg_r err -110 [ 722.265061][T21371] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 722.386246][T24094] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 722.476974][T24094] loop6: detected capacity change from 0 to 7 [ 722.488590][T20844] Dev loop6: unable to read RDB block 7 [ 722.494667][T20844] loop6: unable to read partition table [ 722.502614][T20844] loop6: partition table beyond EOD, truncated [ 722.516303][T24094] Dev loop6: unable to read RDB block 7 [ 722.523651][T24094] loop6: unable to read partition table [ 722.529823][T24094] loop6: partition table beyond EOD, truncated [ 722.560682][T24094] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 722.622686][T24102] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 723.494810][T21367] usb 2-1: USB disconnect, device number 59 [ 724.053132][T24128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7300'. [ 724.087477][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7300'. [ 724.151624][T24131] vlan2: entered promiscuous mode [ 724.157051][T24131] vlan2: entered allmulticast mode [ 724.162790][T24131] hsr_slave_1: entered allmulticast mode [ 724.243804][T24134] loop6: detected capacity change from 0 to 7 [ 724.253044][T24134] Dev loop6: unable to read RDB block 7 [ 724.260061][T24134] loop6: AHDI p3 p4 [ 724.264065][T24134] loop6: partition table partially beyond EOD, truncated [ 724.271666][T24134] loop6: p3 start 1886353253 is beyond EOD, truncated [ 724.309064][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 724.428694][T21529] Bluetooth: hci3: ACL packet for unknown connection handle 3557 [ 724.459217][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 724.466183][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.477393][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 724.486744][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.494845][T21344] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 724.504860][ T24] usb 2-1: config 0 descriptor?? [ 724.669291][T21344] usb 1-1: Using ep0 maxpacket: 16 [ 724.676711][T21344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 724.689912][T21344] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 724.699118][T21344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.707201][T21344] usb 1-1: Product: syz [ 724.711524][T21344] usb 1-1: Manufacturer: syz [ 724.716210][T21344] usb 1-1: SerialNumber: syz [ 724.723835][T21344] usb 1-1: config 0 descriptor?? [ 724.733178][T21344] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 724.742605][T21344] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 724.929736][ T24] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 725.395372][T21344] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 725.975547][T24160] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 726.031038][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 726.067821][T21371] usb 2-1: USB disconnect, device number 60 [ 726.289278][ T24] usb 4-1: device descriptor read/64, error -71 [ 726.371931][T21344] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 726.417398][T21344] em28xx 1-1:0.0: board has no eeprom [ 726.610702][T24165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7313'. [ 726.619910][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 726.637668][T21344] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 726.645648][T21344] em28xx 1-1:0.0: dvb set to bulk mode. [ 726.658017][T21349] em28xx 1-1:0.0: Binding DVB extension [ 726.684311][T21344] usb 1-1: USB disconnect, device number 72 [ 726.691406][T21344] em28xx 1-1:0.0: Disconnecting em28xx [ 726.807201][ T24] usb 4-1: device descriptor read/64, error -71 [ 726.845391][T24165] netlink: 'syz.1.7313': attribute type 13 has an invalid length. [ 726.862477][T21349] em28xx 1-1:0.0: Registering input extension [ 726.878950][T21344] em28xx 1-1:0.0: Closing input extension [ 726.893948][T21344] em28xx 1-1:0.0: Freeing device [ 726.931224][ T24] usb usb4-port1: attempt power cycle [ 727.269061][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 727.361673][T24173] syzkaller0: entered promiscuous mode [ 727.367168][T24173] syzkaller0: entered allmulticast mode [ 727.509473][ T30] audit: type=1326 audit(1763423245.041:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 727.531589][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.578284][ T24] usb 4-1: device descriptor read/8, error -71 [ 727.590051][ T30] audit: type=1326 audit(1763423245.041:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 727.616827][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.799770][ T30] audit: type=1326 audit(1763423245.041:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 727.949122][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 727.959038][ T30] audit: type=1326 audit(1763423245.041:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 727.981122][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.022861][ T24] usb 4-1: device descriptor read/8, error -71 [ 728.038161][ T30] audit: type=1326 audit(1763423245.041:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.129336][ T30] audit: type=1326 audit(1763423245.041:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.151352][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.158586][ T24] usb usb4-port1: unable to enumerate USB device [ 728.166225][ T30] audit: type=1326 audit(1763423245.041:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.269270][ T30] audit: type=1326 audit(1763423245.041:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.271340][T24182] loop6: detected capacity change from 0 to 7 [ 728.308762][T24182] Dev loop6: unable to read RDB block 7 [ 728.331628][T24182] loop6: AHDI p3 p4 [ 728.341695][T24182] loop6: partition table partially beyond EOD, truncated [ 728.359056][T21344] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 728.383061][T24182] loop6: p3 start 1886353253 is beyond EOD, truncated [ 728.393653][ T30] audit: type=1326 audit(1763423245.051:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.415722][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.472255][T24186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7319'. [ 728.539426][T21371] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 728.597629][T21344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.610009][T21344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.620256][ T30] audit: type=1326 audit(1763423245.051:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.2.7314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 728.714989][T21344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.728667][T21371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.739314][T21371] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 728.756010][T21371] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 728.761564][T21344] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 728.776029][T24192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7321'. [ 728.785284][T21371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.798929][T21344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.815017][T21344] usb 5-1: config 0 descriptor?? [ 728.825676][T21371] usb 1-1: config 0 descriptor?? [ 729.242672][T21371] usb 1-1: USB disconnect, device number 73 [ 729.267898][T21344] usbhid 5-1:0.0: can't add hid device: -71 [ 729.280078][T21344] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 729.305551][T21344] usb 5-1: USB disconnect, device number 65 [ 729.365782][T24204] kernel profiling enabled (shift: 63) [ 729.378352][T24204] profiling shift: 63 too large [ 730.707409][T24236] loop6: detected capacity change from 0 to 7 [ 730.741338][T24236] Dev loop6: unable to read RDB block 7 [ 730.747814][T24236] loop6: AHDI p3 p4 [ 730.757136][T24236] loop6: partition table partially beyond EOD, truncated [ 730.869082][ T856] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 730.869275][T24236] loop6: p3 start 1886353253 is beyond EOD, truncated [ 731.019061][ T856] usb 2-1: device descriptor read/64, error -71 [ 731.233505][T24250] program syz.0.7337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.271973][ T856] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 731.439023][ T856] usb 2-1: device descriptor read/64, error -71 [ 731.543847][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7338'. [ 731.586850][ T856] usb usb2-port1: attempt power cycle [ 731.791781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.805259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.818444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.831494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.844551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.857578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.870644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.883671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.896777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 731.909807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 732.279164][ T856] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 732.321073][ T856] usb 2-1: device descriptor read/8, error -71 [ 732.559180][ T856] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 732.642925][ T856] usb 2-1: device descriptor read/8, error -71 [ 732.970579][ T856] usb usb2-port1: unable to enumerate USB device [ 734.159149][ T856] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 734.378071][ T856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.388511][ T856] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.404184][ T856] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 734.413571][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.594222][ T856] usb 4-1: config 0 descriptor?? [ 734.988110][ T856] usb 4-1: USB disconnect, device number 76 [ 735.656478][T24281] netlink: 196 bytes leftover after parsing attributes in process `syz.4.7345'. [ 736.445291][T21366] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 736.799096][ C1] net_ratelimit: 5500 callbacks suppressed [ 736.799116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.817840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.830732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.843468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.856212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.869044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.881844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.894595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.907350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 736.920115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 737.141062][ T856] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 737.235340][T21366] usb 5-1: Using ep0 maxpacket: 16 [ 737.299080][ T856] usb 3-1: Using ep0 maxpacket: 32 [ 737.339714][T21366] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 737.381779][ T856] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 737.440793][ T856] usb 3-1: config 0 has no interface number 0 [ 737.447065][ T856] usb 3-1: config 0 interface 31 has no altsetting 0 [ 737.454791][T21366] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 737.495907][T21366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.528125][T21366] usb 5-1: Product: syz [ 737.537735][ T856] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16 [ 737.550661][T21366] usb 5-1: Manufacturer: syz [ 737.555930][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.564634][T21366] usb 5-1: SerialNumber: syz [ 737.575424][T21366] usb 5-1: config 0 descriptor?? [ 737.581993][ T856] usb 3-1: Product: syz [ 737.593127][ T856] usb 3-1: Manufacturer: syz [ 737.598214][ T856] usb 3-1: SerialNumber: syz [ 737.605236][T21366] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 737.641077][T21366] usb 5-1: Detected FT232R [ 737.646959][ T856] usb 3-1: config 0 descriptor?? [ 737.667089][ T856] port100 3-1:0.31: NFC: Could not find bulk-in or bulk-out endpoint [ 737.906130][ T856] usb 3-1: USB disconnect, device number 57 [ 738.334116][T21366] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 738.392089][T21366] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 738.450075][T21366] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 738.539596][T21366] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 738.575888][T21366] usb 5-1: USB disconnect, device number 66 [ 738.608693][T21366] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 738.638692][T21366] ftdi_sio 5-1:0.0: device disconnected [ 741.809674][ C1] net_ratelimit: 6017 callbacks suppressed [ 741.809689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.828565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.841278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.853954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.866710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.879657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.892421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.905151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.917884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 741.930623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 742.819094][T21366] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 743.038709][T21366] usb 5-1: Using ep0 maxpacket: 8 [ 743.342105][T21366] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 743.351611][T21366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.369892][T21366] usb 5-1: Product: syz [ 743.379052][T21366] usb 5-1: Manufacturer: syz [ 743.383768][T21366] usb 5-1: SerialNumber: syz [ 743.411711][T21366] usb 5-1: config 0 descriptor?? [ 743.432421][T21366] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 743.691669][T24299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7351'. [ 743.710884][T24299] macvtap0: entered promiscuous mode [ 743.716438][T24299] bond0: entered promiscuous mode [ 743.733951][T24299] bond_slave_0: entered promiscuous mode [ 743.744238][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7351'. [ 743.753614][T24299] bond_slave_1: entered promiscuous mode [ 743.777411][T24299] macvtap0: entered allmulticast mode [ 743.921006][T24299] bond0: entered allmulticast mode [ 743.926277][T24299] bond_slave_0: entered allmulticast mode [ 743.932818][T24299] bond_slave_1: entered allmulticast mode [ 743.942510][T24299] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 743.968607][T24311] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 744.669679][T24309] bond0: left allmulticast mode [ 744.674819][T24309] bond_slave_0: left allmulticast mode [ 744.682770][T24309] bond_slave_1: left allmulticast mode [ 744.688461][T24309] bond0: left promiscuous mode [ 744.693664][T24309] bond_slave_0: left promiscuous mode [ 744.699782][T24309] bond_slave_1: left promiscuous mode [ 745.575522][T21366] usb 5-1: USB disconnect, device number 67 [ 746.819433][ C1] net_ratelimit: 2840 callbacks suppressed [ 746.819454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.839624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.853728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.867602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.881256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.896838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.911072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.924975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.938897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 746.952561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 751.171824][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.247794][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.829144][ C0] net_ratelimit: 10594 callbacks suppressed [ 751.829163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.829394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 751.835719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.849601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 751.859576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.873548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 751.883471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.897451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 751.907433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.921297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 753.628994][ C0] sched: DL replenish lagged too much [ 756.839111][ C1] net_ratelimit: 10760 callbacks suppressed [ 756.839134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 756.839543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.848619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 756.857724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.871903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 756.881660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.895800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 756.905579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.919865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 756.929494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.849317][ C0] net_ratelimit: 10908 callbacks suppressed [ 761.849339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.852118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 761.855846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.869916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 761.879745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.893917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 761.903675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.917692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 761.927501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.941736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 766.859022][ C0] net_ratelimit: 12076 callbacks suppressed [ 766.859041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.859684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 766.865555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.879717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 766.889449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.903724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 766.913327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.927773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 766.937390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.951561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 771.869323][ C0] net_ratelimit: 12182 callbacks suppressed [ 771.869347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.870551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 771.875843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.890338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 771.899719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.913975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 771.923606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.937862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 771.947616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.961861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 776.879057][ C0] net_ratelimit: 11102 callbacks suppressed [ 776.879079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.881423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 776.885638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.899740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 776.909628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.923693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 776.933486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.947752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 776.957391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.971523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 781.889095][ C0] net_ratelimit: 10532 callbacks suppressed [ 781.889116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.890352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 781.895683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.910122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 781.919661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.934232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 781.943562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.957856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 781.967415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.981504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 786.899258][ C0] net_ratelimit: 11834 callbacks suppressed [ 786.899279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.900129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 786.905798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.919980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 786.929638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.943838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 786.953582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.967898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 786.977473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.991730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 791.909323][ C0] net_ratelimit: 11160 callbacks suppressed [ 791.909345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.910430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 791.915903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.930052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 791.939798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.953880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 791.963670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.977864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 791.987747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.001961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 796.919254][ C0] net_ratelimit: 10775 callbacks suppressed [ 796.919276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.921313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 796.925848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.939967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 796.949759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.963902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 796.973587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.987768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 796.997470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.011670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 801.929179][ C0] net_ratelimit: 10909 callbacks suppressed [ 801.929201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.929382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 801.935682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.950171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 801.959614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.974136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 801.983561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.998054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 802.007450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.021922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 806.939185][ C0] net_ratelimit: 10776 callbacks suppressed [ 806.939205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.940465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 806.945827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.960407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 806.969730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.984136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 806.993623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.008244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 807.017553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.032282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 808.858333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.880809][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.949003][ C0] net_ratelimit: 11281 callbacks suppressed [ 811.949026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.951666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 811.955571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.970234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 811.979519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.994188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 812.003379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.017971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 812.027249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.041698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 816.959004][ C0] net_ratelimit: 11628 callbacks suppressed [ 816.959024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.961449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 816.965571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.980055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 816.989541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.003837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 817.013387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.027818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 817.038154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.051772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 821.969012][ C1] net_ratelimit: 11714 callbacks suppressed [ 821.969021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 821.969034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 821.972576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 821.975503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 821.989819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 821.999476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.013813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 822.023302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.037709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 822.047271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.980216][ C1] net_ratelimit: 11327 callbacks suppressed [ 826.980238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 826.980461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.989004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 826.998744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.013439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 827.022706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.036686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 827.046598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.060800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 827.070498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.988985][ C0] net_ratelimit: 11016 callbacks suppressed [ 831.989006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.990870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 831.995615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.009977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 832.019568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.034654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 832.043585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.057847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 832.067378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.081949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 836.999007][ C0] net_ratelimit: 11038 callbacks suppressed [ 836.999028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.001045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 837.005543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.020126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 837.029459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.043913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 837.053383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.067714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 837.077257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.091796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 842.009410][ C0] net_ratelimit: 11515 callbacks suppressed [ 842.009432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.010430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 842.016013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.029883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 842.039859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.053998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 842.063769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.077642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 842.087789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.101568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 844.508135][ T812] kworker/1:2 (812) used greatest stack depth: 15320 bytes left [ 847.019215][ C1] net_ratelimit: 11221 callbacks suppressed [ 847.019236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 847.019402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.027957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 847.037736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.051874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 847.061658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.075776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 847.085572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.099748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 847.109541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.808964][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 851.815973][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24315/1:b..l [ 851.824577][ C0] rcu: (detected by 0, t=10503 jiffies, g=115589, q=2647 ncpus=2) [ 851.832493][ C0] task:syz.2.7356 state:R running task stack:25576 pid:24315 tgid:24315 ppid:20436 task_flags:0x400040 flags:0x10080000 [ 851.847362][ C0] Call Trace: [ 851.850674][ C0] [ 851.853627][ C0] __schedule+0x1798/0x4cc0 [ 851.858174][ C0] ? __pfx___schedule+0x10/0x10 [ 851.863055][ C0] ? preempt_schedule+0xae/0xc0 [ 851.867946][ C0] preempt_schedule_common+0x83/0xd0 [ 851.873252][ C0] preempt_schedule+0xae/0xc0 [ 851.877943][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 851.883333][ C0] preempt_schedule_thunk+0x16/0x30 [ 851.888557][ C0] _raw_spin_unlock+0x3f/0x50 [ 851.893255][ C0] insert_page+0x189/0x2c0 [ 851.897695][ C0] ? __pfx_insert_page+0x10/0x10 [ 851.902646][ C0] ? vm_insert_page+0x1f1/0x390 [ 851.907529][ C0] kcov_mmap+0xc2/0x120 [ 851.911701][ C0] mmap_region+0x18b4/0x2110 [ 851.916364][ C0] ? __pfx_mmap_region+0x10/0x10 [ 851.921368][ C0] ? __pfx_mmap_region+0x10/0x10 [ 851.926401][ C0] ? aa_file_perm+0x13a/0x1550 [ 851.931191][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 851.937928][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 851.942801][ C0] ? security_mmap_addr+0x71/0x270 [ 851.947936][ C0] ? shmem_mapping+0xd/0x50 [ 851.952468][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 851.957967][ C0] do_mmap+0xc45/0x10d0 [ 851.962159][ C0] ? __pfx_do_mmap+0x10/0x10 [ 851.966757][ C0] ? down_write_killable+0x178/0x230 [ 851.972048][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 851.977696][ C0] ? common_file_perm+0x1b5/0x230 [ 851.982754][ C0] vm_mmap_pgoff+0x2a6/0x4d0 [ 851.987373][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 851.992511][ C0] ? __fget_files+0x2a/0x420 [ 851.997133][ C0] ? __fget_files+0x3a0/0x420 [ 852.001829][ C0] ? __fget_files+0x2a/0x420 [ 852.006446][ C0] ksys_mmap_pgoff+0x51f/0x760 [ 852.011241][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 852.016379][ C0] ? asm_int80_emulation+0x1a/0x20 [ 852.021515][ C0] ? do_int80_emulation+0x1f3/0x390 [ 852.026757][ C0] do_fast_syscall_32+0x34/0x80 [ 852.029096][ C1] net_ratelimit: 11360 callbacks suppressed [ 852.029116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.031623][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.040464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.049474][ C0] RIP: 0023:0xf7fa1539 [ 852.049495][ C0] RSP: 002b:00000000f758fa40 EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 852.058832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.067777][ C0] RAX: ffffffffffffffda RBX: 00000000f5033000 RCX: 0000000000400000 [ 852.067795][ C0] RDX: 0000000000000003 RSI: 0000000000000011 RDI: 00000000000000db [ 852.067808][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.074794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.080266][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 852.080283][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.080324][ C0] [ 852.095106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.100239][ C0] rcu: rcu_preempt kthread starved for 656 jiffies! g115589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 852.100264][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 852.100276][ C0] rcu: RCU grace-period kthread stack dump: [ 852.111293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.116218][ C0] task:rcu_preempt state:R running task [ 852.131208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.136181][ C0] stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 852.150960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.159087][ C0] Call Trace: [ 852.159098][ C0] [ 852.159112][ C0] __schedule+0x1798/0x4cc0 [ 852.173127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.180211][ C0] ? __lock_acquire+0xab9/0xd20 [ 852.189175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 852.198073][ C0] ? __pfx___schedule+0x10/0x10 [ 852.282089][ C0] ? schedule+0x91/0x360 [ 852.286369][ C0] schedule+0x165/0x360 [ 852.290563][ C0] schedule_timeout+0x12b/0x270 [ 852.295434][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 852.300826][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 852.306748][ C0] ? __pfx_process_timeout+0x10/0x10 [ 852.312073][ C0] ? prepare_to_swait_event+0x341/0x380 [ 852.317640][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 852.322507][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 852.328682][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 852.333992][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 852.339258][ C0] ? finish_swait+0xcd/0x1f0 [ 852.343890][ C0] rcu_gp_kthread+0x99/0x390 [ 852.348497][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 852.353712][ C0] ? __kthread_parkme+0x7b/0x200 [ 852.358668][ C0] ? __kthread_parkme+0x1a1/0x200 [ 852.363708][ C0] kthread+0x711/0x8a0 [ 852.367821][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 852.373037][ C0] ? __pfx_kthread+0x10/0x10 [ 852.377655][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.382878][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.388099][ C0] ? __pfx_kthread+0x10/0x10 [ 852.392719][ C0] ret_from_fork+0x4bc/0x870 [ 852.397335][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 852.402475][ C0] ? __switch_to_asm+0x39/0x70 [ 852.407262][ C0] ? __switch_to_asm+0x33/0x70 [ 852.412037][ C0] ? __pfx_kthread+0x10/0x10 [ 852.416668][ C0] ret_from_fork_asm+0x1a/0x30 [ 852.421492][ C0] [ 852.424531][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 852.430870][ C0] Sending NMI from CPU 0 to CPUs 1: [ 852.436088][ C1] NMI backtrace for cpu 1 [ 852.436113][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 852.436140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.436155][ C1] RIP: 0010:unwind_next_frame+0x1323/0x2390 [ 852.436181][ C1] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 <49> 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 e9 7b ef ff ff [ 852.436196][ C1] RSP: 0018:ffffc90000a07c18 EFLAGS: 00000216 [ 852.436212][ C1] RAX: ffffffff82258d79 RBX: ffffffff8f994e38 RCX: ffffffff8f994e28 [ 852.436224][ C1] RDX: ffffffff8f994e14 RSI: ffffffff90182bf0 RDI: ffffffff8bbf0700 [ 852.436237][ C1] RBP: ffffffff8f994e14 R08: 000000000000000a R09: ffffffff81738c45 [ 852.436249][ C1] R10: ffffc90000a07d38 R11: ffffffff81ac2e60 R12: ffffffff82258d0d [ 852.436262][ C1] R13: ffffffff8f994e14 R14: ffffc90000a07ce8 R15: ffffffff8f994e24 [ 852.436275][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 852.436289][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.436300][ C1] CR2: 00000000f2cc0000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 852.436314][ C1] Call Trace: [ 852.436320][ C1] [ 852.436330][ C1] ? unwind_next_frame+0xa5/0x2390 [ 852.436350][ C1] ? kasan_save_track+0x3e/0x80 [ 852.436375][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 852.436399][ C1] arch_stack_walk+0x11c/0x150 [ 852.436421][ C1] ? kasan_save_track+0x3e/0x80 [ 852.436444][ C1] stack_trace_save+0x9c/0xe0 [ 852.436464][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 852.436490][ C1] kasan_save_track+0x3e/0x80 [ 852.436511][ C1] ? kasan_save_track+0x3e/0x80 [ 852.436557][ C1] __kasan_slab_alloc+0x6c/0x80 [ 852.436581][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 852.436603][ C1] ? skb_clone+0x212/0x3a0 [ 852.436624][ C1] skb_clone+0x212/0x3a0 [ 852.436643][ C1] br_flood+0x414/0x6a0 [ 852.436668][ C1] br_handle_frame_finish+0x15a3/0x1c90 [ 852.436695][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 852.436723][ C1] ? ip6t_do_table+0x1db/0x1560 [ 852.436748][ C1] ? nf_hook_slow+0x176/0x220 [ 852.436766][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 852.436788][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 852.436814][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 852.436836][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 852.436857][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 852.436885][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 852.436908][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 852.436934][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 852.436958][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 852.436983][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 852.437013][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 852.437036][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 852.437061][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 852.437081][ C1] br_handle_frame+0x96e/0x14f0 [ 852.437106][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 852.437129][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 852.437149][ C1] ? packet_rcv+0x175/0x1730 [ 852.437175][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 852.437195][ C1] ? __pfx_packet_rcv+0x10/0x10 [ 852.437218][ C1] __netif_receive_skb_core+0x10b9/0x4380 [ 852.437240][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 852.437261][ C1] ? kmem_cache_free+0x19b/0x690 [ 852.437288][ C1] ? ip6_mc_input+0x8de/0xb70 [ 852.437306][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 852.437323][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 852.437344][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 852.437360][ C1] ? NF_HOOK+0x30c/0x3a0 [ 852.437373][ C1] ? skb_orphan+0xaf/0xd0 [ 852.437394][ C1] ? process_backlog+0x2d5/0x14f0 [ 852.437418][ C1] ? process_backlog+0x2d5/0x14f0 [ 852.437443][ C1] __netif_receive_skb+0x72/0x380 [ 852.437466][ C1] ? process_backlog+0x2d5/0x14f0 [ 852.437489][ C1] process_backlog+0x60e/0x14f0 [ 852.437520][ C1] ? __pfx_process_backlog+0x10/0x10 [ 852.437548][ C1] __napi_poll+0xc7/0x360 [ 852.437568][ C1] ? skb_defer_free_flush+0x229/0x250 [ 852.437591][ C1] net_rx_action+0x5f7/0xdf0 [ 852.437613][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.437636][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 852.437662][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 852.437702][ C1] handle_softirqs+0x286/0x870 [ 852.437720][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 852.437739][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 852.437759][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 852.437783][ C1] __irq_exit_rcu+0xca/0x1f0 [ 852.437799][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 852.437820][ C1] irq_exit_rcu+0x9/0x30 [ 852.437835][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 852.437857][ C1] [ 852.437863][ C1] [ 852.437869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.437886][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 852.437908][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 852.437921][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 852.437934][ C1] RAX: bbd46a33c3cd3c00 RBX: ffffffff81967b47 RCX: bbd46a33c3cd3c00 [ 852.437947][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e2b0 RDI: ffffffff8bbf0760 [ 852.437958][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 852.437970][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ceb70 [ 852.437982][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 852.437995][ C1] ? do_idle+0x1e7/0x510 [ 852.438021][ C1] default_idle+0x13/0x20 [ 852.438035][ C1] default_idle_call+0x73/0xb0 [ 852.438050][ C1] do_idle+0x1e7/0x510 [ 852.438069][ C1] ? __pfx_do_idle+0x10/0x10 [ 852.438093][ C1] cpu_startup_entry+0x44/0x60 [ 852.438110][ C1] start_secondary+0x101/0x110 [ 852.438133][ C1] common_startup_64+0x13e/0x147 [ 852.438163][ C1] [ 857.039430][ C0] net_ratelimit: 9621 callbacks suppressed [ 857.039451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.040404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 857.046000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.060268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 857.069941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.084265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 857.093746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.108141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0) [ 857.117603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.131832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:ed:25:a8:0d:d7, vlan:0)