last executing test programs: 9m45.062212895s ago: executing program 2 (id=2138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x800000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x800000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = semget$private(0x0, 0x20000000102, 0x0) semop(r6, &(0x7f0000000400)=[{0x4, 0x5}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9m44.846330193s ago: executing program 2 (id=2140): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) 9m43.647094495s ago: executing program 2 (id=2146): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9m42.733265592s ago: executing program 2 (id=2149): r0 = socket$kcm(0x10, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x1) r2 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x95\x8a3\xbc\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbf`\'\xcb\xb6\xaf\xdc\xacD\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xe0\xf4\xc3\xf2\x93\xd2\xa9\xb1\f{a?\xd0\xe1\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb2\xa0Z_\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\x02\xbaq\xb6Pr\x04\xcd\n\xc7\x1b\xb9\xc1\x84l\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*K\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\a\x00\x00\x00O\xc9\xb9\x14\x02\x00\x00\x00\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\rm\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0xb) ftruncate(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000180)={0x9, [0x4, 0x8, 0x3], [{0x5, 0xfff7ffff, 0x1, 0x1}, {0x2, 0x36, 0x1, 0x1}, {0x7, 0x401, 0x0, 0x1, 0x0, 0x1}, {0x10000, 0x9327, 0x1, 0x1, 0x1}, {0xf8, 0x663d, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xc4, 0x1, 0x0, 0x1}, {0x4, 0xda1e, 0x0, 0x1}, {0x3ff, 0x4, 0x1, 0x0, 0x1}, {0xffffffc0, 0x687, 0x1, 0x0, 0x1}, {0x82, 0x1}, {0x8ae, 0x5}, {0x5, 0x81, 0x0, 0x0, 0x0, 0x1}], 0xfffffffb}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 9m42.334510521s ago: executing program 2 (id=2150): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020700c0ef000000000000109022400010000600009040009020300000009090807"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000040)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @local}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRES64], 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="a454d5d0e2668eba0fb47680a9a88f8d5e900c4ae261b548873d6e7476818072d7f64493778c9f714319bbf87273906c0284de3156202767e2b6e23aab68f891a019c2404b6c96f6ebfdb050f62c74bc5d5a41ff884c0ca7f3126539370604a56de1327f1c6d658e8b7c0f36efc6424bfc615efe0fca4b3c"], 0x0) 9m40.868817543s ago: executing program 2 (id=2153): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x6, &(0x7f00000005c0)=""/243, 0xf3}, 0x40}, {{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/62, 0x3e}], 0x1}, 0x4}, {{&(0x7f00000007c0)=@nl, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/5, 0x5}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000880)=""/98, 0x62}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/132, 0x84}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x7, &(0x7f0000000b00)=""/3, 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/196, 0xc4}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/78, 0x4e}], 0x4, &(0x7f0000000d40)=""/237, 0xed}, 0x8}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x2, &(0x7f0000000ec0)=""/147, 0x93}, 0x8}], 0x5, 0x80000020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendto(r6, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) unshare(0x2c020400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007b7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 9m24.406337173s ago: executing program 32 (id=2153): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x6, &(0x7f00000005c0)=""/243, 0xf3}, 0x40}, {{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/62, 0x3e}], 0x1}, 0x4}, {{&(0x7f00000007c0)=@nl, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/5, 0x5}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000880)=""/98, 0x62}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/132, 0x84}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x7, &(0x7f0000000b00)=""/3, 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/196, 0xc4}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/78, 0x4e}], 0x4, &(0x7f0000000d40)=""/237, 0xed}, 0x8}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x2, &(0x7f0000000ec0)=""/147, 0x93}, 0x8}], 0x5, 0x80000020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendto(r6, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) unshare(0x2c020400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007b7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 1m38.286026739s ago: executing program 4 (id=3950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0xcc, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x68}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xcc}}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x205000, &(0x7f00000003c0)="4e30115d0027d1b43169cc3ac9e1fb14dab5f096999a22bdd98cf1135a4d93270d1811e7da9e6113de02d1e2eaf8ef8e1eb16d299eac7c2d5e5dcc1818f885eca09880ffde481bc9f04e4d7de99f68892dd134370d070512db78fad8067a7aabcec4d24ee4284e49f3d059fd8913829092288a6688e05e3bd143881fa921088e7a0087", 0x83, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000480)="2152a635566ef83445dd491fb9b3aae0b799577884caa1d065239e") sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 1m35.949053365s ago: executing program 0 (id=3972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x18) 1m35.850387349s ago: executing program 0 (id=3973): getpid() socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002500)=0x14) 1m35.065715404s ago: executing program 0 (id=3980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xffff8001, 0x5, 0x3a7, 0x83, 0x4, 0x0, 0x7, [0x6, 0x9]}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_usb_connect(0x2, 0x41, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd1, 0x25, 0x3c, 0x40, 0x12d1, 0xed56, 0x46dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcf, 0x0, 0x0, 0xff, 0x1, 0x37, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc957}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0xa, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1, 0x1}, {0x2, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xffff8001, 0x5, 0x3a7, 0x83, 0x4, 0x0, 0x7, [0x6, 0x9]}}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_usb_connect(0x2, 0x41, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd1, 0x25, 0x3c, 0x40, 0x12d1, 0xed56, 0x46dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcf, 0x0, 0x0, 0xff, 0x1, 0x37, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc957}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x8001, 0x9}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0xa, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1, 0x1}, {0x2, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) (async) 1m34.814319419s ago: executing program 1 (id=3984): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x2000, 0x0, r3}) 1m34.764980936s ago: executing program 4 (id=3985): r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1425c0ac78000d0000004a2385360b3b2e7883"], 0x18}, 0x1c890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1bc, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x8]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x11f}]}}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 1m34.40862211s ago: executing program 4 (id=3989): rt_sigaction(0x11, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x41000004, 0x0) 1m33.999075789s ago: executing program 3 (id=3990): getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002500)=0x14) 1m33.67194959s ago: executing program 5 (id=3991): r0 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x6, @mcast2, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffef3}}], 0x1, 0x1c000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2000}) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000011) 1m33.491567772s ago: executing program 5 (id=3992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000040bf09000000000000550901000000000095000000000000008190fcff00000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m33.483327908s ago: executing program 1 (id=3993): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @loopback}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @loopback}}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) 1m33.436020363s ago: executing program 3 (id=3994): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m33.334328545s ago: executing program 5 (id=3995): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x3ff, 0x32315559, 0x8, 0x203, 0x2, 0x7, 0x6, 0x1, 0x2, 0x1, 0x1}}) (async) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x40, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r6}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000008c000080200000001100050000000008"], 0x24}}, 0x0) (async) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r7, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1m33.305249122s ago: executing program 4 (id=3996): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc000700801900000000004b534452000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1m33.30425116s ago: executing program 1 (id=3997): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x8, 0xfff, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[], 0x1df) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x19b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000005500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m33.257086733s ago: executing program 5 (id=3998): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYBLOB="761304d6ae8d3d1d231b915f43cd66566f826c59cbb4185132628db6aca424496a4bfed23403c13cd6fec66baedc54f4319547a76a2fea6bbb840dbb0c0c06df715f35256f800c637ab1fd5cfd9eb53d3194c45db86189fcb2cc94d57b551af94728d15a9273b92dbfdb925deb00ed97c2016a302b0bdb1cde8ad19d7f5c5441ab61af7f611f5ed97b3e143208d3ca2b04d36a2fff025f2ec74d7b283b6658d658d229be8cad791ce98813b8d9ac73f3ed9a3b338d48ba4756ae1d8645a00e4040a6cec859590d9f99aa7562410177d91f249d99034737e3", @ANYBLOB="0bc7ef849ea570e45f27cb673f91f3b981d8c25596bffb802cd30f33c760bed229a1514e1ecc2faec88c053380126f92b931b4c759fdb98668101d9d4e43bb62dce791a368288e3c2a116cdc5b48989a988699dc93664415211b91f5ae677f5600b1010c9fb5740e50ddd1df186fd33bf177b9a89b6c3716ee52c72de49e4af218f6bfcf33ccb81501e7518f790143fad4e288add844b0ec89bc09fca8e3110ff5ec17889cc55651f82d0081474a9ecbc56785d391b61756860d3cc6dab276c13f2b31649bd3fb6090520fd01f602b74"], 0x1df) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1090, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r6}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1037, 0x1, {{'sha512-neon\x00'}, 0x7f78, "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"}}]}, 0x1090}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000ffef7f62e44ff45c65219b82687dc2f0000000000b70200000e000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b0000001801000020207025000000000020200348f06e7a6c6c88137accb57a5add79207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500f4cabc6fbc9856a4b5a01317000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x240008d1, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000b04c10dfbcaa749d6973edd22f41b97a8368ee64cf4d3ffdcb2e2b9220f465bd860998510c3befa186d92168c8e3828fedf367ce1e31e31d7c71002428a9f05ed0164192420dd5649848f1662a1b7b52ae3eef49ec4d337c4f7d760f45146baa7fd91f7b2a98c0ad8f45717e6456709df82e438047c61261aca4f269109240f30e2288f9f498e176074f4b932c5376ea8cb4f3b6bec4bf7b11bf5ab19d3ddd0e486136c03e51fc0c29cc0b4344a427561071d6e6397fa217ac6f407a31250790dc7fb91b00ebeb8518", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1m33.085874946s ago: executing program 0 (id=3999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x10001) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffffe, @mcast1, 0x9}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x401) read$char_usb(r2, &(0x7f0000000240)=""/108, 0x6c) r3 = syz_usb_connect(0x5, 0x41e, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0xe7, 0xcd, 0x92, 0x20, 0x19d2, 0x118, 0x38a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40c, 0x1, 0x3, 0x3, 0xa0, 0xc, [{{0x9, 0x4, 0x2f, 0x2, 0xe, 0xff, 0xff, 0xff, 0xb0, [@generic={0xa4, 0xa, "21f89b4b9ea825b2bf25ab8ae3a13cd38931d0f41077407f20db13fb2bcde4a692f44560b875ffd13c5df2361dcf1d63298edc16101413c16921beaa9df76ca0b1b48bc48f6b5e109d19f385e9f92fbb4d857882e51d7e1a96f7d6382bca6513ff1ad218b368511bd5da1d13bc3b3963c96ed4b51ee90954f2fe2c4aa3b8820e7dfe910018532d0c389e2bb68a9fcfd75f5942bce7a33f12dcfccaae83560ff7cc72"}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1, 0x1, 0x2, 0x4}]}], [{{0x9, 0x5, 0xf, 0x3, 0x200, 0x71, 0x6, 0x2, [@generic={0xf0, 0x18, "3de53a2830bf0810ce3c9c490c667a3782003117599937fb556ad39c38d6e24ae976804ca8ef780769541cb97e92c8b48c1557890ede5fca69985b9b4b050a5a88d3cb88e34044fa8902c26207ea3ea8c7878f11c15dd877818bb38a3761081d7494710172013cb36e38568369571b79e9a25b09d3bab1b5db4d4bc51bf32c620841966215d9b9189f1068a74ff209691976d03d60c7bafd0afb39d288cc754da79f68f57ee37685436ec20774cbe7157d212ea0ddca570424f0111f54c477715088daba276b5b712d464d4109d03ad0bccd590906bac049f3192a4205f94e7168fb66a1e6e1e4185dc28ea2bd0e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xbf, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x88, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xfb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xfc21}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x7, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xa, 0x4, 0x5, [@generic={0xfe, 0x21, "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"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0xc2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x95, 0xccc}, @generic={0x11, 0x21, "ee9943cf34916251e2dfd18844f6c4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x40, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x54, 0x63, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0xf7, 0x10, 0x6, [@generic={0x65, 0x7, "1a6c07e2e8b2157640a10779dc6e3178761fc53bf548b3724f0f6ffac2ee765da3f8e8c1289aedf9c2f5568f630d12b1fd040d8c993f119767ce4c8e388ed2390e08ae7fce4fce2221c77f7800f23f96f7dc5931276a69d9ce7a8199f4af9578d494d5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xd}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x1, 0x3, 0x1, 0x20, 0x8}, 0x25, &(0x7f0000000740)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x6, 0xf, 0x3, [0xff3fd8, 0xff00cf, 0x0, 0xff0030, 0x3f0f]}]}, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$hid(r3, &(0x7f00000009c0)={0x24, &(0x7f0000000840)={0x40, 0x22, 0x96, {0x96, 0x23, "c27011ab0f924ebf08f5fd9f295c3f35718c1438bd62d0f5975b8addaf27731fdfbe806bcd53d9e15aab5993779f3828d23b6664d155f661930392e67c5fbae58258ae00cfae457dc952284ef552be5a9f0397d5eac3d55e5ef3ad4ee49a3fffc5b9f9dfd0c74be1614aae6f7a4671aa4cc049dcdfe5e58f86bf0d685513e9cf51a8c7cb09937ff399fa891db31d0d472828f0b9"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x2, "9e5c1b5b"}, @local=@item_012={0x2, 0x2, 0x4, "8d51"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6a8, 0xf, 0x1, {0x22, 0x1f2}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x20, 0x11, 0xfa, "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"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b80)={0x20, 0x1, 0xb3, "97fe93d86d34965904def12112354f5b9a42fc3b0fad022f0f0581646647952fd2683ab7bac2a81a5bac4858c2bd81c8fa321634f743bc873ad37cf116fcd647e0e6d9531781fdb12d40dfe403faa7714314659fab0b193bce81199df00d8877a65fd7eb5d351a783fdd3197bf2d900e752636e36ea205de18ee18ca77d8bffcec3b340a12b0cc41ca6aeb82bf98dcd2af8758294005e0f58ccf6757836c01302cc0b4b6b0a8e90567d3fcc89d81d05674df4c"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x15}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0}, &(0x7f0000000d80)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0}, &(0x7f0000000ec0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001000)={'ip6tnl0\x00', &(0x7f0000000f80)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x3, 0x9, 0x69, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x20, 0xc2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x98c7, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7, 0x10, 0x4, 0x8}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000012c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x148, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x168, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040801) recvfrom(r0, &(0x7f0000001540)=""/223, 0xdf, 0x101, &(0x7f0000001640)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r11 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x2000, 0x0) mknodat$loop(r11, &(0x7f0000001700)='./file0\x00', 0x80, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x769, 0x0, 0x1, 0x9, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001900)={r12, &(0x7f00000017c0)="410bba794bb002c94a331ad0c10191c8ab5625c6f4687b5a46edea1479b6e5d95b140ac3bad76fb853a24dfb4a0775c12cbda5059d5755aafbab0aec7a18d095992ecbb132c05d698ace43bfbcc90be3305c0a684ece270ae1ca9fd029ca7a808c7cb25a041d2936e966748d6dc45902694a15c5053cbc2358b0418bc216f601d1fe3d31327e7e509fe936e805545cabca8af8209876716c682b9e1b9e0b4158934ea88965e341006a1e8476f6d007f0f64651ffb16a50da3e871007cfd857653ecc89", &(0x7f00000018c0)=""/1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xd4, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x24004080) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b80), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r14, 0x200, 0x70bd2d, 0x2, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000080) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001c80)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 1m33.050322587s ago: executing program 4 (id=4000): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @empty, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e34, 0x5, @loopback, 0x7fffffff}, 0x1c) (fail_nth: 2) 1m32.895496909s ago: executing program 4 (id=4001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2009, 0x0, 0x6, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) capset(0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00edffffff010000000006000007410000004c00180000005e62726f6164636173742d6c696e6b0000000000000000000000000000000000000000a38239000000000000000000000000000000000000000000000000000000000000000000009bdd4a84b2d03995e6c53441038487ac5623fe7b0f5fd1ff68ae4b1cbb252ec0bd774b7654c89ce40ccf4afe250025c9a536be20906f565a35e371ecf0f94fbf3b7f95da7d7c9e81f8f9d022ba6cfb"], 0x68}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) r4 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) memfd_create(0x0, 0x3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001300010004000000000000", @ANYRES32=0x0, @ANYBLOB="000000b79b5b0d0008000a00", @ANYRES32=r8, @ANYBLOB="0500110001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) inotify_rm_watch(r4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r10, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m32.513554041s ago: executing program 3 (id=4002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xa, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x63a1, &(0x7f0000000040)={0x0, 0xe46d, 0x8, 0x1, 0x3ab}, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0x1275, 0x20, 0x4, 0x1a4, 0x0, r6}, &(0x7f0000000000), &(0x7f0000000280)) (async) r7 = syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0x1275, 0x20, 0x4, 0x1a4, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r7, 0x2b90, 0xf9d0, 0x23, 0x0, 0x0) r10 = socket(0x21, 0x3, 0xfa) getsockname$inet(r10, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r4], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r4], 0x50) unshare(0x62040200) syz_usb_connect(0x2, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902", @ANYRES8, @ANYRESOCT=r1, @ANYRES8=r9], 0x0) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902", @ANYRES8, @ANYRESOCT=r1, @ANYRES8=r9], 0x0) socket$inet6(0xa, 0x800000000000002, 0x8) (async) socket$inet6(0xa, 0x800000000000002, 0x8) 1m32.371284218s ago: executing program 5 (id=4003): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (fail_nth: 3) 1m31.598309981s ago: executing program 3 (id=4004): getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002500)=0x14) 1m31.509986545s ago: executing program 1 (id=4005): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x48}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26e}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000140)='\x00', 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x4095, 0x7721, 0x16, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write(r7, &(0x7f0000000700)="f5", 0x1) unshare(0x2040600) splice(r7, &(0x7f0000000040), r5, 0x0, 0x6, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e34, 0x5, @loopback, 0x7fffffff}, 0x1c) 1m31.459569138s ago: executing program 5 (id=4006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x5}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r4, 0x0, 0x201, 0xe00, &(0x7f0000002280)="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", 0x4}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "e910f4", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x67, 0x0, 0x0, 0xa}], {0x4e21, 0x4e21, 0x8}}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d02d717af4211c1b78a09759fdf27b29df18979fe4d32e6"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) unshare(0x22020600) r9 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x3, 0x0, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x9, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x7fb, 0x2000009, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1m30.982511071s ago: executing program 1 (id=4007): mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) 1m30.891229872s ago: executing program 0 (id=4008): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41970d", 0x5}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m30.661563459s ago: executing program 1 (id=4009): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x800) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000200)={0x3, 0x8, 0x794, 0xf, 0xd1, 0x58, 0x4, 0xc, 0x0, 0x2, 0x10, "d392a451044772b47d3852ccd06107ed6db1c38fea1af60eb1c4cf387f73065b"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000380)={0x6, 'pimreg0\x00', {}, 0x7}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {0x4}, 0x2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf800, 0x8, 0x22, 0x3, {{0x9, 0x4, 0x0, 0x19, 0x24, 0x66, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x2, [0x8]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) write$9p(r0, &(0x7f0000019080)="9ec85be2d95ec03b6a094090cca92fc059c69715c57cffc3a6d3ceb32e457d016d960acc340fcfca3edda5faad5eb50ee4d1c8692cf02ded088c689b595606ff01006e3aa4b4b6b1", 0x48) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000006c0)='deb\xffgp\xa4\ns\xee\xdbV\x9f\x83H\x1f\xa2X\x98#\xd6@g\xe9\xf4}?\xf7\xf2\xdf\xa69\x1d\xcf\x82\xd4?\xae\x8f\xaf\xed\xc7\xfe*Vr!#5[\x9c\xd6\xf5\xea\xf6[\b\xe3\f\xe1$\x11\xdeoT\xb8\xb9\x0eS\x8f]\x8b\xc6\xe87\x9f\xb7\x9fe\x15\x8axr\x12K8\xe6\xb0\xf6\x89\xd6u\xd7\x82\x12\xb4\x82Y\xeb\xf1L\xe6\xe12y\x04\xb9j\xd1\xb4\xd2\x1504\xe7\x9d\x04I\xd3\xcc\xd1\x8b\x02\x00\x00\x00\xd7\x91\xbd\x99[\x83L\f?\xfc\xe55\xae\xb9\x1b\xee\xc2\x89\x97\x16\x9a\xbeuBw\x1d\\\x9f\xe2l;\xaeVf\x8c\xf3\x91>\xf2a\x9a;\b\xeeZ\bXm\x1c\xb6&\xca\xd4\xf79\xf16`\xca\xf1\xd5|R\x90$\x19LMBN\x95XZsJ\xafI\x05\x98B\xf5\xb2\x95Y\xc3\'', &(0x7f00000003c0)='noblock\x01\xfe\xff\x0fjdity\xb4:\xa8\"\xd9\xcf\x0f\xc4C\xe4\xb7\xa6\xeeQ\xca.\x85?v\x97\xd1\x94\xed`\xea1\xbb%\xfd\xb5\xf2*\xd4\xac\xa2|:\xafY\x06e\x86\xdd\x84\x1c\x14a\x01i\xa7\xb7\x1d\x8c,k\x17\x9a\x89d+@\x99\xff\xb7\xf3\xa1\x8d.Q\xb6n<\x8bO\xe0\xc4\xe7+\xe7\v\xcf\xd4\xd8\xd5]\xdeD\x90^`\x8e\xe2\xd7\x17\xb1\'\xdf\xaa\xd8,\xcd\x1b\x9b\xf61~\x96\x04C$\xd1\xa4\"+\xea\xf9\xab\xcf<\xaf\xe2\xba%\x0e\xab\xd9G\x84\xd7\xab\xbc\x16\xa4L\x9b\xac=\x88\x18wQW\xa9_<\xd8@!=\x88\xc7\xec\xa7\x1c\xf6\x83)\xcd\xc9\v\xb5\x84X\xd9\xfe\xd3\x9e\xa29\xe16I?\x84\n\xf3 \v\x9b\xec\r\x9f\xb2\x04\xcaH>@\xee\x9f\xf9\xb2\r\x8f\xdc7r\xde\xb2\x02\xb17\x05\x8e=\xdf\xcfR\xc8\xf0\x1cp\r\xd6\xeb\xe5\xdc\x12Zv\xee\xce\xd6_\x13\xb8\xdc\x19\xe5\xda\xa9\x01q\xe0\xa1H\x02\xf6\xdfhg&\xa4\x9b\xd3\xe1&\x84\xed\xff0\x174\v\x04\xfe\xd5\xd6a\xd9\x82/HX\x02\xd3\xd9^\x16\x81\xf4\x82:[\xe3\xe9\xa1\x9e8\xd3s\xb1\xf2\xe7\xc0\x99\xd4\x16\x8c\xc9\x04\xd2[-\x1d \xef\xd0:\x0eQ\xb4\x12\xe0\x9f\xbcK\x97\xe2\xf8ck\xcc\xd4WmD\xb7\xb3P\x80n%[\x8aJx(5\xb5\xe1Oq\xba\xdf\xb2', 0x0) r8 = io_uring_setup(0x7ae6, &(0x7f0000000300)={0x0, 0xf975, 0x20000, 0x0, 0x82}) r9 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f00000003c0)={0x0, 0x2404, 0x0, 0x0, 0x315, 0x0, r9}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x2, '\x00', r2, r3, 0x1, 0x1, 0x4}, 0x50) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x72, 0x91, 0x58, 0x8, 0x1163, 0x200, 0xb892, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0x20, 0xe2, 0xc7, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7f, 0x79, 0x2}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x9, 0x80, 0x9b, [@generic={0x7, 0x5, "ab0b78eb81"}]}}]}}]}}]}}, 0x0) 1m30.48979266s ago: executing program 3 (id=4010): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={0x0, 0x1c}}, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f00000005c0)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80041) r2 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r3, 0x3}, 0x8) sendmmsg$alg(r0, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="8d48df83fe7673f64385139bf66dd2b381e23f7567221deb8f2ed9d1569b4d3ef654cc95075640164ee3dd1f98740583b428e4c44870d604b266844a1c2cde93b0486080e5f509985f6ac5f2b7bb420a50", 0x51}, {&(0x7f0000000280)="755b5ac97ff1a47c6c8fe605e888a4841cd48d3be519f8c894abd05fec2f24ab06604d8dca0e78c11869901d4ba41f4273d2e5061ec77d901a44a78082d7f8ed58be613ae6467aa82d230f0efb50c1f31b308b754a1f058267aab3e1cd9074f0035ada84226b86d7412e154fd2bfdf71a00267909e43fbc9de08eb5f1c41d3fb69149d934ed2529dd07a15b2ba0c0f916156a9cfa62dd7ef3c6fc97ae5d4", 0x9e}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000040)="6300005194a299c7b782fa53a385417b", 0x10}, {&(0x7f0000000180)="01146ec70c0a3d4e2d81b36621f356628c11d341dbef7145776296", 0x1b}, {&(0x7f0000001340)="2e4e9220adffd96cca09ed504edae00ae52138b7345268cb6b4489db9a95126222533da6856e5f5d2119ad7422afa26471e8f5a47f1a2e8bf4b15598c0241da3796d4e40269d9a9b0821b877e3d65f3fcbff9c4580214b879edffed54b972139c7a98187077a429006da10439d8237f3a15d5b934a9a1fa53873ffabff68211b63c28bf4316edba23227219590edcb4df41ba1be720ed96a139a9c18c4069892c9fc1258", 0xa4}], 0x6, &(0x7f0000001540)=[@iv={0xe8, 0x117, 0x2, 0xcd, "ec0b0589f36501c9dcd5de0db1e25b5e2456c9f2c2e6fd5baa8d6ecc5e7a4cf70d029c989061c61951ba6b00162fe59706af1171cb08b5791dd7af9b782e96608d6fa2a6145d6b806bff20e285c0e31ca89c2248df2d0e3b81f1fa827fc2e32c3d24b078e6fecc407fc6c86fafa5a8244f96e5ca284a8befef3380d35a68ed7dae0525ea44b21cdde8bd38b9f9ef7bd8848f15921cbd30175be35e54faab6eb810b67fdce2f7d231da6036eab1e8ef3e2f073a0bf6948e3364ec62210fc19cc4db8f361349315e6170d6ea916a"}], 0xe8, 0x68044}], 0x1, 0x0) 1m30.182412878s ago: executing program 3 (id=4011): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1m29.639031257s ago: executing program 0 (id=4012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x300}, &(0x7f0000002000), &(0x7f0000000000)) 1m10.766679337s ago: executing program 33 (id=4009): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x800) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000200)={0x3, 0x8, 0x794, 0xf, 0xd1, 0x58, 0x4, 0xc, 0x0, 0x2, 0x10, "d392a451044772b47d3852ccd06107ed6db1c38fea1af60eb1c4cf387f73065b"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000380)={0x6, 'pimreg0\x00', {}, 0x7}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {0x4}, 0x2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf800, 0x8, 0x22, 0x3, {{0x9, 0x4, 0x0, 0x19, 0x24, 0x66, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x2, [0x8]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) write$9p(r0, &(0x7f0000019080)="9ec85be2d95ec03b6a094090cca92fc059c69715c57cffc3a6d3ceb32e457d016d960acc340fcfca3edda5faad5eb50ee4d1c8692cf02ded088c689b595606ff01006e3aa4b4b6b1", 0x48) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = fsopen(&(0x7f0000000040)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000006c0)='deb\xffgp\xa4\ns\xee\xdbV\x9f\x83H\x1f\xa2X\x98#\xd6@g\xe9\xf4}?\xf7\xf2\xdf\xa69\x1d\xcf\x82\xd4?\xae\x8f\xaf\xed\xc7\xfe*Vr!#5[\x9c\xd6\xf5\xea\xf6[\b\xe3\f\xe1$\x11\xdeoT\xb8\xb9\x0eS\x8f]\x8b\xc6\xe87\x9f\xb7\x9fe\x15\x8axr\x12K8\xe6\xb0\xf6\x89\xd6u\xd7\x82\x12\xb4\x82Y\xeb\xf1L\xe6\xe12y\x04\xb9j\xd1\xb4\xd2\x1504\xe7\x9d\x04I\xd3\xcc\xd1\x8b\x02\x00\x00\x00\xd7\x91\xbd\x99[\x83L\f?\xfc\xe55\xae\xb9\x1b\xee\xc2\x89\x97\x16\x9a\xbeuBw\x1d\\\x9f\xe2l;\xaeVf\x8c\xf3\x91>\xf2a\x9a;\b\xeeZ\bXm\x1c\xb6&\xca\xd4\xf79\xf16`\xca\xf1\xd5|R\x90$\x19LMBN\x95XZsJ\xafI\x05\x98B\xf5\xb2\x95Y\xc3\'', &(0x7f00000003c0)='noblock\x01\xfe\xff\x0fjdity\xb4:\xa8\"\xd9\xcf\x0f\xc4C\xe4\xb7\xa6\xeeQ\xca.\x85?v\x97\xd1\x94\xed`\xea1\xbb%\xfd\xb5\xf2*\xd4\xac\xa2|:\xafY\x06e\x86\xdd\x84\x1c\x14a\x01i\xa7\xb7\x1d\x8c,k\x17\x9a\x89d+@\x99\xff\xb7\xf3\xa1\x8d.Q\xb6n<\x8bO\xe0\xc4\xe7+\xe7\v\xcf\xd4\xd8\xd5]\xdeD\x90^`\x8e\xe2\xd7\x17\xb1\'\xdf\xaa\xd8,\xcd\x1b\x9b\xf61~\x96\x04C$\xd1\xa4\"+\xea\xf9\xab\xcf<\xaf\xe2\xba%\x0e\xab\xd9G\x84\xd7\xab\xbc\x16\xa4L\x9b\xac=\x88\x18wQW\xa9_<\xd8@!=\x88\xc7\xec\xa7\x1c\xf6\x83)\xcd\xc9\v\xb5\x84X\xd9\xfe\xd3\x9e\xa29\xe16I?\x84\n\xf3 \v\x9b\xec\r\x9f\xb2\x04\xcaH>@\xee\x9f\xf9\xb2\r\x8f\xdc7r\xde\xb2\x02\xb17\x05\x8e=\xdf\xcfR\xc8\xf0\x1cp\r\xd6\xeb\xe5\xdc\x12Zv\xee\xce\xd6_\x13\xb8\xdc\x19\xe5\xda\xa9\x01q\xe0\xa1H\x02\xf6\xdfhg&\xa4\x9b\xd3\xe1&\x84\xed\xff0\x174\v\x04\xfe\xd5\xd6a\xd9\x82/HX\x02\xd3\xd9^\x16\x81\xf4\x82:[\xe3\xe9\xa1\x9e8\xd3s\xb1\xf2\xe7\xc0\x99\xd4\x16\x8c\xc9\x04\xd2[-\x1d \xef\xd0:\x0eQ\xb4\x12\xe0\x9f\xbcK\x97\xe2\xf8ck\xcc\xd4WmD\xb7\xb3P\x80n%[\x8aJx(5\xb5\xe1Oq\xba\xdf\xb2', 0x0) r8 = io_uring_setup(0x7ae6, &(0x7f0000000300)={0x0, 0xf975, 0x20000, 0x0, 0x82}) r9 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f00000003c0)={0x0, 0x2404, 0x0, 0x0, 0x315, 0x0, r9}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x2, '\x00', r2, r3, 0x1, 0x1, 0x4}, 0x50) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x72, 0x91, 0x58, 0x8, 0x1163, 0x200, 0xb892, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0x20, 0xe2, 0xc7, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7f, 0x79, 0x2}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x9, 0x80, 0x9b, [@generic={0x7, 0x5, "ab0b78eb81"}]}}]}}]}}]}}, 0x0) 0s ago: executing program 34 (id=4006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x5}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r4, 0x0, 0x201, 0xe00, &(0x7f0000002280)="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", 0x4}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "e910f4", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x67, 0x0, 0x0, 0xa}], {0x4e21, 0x4e21, 0x8}}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d02d717af4211c1b78a09759fdf27b29df18979fe4d32e6"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) unshare(0x22020600) r9 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x7, 0x3, 0x0, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x9, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x7fb, 0x2000009, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) kernel console output (not intermixed with test programs): b 1-1: new high-speed USB device number 77 using dummy_hcd [ 975.536686][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 975.552008][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.572527][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.621386][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.768477][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.793287][ T5904] usb 1-1: Product: 㬼멲涿⺄ባ맘ẝ絒푖秼률ᅃ㰉㈣濵⑀礝쌄媴䟸悴䩢馗荘Ἥ췀籚↴癹⊻鰃勛鄽꣝穂翷蘏켟掲齍꧃끘꣸ꈰƒ庚滁ꑇ겒ᤪ例痖㚓蛍筤 [ 975.812517][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.828923][ T5904] usb 1-1: Manufacturer: 嘑齉킑㉏᫉᜽泮魛遘⼛웛䐰⚆쪿窌౰⦪䐿ʣ將낗ꆧ븵웄沑蠈⍚畬✮̔紏龜価蝦ǂ嘱潘㳢錻糽쮧謕엙腥쑔硼烄噩鎱淢␧螛괓껌ᵟ쑗櫨ᝳ夳䌁苓硊圜♩㡄ᙢ㹿ᓣ冱ᐯ᳒凢⾬建쿦夞缄싞腩᭧ඁテ뎪䇒㐴릂﹡騫刾蔸ೝ홑賔ᤫ묖긘枔ꂞ涌쌫 [ 975.873998][ T5904] usb 1-1: SerialNumber: 퍗瀳炾颉鰬⩴䎈⸟赁꺠鮄▹쟙䯬㌪襻ʔ䞲똧鼇퀀댇軠⇕㐙꾏꠱鰴蚤辑㻶篰浻쏌鍐Ζ븬龫㛄Ｑኻ醇࠙騨ᴪ欽ꋘ鸸寙뇀旻콹琪㣻☦ᣬ䉳쬑ฐ뒕ὪƼ䏵ꜻꊵɷ髋鞵㜿䨴茸☾篫尒朣釓偞趜搨⢈냍җ둵툉틕䷞脂꧊し஡ฬ䌋掇㴅ẇ孢ꊛ䯉㳄⾿㺕阶㥅⵷ [ 975.909345][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.685410][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.694646][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.723599][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.749134][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.767481][ T5904] usb 1-1: 0:2 : does not exist [ 976.786964][ T5904] usb 1-1: USB disconnect, device number 77 [ 977.969654][T20559] loop9: detected capacity change from 0 to 7 [ 977.977034][T20559] Dev loop9: unable to read RDB block 7 [ 977.982625][T20559] loop9: unable to read partition table [ 978.005570][T20559] loop9: partition table beyond EOD, truncated [ 978.024771][T20559] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 979.093571][ T30] audit: type=1326 audit(1761448823.830:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20578 comm="syz.1.3525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccfc58efc9 code=0x0 [ 979.115390][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.312007][T20592] veth0: entered promiscuous mode [ 980.320351][T20591] veth0: left promiscuous mode [ 980.498380][T20601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3530'. [ 981.013004][ T5958] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 981.040502][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 981.261929][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 981.271296][ T5958] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 981.281451][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.290865][ T5958] usb 2-1: Product: syz [ 981.295141][ T5958] usb 2-1: Manufacturer: syz [ 981.299961][ T5958] usb 2-1: SerialNumber: syz [ 981.308426][ T5958] usb 2-1: config 0 descriptor?? [ 982.247872][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 982.324248][T20623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 983.622301][ T5958] usb_8dev 2-1:0.0 can0: sending command message failed [ 983.638221][ T5958] usb_8dev 2-1:0.0 can0: can't get firmware version [ 984.027169][ T5958] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 984.040361][ T5958] usb 2-1: USB disconnect, device number 76 [ 984.575620][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 984.650146][T20676] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 984.659966][T20676] team0: Port device batadv2 added [ 984.798349][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 984.837032][ T5958] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 985.049765][ T5958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.312192][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 985.364589][ T5958] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 985.364622][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 985.364643][ T5958] usb 2-1: SerialNumber: syz [ 985.608862][T20675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.609121][T20675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.610067][T20675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.610310][T20675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.150368][ T5958] usb 2-1: 0:2 : does not exist [ 986.246725][ T5958] usb 2-1: USB disconnect, device number 77 [ 986.319438][T15826] udevd[15826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.096738][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 987.256850][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 987.328258][ T24] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 987.360914][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.380000][ T24] usb 6-1: Product: syz [ 987.384185][ T24] usb 6-1: Manufacturer: syz [ 987.397919][ T24] usb 6-1: SerialNumber: syz [ 987.416678][T12314] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 987.458718][ T24] usb 6-1: config 0 descriptor?? [ 987.679456][T12314] usb 1-1: Using ep0 maxpacket: 16 [ 987.699371][T12314] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 987.725982][T12314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.746357][T12314] usb 1-1: Product: syz [ 987.757739][T12314] usb 1-1: Manufacturer: syz [ 987.762393][T12314] usb 1-1: SerialNumber: syz [ 987.807463][T12314] usb 1-1: config 0 descriptor?? [ 988.209901][T20725] loop7: detected capacity change from 0 to 7 [ 988.235937][T20725] Dev loop7: unable to read RDB block 7 [ 988.264007][T20725] loop7: unable to read partition table [ 988.294069][T20725] loop7: partition table beyond EOD, truncated [ 988.323627][T20725] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 989.608123][ T24] usb_8dev 6-1:0.0 can0: sending command message failed [ 989.615401][ T24] usb_8dev 6-1:0.0 can0: can't get firmware version [ 989.688176][ T24] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 989.706086][ T24] usb 6-1: USB disconnect, device number 64 [ 990.174857][T12314] usb_8dev 1-1:0.0 can0: sending command message failed [ 990.201167][T12314] usb_8dev 1-1:0.0 can0: can't get firmware version [ 990.295772][T20740] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3565'. [ 990.467511][T12314] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 990.647432][T12314] usb 1-1: USB disconnect, device number 78 [ 991.740148][T20765] loop7: detected capacity change from 0 to 7 [ 991.756387][T20765] Dev loop7: unable to read RDB block 7 [ 991.775944][T20765] loop7: unable to read partition table [ 991.864411][T20765] loop7: partition table beyond EOD, truncated [ 991.896016][T20765] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 991.997682][ T918] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 992.327113][ T918] usb 4-1: Invalid ep0 maxpacket: 16 [ 992.506947][ T918] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 992.651354][T20780] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3575'. [ 992.706732][ T918] usb 4-1: Invalid ep0 maxpacket: 16 [ 992.718359][ T918] usb usb4-port1: attempt power cycle [ 992.963420][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.972970][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.006713][T18076] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 993.075918][ T918] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 993.143279][ T918] usb 4-1: Invalid ep0 maxpacket: 16 [ 993.176610][T18076] usb 6-1: Using ep0 maxpacket: 16 [ 993.206337][T18076] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 993.234379][T18076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.246581][T18076] usb 6-1: Product: syz [ 993.250789][T18076] usb 6-1: Manufacturer: syz [ 993.264705][T18076] usb 6-1: SerialNumber: syz [ 993.286843][ T918] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 993.294810][T18076] usb 6-1: config 0 descriptor?? [ 993.319669][ T918] usb 4-1: Invalid ep0 maxpacket: 16 [ 993.325374][ T918] usb usb4-port1: unable to enumerate USB device [ 993.926689][T12314] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 994.079011][T12314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.161505][T12314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.199798][T12314] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 994.228461][T12314] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 994.246053][T20796] program syz.0.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.258073][T12314] usb 2-1: Manufacturer: syz [ 994.280936][T12314] usb 2-1: config 0 descriptor?? [ 995.245901][T12314] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input76 [ 995.353372][T12314] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input77 [ 995.363669][T20786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.387895][T20786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.417889][T12314] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input78 [ 995.445800][T18076] usb_8dev 6-1:0.0 can0: sending command message failed [ 995.465791][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3589'. [ 995.481634][T18076] usb_8dev 6-1:0.0 can0: can't get firmware version [ 995.491729][T12314] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input79 [ 995.547708][T18076] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 995.572073][T18076] usb 6-1: USB disconnect, device number 65 [ 995.616861][T12314] uclogic 0003:256C:006D.0028: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 996.095296][T20830] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3593'. [ 996.447042][T18072] usb 2-1: reset high-speed USB device number 78 using dummy_hcd [ 997.485683][T18076] usb 2-1: USB disconnect, device number 78 [ 997.536674][T20854] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3601'. [ 997.565484][T20854] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 998.181961][T20876] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1000.071951][T20902] loop9: detected capacity change from 0 to 7 [ 1000.090329][T15826] Dev loop9: unable to read RDB block 7 [ 1000.095919][T15826] loop9: unable to read partition table [ 1000.102554][T15826] loop9: partition table beyond EOD, truncated [ 1000.112615][T20902] Dev loop9: unable to read RDB block 7 [ 1000.118586][T20902] loop9: unable to read partition table [ 1000.128555][T20902] loop9: partition table beyond EOD, truncated [ 1000.135112][T20902] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1001.240790][T20934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1002.850199][T20958] FAULT_INJECTION: forcing a failure. [ 1002.850199][T20958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.921983][T20958] CPU: 1 UID: 0 PID: 20958 Comm: syz.1.3634 Not tainted syzkaller #0 PREEMPT(full) [ 1002.922012][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1002.922029][T20958] Call Trace: [ 1002.922037][T20958] [ 1002.922047][T20958] dump_stack_lvl+0x189/0x250 [ 1002.922080][T20958] ? __pfx____ratelimit+0x10/0x10 [ 1002.922106][T20958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1002.922134][T20958] ? __pfx__printk+0x10/0x10 [ 1002.922163][T20958] ? __might_fault+0xb0/0x130 [ 1002.922201][T20958] should_fail_ex+0x414/0x560 [ 1002.922236][T20958] _copy_from_user+0x2d/0xb0 [ 1002.922262][T20958] __sys_sendto+0x25c/0x520 [ 1002.922293][T20958] ? __pfx___sys_sendto+0x10/0x10 [ 1002.922317][T20958] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1002.922351][T20958] ? __fget_files+0x3a0/0x420 [ 1002.922376][T20958] ? ksys_write+0x22a/0x250 [ 1002.922402][T20958] ? __pfx_ksys_write+0x10/0x10 [ 1002.922428][T20958] __x64_sys_sendto+0xde/0x100 [ 1002.922457][T20958] do_syscall_64+0xfa/0xfa0 [ 1002.922479][T20958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.922496][T20958] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1002.922514][T20958] ? clear_bhb_loop+0x60/0xb0 [ 1002.922534][T20958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.922551][T20958] RIP: 0033:0x7fccfc58efc9 [ 1002.922566][T20958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.922583][T20958] RSP: 002b:00007fccfd3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1002.922601][T20958] RAX: ffffffffffffffda RBX: 00007fccfc7e6180 RCX: 00007fccfc58efc9 [ 1002.922615][T20958] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 1002.922626][T20958] RBP: 00007fccfd3d4090 R08: 0000200000000080 R09: 000000000000001c [ 1002.922639][T20958] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 1002.922650][T20958] R13: 00007fccfc7e6218 R14: 00007fccfc7e6180 R15: 00007fccfc90fa28 [ 1002.922676][T20958] [ 1003.537614][T20962] netlink: 'syz.5.3636': attribute type 1 has an invalid length. [ 1003.582500][T20962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.842956][T20975] loop7: detected capacity change from 0 to 7 [ 1003.858188][T15826] Dev loop7: unable to read RDB block 7 [ 1003.898655][T15826] loop7: unable to read partition table [ 1003.904559][T15826] loop7: partition table beyond EOD, truncated [ 1003.951356][T20975] Dev loop7: unable to read RDB block 7 [ 1003.966223][T20975] loop7: unable to read partition table [ 1003.984686][T20975] loop7: partition table beyond EOD, truncated [ 1004.003247][T20975] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1005.238286][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1005.307933][T20998] : entered promiscuous mode [ 1005.556658][T18072] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1005.706879][T18072] usb 2-1: device descriptor read/64, error -71 [ 1006.006731][T18072] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1006.098145][T18076] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1006.168103][T18072] usb 2-1: device descriptor read/64, error -71 [ 1006.261440][T18076] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 1006.277944][T18076] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.293970][T18072] usb usb2-port1: attempt power cycle [ 1006.310395][T18076] usb 1-1: config 0 has no interface number 0 [ 1006.320015][T18076] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1006.330496][T18076] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1006.340907][T18076] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1006.350733][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1006.363278][T18076] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1006.383655][T18076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.393313][T18076] usb 1-1: Product: syz [ 1006.402387][T18076] usb 1-1: Manufacturer: syz [ 1006.407619][T18076] usb 1-1: SerialNumber: syz [ 1006.415170][T18076] usb 1-1: config 0 descriptor?? [ 1006.423371][T21007] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1006.435072][T18076] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 1006.442063][T18076] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 1006.547545][T21013] loop7: detected capacity change from 0 to 7 [ 1006.557886][T15826] Dev loop7: unable to read RDB block 7 [ 1006.563472][T15826] loop7: unable to read partition table [ 1006.578572][T15826] loop7: partition table beyond EOD, truncated [ 1006.585616][T21013] Dev loop7: unable to read RDB block 7 [ 1006.591818][T21013] loop7: unable to read partition table [ 1006.602186][T21013] loop7: partition table beyond EOD, truncated [ 1006.617851][T21013] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1006.654253][ T5958] usb 1-1: USB disconnect, device number 79 [ 1006.660340][T18072] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1006.687673][T18072] usb 2-1: device descriptor read/8, error -71 [ 1006.776904][T18076] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1006.932419][T18076] usb 6-1: Using ep0 maxpacket: 8 [ 1006.938137][T18072] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1006.958531][T18076] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1006.967835][T18076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.976302][T18076] usb 6-1: Product: syz [ 1006.981824][T18072] usb 2-1: device descriptor read/8, error -71 [ 1006.990931][T18076] usb 6-1: Manufacturer: syz [ 1006.995601][T18076] usb 6-1: SerialNumber: syz [ 1007.003903][T18076] usb 6-1: config 0 descriptor?? [ 1007.013895][T18076] gspca_main: se401-2.14.0 probing 047d:5003 [ 1007.107153][T18072] usb usb2-port1: unable to enumerate USB device [ 1007.434000][T18076] gspca_se401: Wrong descriptor type [ 1007.647035][T18076] usb 6-1: USB disconnect, device number 66 [ 1009.608937][T21060] ip6erspan0: entered allmulticast mode [ 1009.766681][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1009.926754][ T24] usb 6-1: device descriptor read/64, error -71 [ 1010.036750][T18076] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1010.186807][ T24] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1010.208018][T18076] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.246710][T18076] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 1010.316705][ T24] usb 6-1: device descriptor read/64, error -71 [ 1010.322582][T18076] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1010.403357][T18076] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.432919][T18076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.435637][ T24] usb usb6-port1: attempt power cycle [ 1010.446709][T18076] usb 1-1: Product: syz [ 1010.450893][T18076] usb 1-1: Manufacturer: syz [ 1010.470780][T18076] usb 1-1: SerialNumber: syz [ 1010.824211][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1010.857610][ T24] usb 6-1: device descriptor read/8, error -71 [ 1010.865827][T21081] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1010.879264][T21080] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1011.096672][ T24] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1011.127328][ T24] usb 6-1: device descriptor read/8, error -71 [ 1011.247086][ T24] usb usb6-port1: unable to enumerate USB device [ 1011.515443][T18076] cdc_ncm 1-1:1.0: bind() failure [ 1011.553348][T18076] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1011.629666][T18076] usb 1-1: USB disconnect, device number 80 [ 1012.452967][T21095] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1012.737152][ T5958] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1013.254772][T21115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3687'. [ 1013.420325][T21125] netlink: 12568 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1013.442664][T21122] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1013.449235][T21122] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1013.467561][T21125] openvswitch: netlink: Flow key attr not present in new flow. [ 1013.485242][T21122] vhci_hcd vhci_hcd.0: Device attached [ 1013.499935][T21123] vhci_hcd: connection closed [ 1013.501258][T17167] vhci_hcd: stop threads [ 1013.520532][T17167] vhci_hcd: release socket [ 1013.537053][T17167] vhci_hcd: disconnect device [ 1013.576346][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1013.603048][T21128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1013.851672][T21134] binder: 21133:21134 ioctl c0306201 2000000003c0 returned -14 [ 1013.865254][T21134] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1013.996686][ T918] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1014.174940][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1014.188428][ T918] usb 4-1: Using ep0 maxpacket: 16 [ 1014.213858][ T918] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1014.229568][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.256127][ T918] usb 4-1: Product: syz [ 1014.272111][ T918] usb 4-1: Manufacturer: syz [ 1014.351552][ T918] usb 4-1: SerialNumber: syz [ 1014.509435][ T918] usb 4-1: config 0 descriptor?? [ 1014.568928][ T918] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1014.739176][T21132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.789765][T21132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.803626][ T918] usb 4-1: USB disconnect, device number 61 [ 1016.046063][T21159] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1017.106685][ T5904] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1017.268150][ T5904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1017.280546][ T5904] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1017.365141][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1017.396276][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1017.427003][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1017.467289][ T5904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1017.493905][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1017.541976][ T5904] usb 1-1: Product: syz [ 1017.550906][ T5904] usb 1-1: Manufacturer: syz [ 1017.594883][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 1017.606766][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 1017.629290][ T5904] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1017.645627][ T5904] cdc_wdm 1-1:1.0: Unknown control protocol [ 1019.573817][T21211] loop9: detected capacity change from 0 to 7 [ 1019.587568][T15826] Dev loop9: unable to read RDB block 7 [ 1019.593210][T15826] loop9: unable to read partition table [ 1019.732050][T15826] loop9: partition table beyond EOD, truncated [ 1019.751588][T21211] Dev loop9: unable to read RDB block 7 [ 1019.759955][T21211] loop9: unable to read partition table [ 1019.820793][T21211] loop9: partition table beyond EOD, truncated [ 1019.863242][T21211] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1020.157095][ T918] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1020.398845][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 1020.690575][ T918] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1020.746713][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.782287][ T5928] usb 1-1: USB disconnect, device number 81 [ 1020.851068][ T918] usb 2-1: Product: syz [ 1020.855276][ T918] usb 2-1: Manufacturer: syz [ 1020.894402][ T918] usb 2-1: SerialNumber: syz [ 1020.909571][ T918] usb 2-1: config 0 descriptor?? [ 1021.032416][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1022.509220][ T918] usb_8dev 2-1:0.0 can0: sending command message failed [ 1022.522676][ T918] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1022.608901][ T918] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1022.679591][ T918] usb 2-1: USB disconnect, device number 84 [ 1024.354879][T21283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1024.711460][ T918] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1024.895199][ T918] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1024.895238][ T918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.907934][ T918] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1024.907966][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1024.907988][ T918] usb 2-1: SerialNumber: syz [ 1027.109734][T18076] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1027.259035][T18076] usb 1-1: Using ep0 maxpacket: 8 [ 1027.260627][T18076] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.260652][T18076] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.260665][T18076] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1027.260685][T18076] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1027.260698][T18076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.262534][T18076] usb 1-1: config 0 descriptor?? [ 1027.479235][ T918] usb 2-1: 0:2 : does not exist [ 1027.488865][ T918] usb 2-1: unit 5: unexpected type 0x0e [ 1027.542258][ T918] usb 2-1: USB disconnect, device number 85 [ 1027.640229][T15826] udevd[15826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.688539][T18076] smartjoyplus 0003:0B43:0003.0029: ignoring exceeding usage max [ 1027.719314][T18076] smartjoyplus 0003:0B43:0003.0029: unbalanced collection at end of report description [ 1027.758457][T18076] smartjoyplus 0003:0B43:0003.0029: parse failed [ 1027.765039][T18076] smartjoyplus 0003:0B43:0003.0029: probe with driver smartjoyplus failed with error -22 [ 1027.849368][T18076] usb 1-1: USB disconnect, device number 82 [ 1027.879358][T21320] loop9: detected capacity change from 0 to 7 [ 1027.916757][T21320] Dev loop9: unable to read RDB block 7 [ 1027.965193][T21320] loop9: unable to read partition table [ 1027.982219][T21320] loop9: partition table beyond EOD, truncated [ 1028.008350][T21320] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1028.173618][T21334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1028.576662][ T5904] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1028.800794][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.831409][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.875719][ T5904] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.892694][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.901338][ T5904] usb 6-1: Product: syz [ 1028.905546][ T5904] usb 6-1: Manufacturer: syz [ 1028.910282][ T5904] usb 6-1: SerialNumber: syz [ 1029.376716][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3757'. [ 1030.347812][ T5928] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1030.536664][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 1030.545706][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.562944][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.601057][ T5928] usb 1-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1030.623683][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.655924][ T5928] usb 1-1: config 0 descriptor?? [ 1030.928013][ T5928] usbhid 1-1:0.0: can't add hid device: -71 [ 1031.018146][ T5928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1031.032501][ T5928] usb 1-1: USB disconnect, device number 83 [ 1031.636917][ T5904] usb 6-1: cannot find UAC_HEADER [ 1031.758659][ T5904] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1031.902409][ T5904] usb 6-1: USB disconnect, device number 71 [ 1031.945618][T15826] udevd[15826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.909971][ T5958] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1033.086656][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 1033.093910][ T5958] usb 4-1: config 5 has an invalid interface number: 35 but max is 1 [ 1033.102527][ T5958] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 1033.126685][ T5958] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 1033.144993][ T5958] usb 4-1: config 5 has no interface number 0 [ 1033.160852][ T5958] usb 4-1: config 5 has no interface number 1 [ 1033.185256][ T5958] usb 4-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.271603][ T5958] usb 4-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 1033.316813][ T5958] usb 4-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1033.387290][ T5958] usb 4-1: config 5 interface 35 has no altsetting 0 [ 1033.396614][ T5958] usb 4-1: config 5 interface 4 has no altsetting 0 [ 1033.412065][ T5958] usb 4-1: config 5 interface 4 has no altsetting 1 [ 1033.450175][ T5958] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 1033.467548][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.507827][ T5958] usb 4-1: Product: syz [ 1033.512037][ T5958] usb 4-1: Manufacturer: syz [ 1033.581511][ T5958] usb 4-1: SerialNumber: syz [ 1033.855467][ T5958] ttusbir 4-1:5.35: cannot find expected altsetting [ 1033.898935][ T5958] ttusbir 4-1:5.4: cannot find expected altsetting [ 1034.122754][ T5958] usb 4-1: USB disconnect, device number 62 [ 1034.477435][T21426] fuse: Unknown parameter '' [ 1034.617800][T21430] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1035.084039][T21366] Set syz1 is full, maxelem 65536 reached [ 1035.368825][T21450] loop9: detected capacity change from 0 to 7 [ 1035.382931][T15826] Dev loop9: unable to read RDB block 7 [ 1035.390384][T15826] loop9: unable to read partition table [ 1035.396389][T15826] loop9: partition table beyond EOD, truncated [ 1035.408485][T21450] Dev loop9: unable to read RDB block 7 [ 1035.419701][T21450] loop9: unable to read partition table [ 1035.434992][T21450] loop9: partition table beyond EOD, truncated [ 1035.449357][T21450] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1035.768818][T21463] loop9: detected capacity change from 0 to 7 [ 1035.776949][T15826] Dev loop9: unable to read RDB block 7 [ 1035.784028][T15826] loop9: unable to read partition table [ 1035.790367][T15826] loop9: partition table beyond EOD, truncated [ 1035.809897][T21463] Dev loop9: unable to read RDB block 7 [ 1035.837139][T21463] loop9: unable to read partition table [ 1035.855807][T21463] loop9: partition table beyond EOD, truncated [ 1035.874409][T21463] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1035.938360][ T30] audit: type=1326 audit(1761448880.690:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21468 comm="syz.0.3797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f228478efc9 code=0x0 [ 1036.207433][T21481] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3802'. [ 1036.313357][T21486] FAULT_INJECTION: forcing a failure. [ 1036.313357][T21486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.362008][T21486] CPU: 1 UID: 0 PID: 21486 Comm: syz.1.3804 Not tainted syzkaller #0 PREEMPT(full) [ 1036.362034][T21486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1036.362051][T21486] Call Trace: [ 1036.362060][T21486] [ 1036.362068][T21486] dump_stack_lvl+0x189/0x250 [ 1036.362100][T21486] ? __pfx____ratelimit+0x10/0x10 [ 1036.362124][T21486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.362150][T21486] ? __pfx__printk+0x10/0x10 [ 1036.362182][T21486] should_fail_ex+0x414/0x560 [ 1036.362216][T21486] _copy_to_user+0x31/0xb0 [ 1036.362241][T21486] simple_read_from_buffer+0xe1/0x170 [ 1036.362272][T21486] proc_fail_nth_read+0x1b3/0x220 [ 1036.362347][T21486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.362374][T21486] ? rw_verify_area+0x2a6/0x4d0 [ 1036.362398][T21486] ? __lock_acquire+0xab9/0xd20 [ 1036.362416][T21486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.362442][T21486] vfs_read+0x200/0xa30 [ 1036.362468][T21486] ? fdget_pos+0x247/0x320 [ 1036.362490][T21486] ? __pfx___mutex_lock+0x10/0x10 [ 1036.362514][T21486] ? __pfx_vfs_read+0x10/0x10 [ 1036.362539][T21486] ? __fget_files+0x2a/0x420 [ 1036.362560][T21486] ? __fget_files+0x3a0/0x420 [ 1036.362576][T21486] ? __fget_files+0x2a/0x420 [ 1036.362602][T21486] ksys_read+0x145/0x250 [ 1036.362632][T21486] ? __pfx_ksys_read+0x10/0x10 [ 1036.362661][T21486] ? do_syscall_64+0xbe/0xfa0 [ 1036.362689][T21486] do_syscall_64+0xfa/0xfa0 [ 1036.362711][T21486] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.362733][T21486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.362753][T21486] ? clear_bhb_loop+0x60/0xb0 [ 1036.362776][T21486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.362796][T21486] RIP: 0033:0x7fccfc58d9dc [ 1036.362813][T21486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1036.362830][T21486] RSP: 002b:00007fccfd416030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1036.362850][T21486] RAX: ffffffffffffffda RBX: 00007fccfc7e5fa0 RCX: 00007fccfc58d9dc [ 1036.362864][T21486] RDX: 000000000000000f RSI: 00007fccfd4160a0 RDI: 0000000000000004 [ 1036.362876][T21486] RBP: 00007fccfd416090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.362888][T21486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.362899][T21486] R13: 00007fccfc7e6038 R14: 00007fccfc7e5fa0 R15: 00007fccfc90fa28 [ 1036.362930][T21486] [ 1036.598802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.898714][T21496] random: crng reseeded on system resumption [ 1037.733168][T21511] loop9: detected capacity change from 0 to 7 [ 1037.745852][T21511] Dev loop9: unable to read RDB block 7 [ 1037.752166][T21511] loop9: unable to read partition table [ 1037.758978][T21511] loop9: partition table beyond EOD, truncated [ 1037.774882][T21511] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1038.361669][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1038.426777][ T5928] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1038.579839][ T5928] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 1038.588522][ T5928] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.599725][ T5928] usb 1-1: config 171 has no interface number 0 [ 1038.606496][ T5928] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1038.617049][ T5928] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 1038.628824][ T5928] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1038.651811][ T5928] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1038.663124][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.672168][ T5928] usb 1-1: Product: syz [ 1038.676823][ T5928] usb 1-1: Manufacturer: syz [ 1038.681544][ T5928] usb 1-1: SerialNumber: syz [ 1038.696470][T21520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1038.943302][ T5928] ath6kl: Failed to submit usb control message: -71 [ 1038.957183][ T5928] ath6kl: unable to send the bmi data to the device: -71 [ 1038.981939][ T5928] ath6kl: Unable to send get target info: -71 [ 1039.014463][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 1039.054764][ T5928] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1039.096855][ T5928] usb 1-1: USB disconnect, device number 84 [ 1039.806736][ T5958] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1039.836823][ T918] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1039.849013][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1039.936656][ T5928] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1040.008453][ T5958] usb 1-1: device descriptor read/64, error -71 [ 1040.090827][ T918] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1040.100054][ T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.108611][ T918] usb 6-1: Product: syz [ 1040.112870][ T918] usb 6-1: Manufacturer: syz [ 1040.118598][ T918] usb 6-1: SerialNumber: syz [ 1040.125596][ T918] usb 6-1: config 0 descriptor?? [ 1040.137282][ T918] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1040.186766][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1040.225855][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.247099][ T5958] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1040.257719][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.279888][ T5928] usb 4-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1040.303611][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.356496][ T5928] usb 4-1: config 0 descriptor?? [ 1040.376670][ T5958] usb 1-1: device descriptor read/64, error -71 [ 1040.536977][ T5958] usb usb1-port1: attempt power cycle [ 1040.628829][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 1040.634887][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1040.660219][ T5928] usb 4-1: USB disconnect, device number 63 [ 1040.916668][ T5958] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1040.948699][ T5958] usb 1-1: device descriptor read/8, error -71 [ 1041.211259][ T5958] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1041.247386][ T5958] usb 1-1: device descriptor read/8, error -71 [ 1041.357017][ T5958] usb usb1-port1: unable to enumerate USB device [ 1041.859382][T21613] loop9: detected capacity change from 0 to 7 [ 1041.867790][T20825] Dev loop9: unable to read RDB block 7 [ 1041.873614][T20825] loop9: unable to read partition table [ 1041.882956][T20825] loop9: partition table beyond EOD, truncated [ 1041.913041][T21613] Dev loop9: unable to read RDB block 7 [ 1041.919120][T21613] loop9: unable to read partition table [ 1041.931450][T21613] loop9: partition table beyond EOD, truncated [ 1041.938237][T21613] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1042.255730][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.271801][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.331063][ T5928] usb 6-1: USB disconnect, device number 72 [ 1043.226645][ T5958] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1043.246993][ T918] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1043.490238][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 1043.498282][ T918] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 1043.515540][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.538705][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.556639][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.576686][ T918] usb 2-1: config 0 has no interface number 0 [ 1043.582992][ T918] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1043.594861][ T5958] usb 1-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1043.615749][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.624007][ T918] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1043.686508][ T918] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1043.697018][ T5958] usb 1-1: config 0 descriptor?? [ 1043.702530][T21650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1043.726674][ T918] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1043.779680][ T918] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1043.810601][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.834177][ T918] usb 2-1: Product: syz [ 1043.849215][ T918] usb 2-1: Manufacturer: syz [ 1043.853915][ T918] usb 2-1: SerialNumber: syz [ 1043.889919][ T918] usb 2-1: config 0 descriptor?? [ 1043.942687][ T918] symbolserial 2-1:0.175: symbol converter detected [ 1043.954340][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 1043.971621][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1043.994813][ T918] usb 2-1: symbol converter now attached to ttyUSB0 [ 1044.032640][ T5958] usb 1-1: USB disconnect, device number 89 [ 1044.560654][T21668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3854'. [ 1046.213467][T18072] usb 2-1: USB disconnect, device number 86 [ 1046.259517][T18072] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1046.381118][T18072] symbolserial 2-1:0.175: device disconnected [ 1047.816658][ T5928] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1047.912679][T21722] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1048.028528][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 1048.106173][T21729] Set syz1 is full, maxelem 65536 reached [ 1048.116769][ T5928] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1048.165527][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.308967][ T5928] usb 2-1: Product: syz [ 1048.315743][ T5928] usb 2-1: Manufacturer: syz [ 1048.320571][ T5928] usb 2-1: SerialNumber: syz [ 1048.437401][ T5928] usb 2-1: config 0 descriptor?? [ 1050.365121][ T5928] usb_8dev 2-1:0.0 can0: sending command message failed [ 1050.385502][ T5928] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1050.498245][ T5928] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1050.611467][ T5928] usb 2-1: USB disconnect, device number 87 [ 1051.226670][ T5928] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1051.401609][ T5928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1051.421029][ T5928] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1051.455532][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1051.470762][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1051.483869][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1051.500006][ T5928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1051.510618][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1051.518749][ T5928] usb 2-1: Product: syz [ 1051.526217][ T5928] usb 2-1: Manufacturer: syz [ 1051.536079][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 1051.552274][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 1051.560486][ T5928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1051.567144][ T5928] cdc_wdm 2-1:1.0: Unknown control protocol [ 1053.832155][ T24] usb 2-1: USB disconnect, device number 88 [ 1054.405203][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.412719][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.726655][ T918] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1054.876924][ T918] usb 6-1: Using ep0 maxpacket: 16 [ 1054.902886][ T918] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1054.912654][ T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.921941][ T918] usb 6-1: Product: syz [ 1054.926252][ T918] usb 6-1: Manufacturer: syz [ 1054.936841][ T918] usb 6-1: SerialNumber: syz [ 1054.943298][ T918] usb 6-1: config 0 descriptor?? [ 1055.046690][T18076] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1055.175877][T21827] FAULT_INJECTION: forcing a failure. [ 1055.175877][T21827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.191670][T21827] CPU: 1 UID: 0 PID: 21827 Comm: syz.4.3899 Not tainted syzkaller #0 PREEMPT(full) [ 1055.191695][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1055.191708][T21827] Call Trace: [ 1055.191716][T21827] [ 1055.191724][T21827] dump_stack_lvl+0x189/0x250 [ 1055.191765][T21827] ? __pfx____ratelimit+0x10/0x10 [ 1055.191786][T21827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.191813][T21827] ? __pfx__printk+0x10/0x10 [ 1055.191844][T21827] should_fail_ex+0x414/0x560 [ 1055.191877][T21827] _copy_to_user+0x31/0xb0 [ 1055.191904][T21827] simple_read_from_buffer+0xe1/0x170 [ 1055.191936][T21827] proc_fail_nth_read+0x1b3/0x220 [ 1055.191964][T21827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.191990][T21827] ? rw_verify_area+0x2a6/0x4d0 [ 1055.192017][T21827] ? __lock_acquire+0xab9/0xd20 [ 1055.192034][T21827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.192060][T21827] vfs_read+0x200/0xa30 [ 1055.192085][T21827] ? fdget_pos+0x247/0x320 [ 1055.192108][T21827] ? __pfx___mutex_lock+0x10/0x10 [ 1055.192135][T21827] ? __pfx_vfs_read+0x10/0x10 [ 1055.192162][T21827] ? __fget_files+0x2a/0x420 [ 1055.192185][T21827] ? __fget_files+0x3a0/0x420 [ 1055.192203][T21827] ? __fget_files+0x2a/0x420 [ 1055.192229][T21827] ksys_read+0x145/0x250 [ 1055.192257][T21827] ? __pfx_ksys_read+0x10/0x10 [ 1055.192286][T21827] ? do_syscall_64+0xbe/0xfa0 [ 1055.192314][T21827] do_syscall_64+0xfa/0xfa0 [ 1055.192336][T21827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.192361][T21827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.192381][T21827] ? clear_bhb_loop+0x60/0xb0 [ 1055.192405][T21827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.192424][T21827] RIP: 0033:0x7fc37ff8d9dc [ 1055.192441][T21827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1055.192459][T21827] RSP: 002b:00007fc37e1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1055.192480][T21827] RAX: ffffffffffffffda RBX: 00007fc3801e5fa0 RCX: 00007fc37ff8d9dc [ 1055.192496][T21827] RDX: 000000000000000f RSI: 00007fc37e1f60a0 RDI: 0000000000000004 [ 1055.192508][T21827] RBP: 00007fc37e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.192525][T21827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.192537][T21827] R13: 00007fc3801e6038 R14: 00007fc3801e5fa0 R15: 00007fc38030fa28 [ 1055.192569][T21827] [ 1055.246658][T18076] usb 4-1: Using ep0 maxpacket: 32 [ 1055.379643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.481195][T18076] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1055.489674][T18076] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1055.501004][T18076] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1055.512433][T18076] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1055.526210][T18076] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1055.535413][T18076] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1055.545825][T18072] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1055.554921][T18076] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1055.564567][T18076] usb 4-1: Product: syz [ 1055.614919][T18076] usb 4-1: Manufacturer: syz [ 1055.625249][T18076] usb 4-1: SerialNumber: syz [ 1055.640351][T18076] usb 4-1: config 0 descriptor?? [ 1055.652412][T18076] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1055.707414][T18076] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1055.715818][T18072] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1055.727487][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.737253][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.750964][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.770316][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.779954][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.791168][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.799448][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.809964][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.821358][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.829208][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.839345][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.854937][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.866674][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.876223][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.888401][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.897315][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.906397][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.920841][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.929776][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.939762][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1055.951478][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1055.962603][T18072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1055.972926][T21812] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1055.981280][T18076] usb 4-1: USB disconnect, device number 64 [ 1055.987343][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1055.997182][T18076] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1056.008921][T18072] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.033319][T18072] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.045041][T18072] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1056.054769][T18072] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1056.076936][T18072] usb 1-1: Product: syz [ 1056.081135][T18072] usb 1-1: Manufacturer: syz [ 1056.095654][T18072] usb 1-1: SerialNumber: syz [ 1056.116085][T18072] usb 1-1: config 0 descriptor?? [ 1056.134072][T18072] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1056.436162][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 1056.436826][ T5897] usb 1-1: USB disconnect, device number 90 [ 1056.468806][ T5897] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1056.598554][T21823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.679790][T21823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.734074][ T918] usb_8dev 6-1:0.0 can0: sending command message failed [ 1057.741222][ T918] usb_8dev 6-1:0.0 can0: can't get firmware version [ 1057.908283][ T918] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 1057.942513][ T918] usb 6-1: USB disconnect, device number 73 [ 1058.069495][T21867] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3909'. [ 1058.379429][ T918] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1058.538121][ T918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1058.566690][ T5928] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1058.700899][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 1058.716816][ T5928] usb 1-1: device descriptor read/64, error -71 [ 1058.720627][ T918] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1058.733122][ T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.741809][ T918] usb 6-1: Product: syz [ 1058.746031][ T918] usb 6-1: Manufacturer: syz [ 1058.750674][ T918] usb 6-1: SerialNumber: syz [ 1058.765885][ T918] usb 6-1: config 0 descriptor?? [ 1058.772132][T21867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1058.846709][ T918] rc_core: IR keymap rc-streamzap not found [ 1058.852906][ T918] Registered IR keymap rc-empty [ 1058.861010][ T918] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1058.894882][ T918] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 1058.935474][T21899] delete_channel: no stack [ 1059.001506][ T30] audit: type=1326 audit(1761448903.750:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21904 comm="syz.1.3922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccfc58efc9 code=0x0 [ 1059.037103][T18076] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1059.046661][ T5928] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1059.125190][ T24] usb 6-1: USB disconnect, device number 74 [ 1059.187041][ T5928] usb 1-1: device descriptor read/64, error -71 [ 1059.201720][T18076] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 1059.213934][T18076] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1059.227867][T18076] usb 4-1: config 16 interface 0 has no altsetting 0 [ 1059.235860][T18076] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1059.246188][T18076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.263341][T21889] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1059.308119][ T5928] usb usb1-port1: attempt power cycle [ 1059.647406][ T5928] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1059.709993][ T5928] usb 1-1: device descriptor read/8, error -71 [ 1059.956624][ T5928] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1059.997307][ T5928] usb 1-1: device descriptor read/8, error -71 [ 1060.134394][ T5928] usb usb1-port1: unable to enumerate USB device [ 1060.193390][T21928] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1060.416851][ T918] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1060.586802][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 1060.589388][ T918] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 1060.589415][ T918] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1060.589434][ T918] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.589454][ T918] usb 2-1: config 8 has no interface number 0 [ 1060.589519][ T918] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1060.589545][ T918] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1060.589584][ T918] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.589633][ T918] usb 2-1: config 8 interface 223 has no altsetting 0 [ 1060.592241][ T918] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1060.592273][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.592314][ T918] usb 2-1: Product: syz [ 1060.592329][ T918] usb 2-1: Manufacturer: syz [ 1060.592345][ T918] usb 2-1: SerialNumber: syz [ 1060.600552][T21924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1061.463204][T21936] netlink: 'syz.5.3930': attribute type 1 has an invalid length. [ 1061.497800][T21936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1061.633304][T21940] bond3: (slave dummy0): making interface the new active one [ 1061.643121][T21940] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1062.227056][T18076] usb 4-1: string descriptor 0 read error: -71 [ 1062.235217][T18076] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1062.249037][T18076] imon 4-1:16.0: unable to initialize intf0, err -19 [ 1062.256083][T18076] imon:imon_probe: failed to initialize context! [ 1062.264681][T18076] imon 4-1:16.0: unable to register, err -19 [ 1062.283856][T18076] usb 4-1: USB disconnect, device number 65 [ 1062.678704][T21960] SET target dimension over the limit! [ 1062.927956][T18076] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1063.078634][T18076] usb 6-1: Using ep0 maxpacket: 8 [ 1063.090918][T18076] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1063.100667][T18076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.109453][T18076] usb 6-1: Product: syz [ 1063.113773][T18076] usb 6-1: Manufacturer: syz [ 1063.118509][T18076] usb 6-1: SerialNumber: syz [ 1063.127328][T18076] usb 6-1: config 0 descriptor?? [ 1063.138208][T18076] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1063.781983][ T918] usb 2-1: USB disconnect, device number 89 [ 1064.088084][T21976] random: crng reseeded on system resumption [ 1064.672565][T21981] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 1065.717166][T21986] FAULT_INJECTION: forcing a failure. [ 1065.717166][T21986] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.746602][T21986] CPU: 1 UID: 0 PID: 21986 Comm: syz.3.3947 Not tainted syzkaller #0 PREEMPT(full) [ 1065.746628][T21986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1065.746639][T21986] Call Trace: [ 1065.746647][T21986] [ 1065.746656][T21986] dump_stack_lvl+0x189/0x250 [ 1065.746681][T21986] ? __pfx____ratelimit+0x10/0x10 [ 1065.746703][T21986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1065.746727][T21986] ? __pfx__printk+0x10/0x10 [ 1065.746748][T21986] ? __pfx___might_resched+0x10/0x10 [ 1065.746770][T21986] ? fs_reclaim_acquire+0x7d/0x100 [ 1065.746804][T21986] should_fail_ex+0x414/0x560 [ 1065.746824][T21986] should_failslab+0xa8/0x100 [ 1065.746836][T21986] __kvmalloc_node_noprof+0x158/0x910 [ 1065.746858][T21986] ? io_alloc_cache_init+0x42/0x140 [ 1065.746871][T21986] ? __raw_spin_lock_init+0x45/0x100 [ 1065.746887][T21986] io_alloc_cache_init+0x42/0x140 [ 1065.746901][T21986] io_ring_ctx_alloc+0x455/0xc10 [ 1065.746921][T21986] io_uring_create+0x14a/0xba0 [ 1065.746940][T21986] __se_sys_io_uring_setup+0x264/0x270 [ 1065.746955][T21986] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1065.746978][T21986] ? do_syscall_64+0xbe/0xfa0 [ 1065.746993][T21986] do_syscall_64+0xfa/0xfa0 [ 1065.747006][T21986] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.747020][T21986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.747030][T21986] ? clear_bhb_loop+0x60/0xb0 [ 1065.747042][T21986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.747052][T21986] RIP: 0033:0x7f91fdf8efc9 [ 1065.747063][T21986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.747072][T21986] RSP: 002b:00007f91fedf1fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1065.747084][T21986] RAX: ffffffffffffffda RBX: 00007f91fe1e5fa0 RCX: 00007f91fdf8efc9 [ 1065.747092][T21986] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000001e1e [ 1065.747099][T21986] RBP: 0000200000000200 R08: 0000000000000000 R09: 0000200000000000 [ 1065.747110][T21986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1065.747120][T21986] R13: 0000200000002000 R14: 0000000000001e1e R15: 0000200000000000 [ 1065.747136][T21986] [ 1066.266878][T18076] gspca_sonixj: reg_w1 err -110 [ 1066.272068][T18076] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1066.698725][T22000] netlink: 'syz.1.3952': attribute type 1 has an invalid length. [ 1066.752201][T22000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3952'. [ 1066.765992][T22000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1066.800341][T22000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1066.813229][T22000] bond1: (slave geneve2): making interface the new active one [ 1066.822659][T22000] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1066.838509][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.855525][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.878509][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.903495][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.026514][ T5904] usb 6-1: USB disconnect, device number 75 [ 1067.105687][T22019] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1067.113309][T22019] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1067.136689][ T24] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1067.288390][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.301196][ T24] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1067.314787][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.334305][ T24] usb 1-1: config 0 descriptor?? [ 1067.549098][T22010] netlink: 'syz.0.3953': attribute type 3 has an invalid length. [ 1067.557151][T22010] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1067.568617][T22033] FAULT_INJECTION: forcing a failure. [ 1067.568617][T22033] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.583374][T22033] CPU: 1 UID: 0 PID: 22033 Comm: syz.5.3963 Not tainted syzkaller #0 PREEMPT(full) [ 1067.583391][T22033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1067.583398][T22033] Call Trace: [ 1067.583404][T22033] [ 1067.583409][T22033] dump_stack_lvl+0x189/0x250 [ 1067.583428][T22033] ? __pfx____ratelimit+0x10/0x10 [ 1067.583442][T22033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.583456][T22033] ? __pfx__printk+0x10/0x10 [ 1067.583476][T22033] ? __pfx___might_resched+0x10/0x10 [ 1067.583488][T22033] ? fs_reclaim_acquire+0x7d/0x100 [ 1067.583507][T22033] should_fail_ex+0x414/0x560 [ 1067.583527][T22033] should_failslab+0xa8/0x100 [ 1067.583539][T22033] __kvmalloc_node_noprof+0x158/0x910 [ 1067.583555][T22033] ? io_alloc_cache_init+0x42/0x140 [ 1067.583571][T22033] io_alloc_cache_init+0x42/0x140 [ 1067.583584][T22033] io_ring_ctx_alloc+0x473/0xc10 [ 1067.583604][T22033] io_uring_create+0x14a/0xba0 [ 1067.583623][T22033] __se_sys_io_uring_setup+0x264/0x270 [ 1067.583638][T22033] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1067.583661][T22033] ? do_syscall_64+0xbe/0xfa0 [ 1067.583676][T22033] do_syscall_64+0xfa/0xfa0 [ 1067.583688][T22033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1067.583702][T22033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.583715][T22033] ? clear_bhb_loop+0x60/0xb0 [ 1067.583728][T22033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.583738][T22033] RIP: 0033:0x7f161218efc9 [ 1067.583749][T22033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.583758][T22033] RSP: 002b:00007f16130c8fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1067.583771][T22033] RAX: ffffffffffffffda RBX: 00007f16123e5fa0 RCX: 00007f161218efc9 [ 1067.583779][T22033] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000001e1e [ 1067.583786][T22033] RBP: 0000200000000200 R08: 0000000000000000 R09: 0000200000000000 [ 1067.583794][T22033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1067.583800][T22033] R13: 0000200000002000 R14: 0000000000001e1e R15: 0000200000000000 [ 1067.583826][T22033] [ 1067.853322][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1067.859617][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1067.871894][ T24] usb 1-1: USB disconnect, device number 96 [ 1067.879135][ T5904] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1067.959501][T22035] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1068.047308][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 1068.071170][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.087794][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.100031][ T5904] usb 4-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1068.109506][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.121742][ T5904] usb 4-1: config 0 descriptor?? [ 1068.170468][T22042] FAULT_INJECTION: forcing a failure. [ 1068.170468][T22042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.184371][T22042] CPU: 0 UID: 0 PID: 22042 Comm: syz.1.3967 Not tainted syzkaller #0 PREEMPT(full) [ 1068.184397][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1068.184408][T22042] Call Trace: [ 1068.184415][T22042] [ 1068.184423][T22042] dump_stack_lvl+0x189/0x250 [ 1068.184454][T22042] ? __pfx____ratelimit+0x10/0x10 [ 1068.184477][T22042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.184501][T22042] ? __pfx__printk+0x10/0x10 [ 1068.184521][T22042] ? __might_fault+0xb0/0x130 [ 1068.184558][T22042] should_fail_ex+0x414/0x560 [ 1068.184590][T22042] _copy_from_user+0x2d/0xb0 [ 1068.184615][T22042] __se_sys_io_uring_setup+0x15b/0x270 [ 1068.184642][T22042] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1068.184681][T22042] ? do_syscall_64+0xbe/0xfa0 [ 1068.184706][T22042] do_syscall_64+0xfa/0xfa0 [ 1068.184727][T22042] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.184749][T22042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.184766][T22042] ? clear_bhb_loop+0x60/0xb0 [ 1068.184788][T22042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.184806][T22042] RIP: 0033:0x7fccfc58efc9 [ 1068.184823][T22042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.184846][T22042] RSP: 002b:00007fccfd415fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1068.184866][T22042] RAX: ffffffffffffffda RBX: 00007fccfc7e5fa0 RCX: 00007fccfc58efc9 [ 1068.184881][T22042] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000001e1e [ 1068.184893][T22042] RBP: 0000200000000200 R08: 0000000000000000 R09: 0000200000000000 [ 1068.184905][T22042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1068.184915][T22042] R13: 0000200000002000 R14: 0000000000001e1e R15: 0000200000000000 [ 1068.184943][T22042] [ 1068.363107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.386829][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 1068.395428][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1068.413349][ T5904] usb 4-1: USB disconnect, device number 66 [ 1068.609467][ T5199] Dev loop6: unable to read RDB block 1 [ 1068.629515][ T5199] loop6: unable to read partition table [ 1068.635408][ T5199] loop6: partition table beyond EOD, truncated [ 1068.795250][T22058] FAULT_INJECTION: forcing a failure. [ 1068.795250][T22058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.822303][T22058] CPU: 0 UID: 0 PID: 22058 Comm: syz.1.3974 Not tainted syzkaller #0 PREEMPT(full) [ 1068.822330][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1068.822342][T22058] Call Trace: [ 1068.822350][T22058] [ 1068.822359][T22058] dump_stack_lvl+0x189/0x250 [ 1068.822388][T22058] ? __pfx____ratelimit+0x10/0x10 [ 1068.822413][T22058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.822438][T22058] ? __pfx__printk+0x10/0x10 [ 1068.822457][T22058] ? __might_fault+0xb0/0x130 [ 1068.822491][T22058] should_fail_ex+0x414/0x560 [ 1068.822523][T22058] _copy_from_iter+0x1de/0x1790 [ 1068.822548][T22058] ? rcu_is_watching+0x15/0xb0 [ 1068.822573][T22058] ? kmalloc_reserve+0xbd/0x290 [ 1068.822599][T22058] ? __pfx__copy_from_iter+0x10/0x10 [ 1068.822622][T22058] ? __build_skb_around+0x262/0x3f0 [ 1068.822651][T22058] ? netlink_sendmsg+0x642/0xb30 [ 1068.822668][T22058] ? skb_put+0x11b/0x210 [ 1068.822689][T22058] netlink_sendmsg+0x6b2/0xb30 [ 1068.822714][T22058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.822734][T22058] ? __lock_acquire+0xab9/0xd20 [ 1068.822750][T22058] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1068.822778][T22058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1068.822796][T22058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.822821][T22058] __sock_sendmsg+0x21c/0x270 [ 1068.822848][T22058] ____sys_sendmsg+0x52d/0x830 [ 1068.822874][T22058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1068.822901][T22058] ? import_iovec+0x74/0xa0 [ 1068.822927][T22058] ___sys_sendmsg+0x21f/0x2a0 [ 1068.822953][T22058] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.823012][T22058] ? __fget_files+0x2a/0x420 [ 1068.823029][T22058] ? __fget_files+0x3a0/0x420 [ 1068.823051][T22058] __sys_sendmmsg+0x227/0x430 [ 1068.823072][T22058] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1068.823098][T22058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1068.823140][T22058] ? ksys_write+0x22a/0x250 [ 1068.823169][T22058] ? __pfx_ksys_write+0x10/0x10 [ 1068.823199][T22058] __x64_sys_sendmmsg+0xa0/0xc0 [ 1068.823223][T22058] do_syscall_64+0xfa/0xfa0 [ 1068.823246][T22058] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.823270][T22058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.823290][T22058] ? clear_bhb_loop+0x60/0xb0 [ 1068.823314][T22058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.823337][T22058] RIP: 0033:0x7fccfc58efc9 [ 1068.823355][T22058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.823373][T22058] RSP: 002b:00007fccfd416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1068.823395][T22058] RAX: ffffffffffffffda RBX: 00007fccfc7e5fa0 RCX: 00007fccfc58efc9 [ 1068.823410][T22058] RDX: 04924924924926d3 RSI: 0000200000000200 RDI: 0000000000000003 [ 1068.823424][T22058] RBP: 00007fccfd416090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.823437][T22058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.823449][T22058] R13: 00007fccfc7e6038 R14: 00007fccfc7e5fa0 R15: 00007fccfc90fa28 [ 1068.823481][T22058] [ 1069.114874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.296037][T22060] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1069.492296][T22067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3976'. [ 1069.521127][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3976'. [ 1069.829995][T22087] FAULT_INJECTION: forcing a failure. [ 1069.829995][T22087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.855620][T22087] CPU: 1 UID: 0 PID: 22087 Comm: syz.3.3986 Not tainted syzkaller #0 PREEMPT(full) [ 1069.855646][T22087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1069.855658][T22087] Call Trace: [ 1069.855665][T22087] [ 1069.855673][T22087] dump_stack_lvl+0x189/0x250 [ 1069.855702][T22087] ? __pfx____ratelimit+0x10/0x10 [ 1069.855724][T22087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1069.855748][T22087] ? __pfx__printk+0x10/0x10 [ 1069.855766][T22087] ? __might_fault+0xb0/0x130 [ 1069.855801][T22087] should_fail_ex+0x414/0x560 [ 1069.855834][T22087] _copy_from_user+0x2d/0xb0 [ 1069.855859][T22087] __sys_sendto+0x25c/0x520 [ 1069.855890][T22087] ? __pfx___sys_sendto+0x10/0x10 [ 1069.855913][T22087] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1069.855948][T22087] ? __fget_files+0x3a0/0x420 [ 1069.855974][T22087] ? ksys_write+0x22a/0x250 [ 1069.856003][T22087] ? __pfx_ksys_write+0x10/0x10 [ 1069.856032][T22087] __x64_sys_sendto+0xde/0x100 [ 1069.856063][T22087] do_syscall_64+0xfa/0xfa0 [ 1069.856084][T22087] ? lockdep_hardirqs_on+0x9c/0x150 [ 1069.856107][T22087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.856126][T22087] ? clear_bhb_loop+0x60/0xb0 [ 1069.856147][T22087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.856166][T22087] RIP: 0033:0x7f91fdf8efc9 [ 1069.856184][T22087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.856201][T22087] RSP: 002b:00007f91fedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1069.856223][T22087] RAX: ffffffffffffffda RBX: 00007f91fe1e5fa0 RCX: 00007f91fdf8efc9 [ 1069.856238][T22087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1069.856250][T22087] RBP: 00007f91fedf2090 R08: 0000200000000100 R09: 000000000000001c [ 1069.856264][T22087] R10: 0000000024000881 R11: 0000000000000246 R12: 0000000000000001 [ 1069.856277][T22087] R13: 00007f91fe1e6038 R14: 00007f91fe1e5fa0 R15: 00007f91fe30fa28 [ 1069.856308][T22087] [ 1070.103409][ T5904] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1070.279120][ T5904] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1070.287385][ T5904] usb 1-1: config 0 has no interface number 0 [ 1070.312333][T22095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.326672][T18076] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1070.409755][ T5904] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1070.419244][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.419579][T22095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.451049][ T5904] usb 1-1: Product: syz [ 1070.457931][T22095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.469996][T22095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.470233][ T5904] usb 1-1: Manufacturer: syz [ 1070.595432][ T5904] usb 1-1: SerialNumber: syz [ 1070.608381][ T5904] usb 1-1: config 0 descriptor?? [ 1070.637320][ T5904] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=1 [ 1070.756672][T18076] usb 4-1: device not accepting address 67, error -71 [ 1070.852532][ T5904] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1071.159823][ T30] audit: type=1326 audit(1761448915.900:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22115 comm="syz.3.3994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91fdf8efc9 code=0x0 [ 1071.243747][ T24] usb 1-1: USB disconnect, device number 97 [ 1071.356037][T22132] loop9: detected capacity change from 0 to 7 [ 1071.363707][T22132] Dev loop9: unable to read RDB block 7 [ 1071.369444][T22132] loop9: unable to read partition table [ 1071.375313][T22132] loop9: partition table beyond EOD, truncated [ 1071.381764][T22132] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1071.502272][T22137] FAULT_INJECTION: forcing a failure. [ 1071.502272][T22137] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.515432][T22137] CPU: 1 UID: 0 PID: 22137 Comm: syz.4.4000 Not tainted syzkaller #0 PREEMPT(full) [ 1071.515458][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1071.515470][T22137] Call Trace: [ 1071.515478][T22137] [ 1071.515486][T22137] dump_stack_lvl+0x189/0x250 [ 1071.515520][T22137] ? __pfx____ratelimit+0x10/0x10 [ 1071.515538][T22137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.515553][T22137] ? __pfx__printk+0x10/0x10 [ 1071.515565][T22137] ? __pfx___might_resched+0x10/0x10 [ 1071.515577][T22137] ? fs_reclaim_acquire+0x7d/0x100 [ 1071.515597][T22137] should_fail_ex+0x414/0x560 [ 1071.515616][T22137] should_failslab+0xa8/0x100 [ 1071.515628][T22137] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1071.515644][T22137] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1071.515665][T22137] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1071.515684][T22137] tcp_sendmsg_locked+0x4cc9/0x5540 [ 1071.515701][T22137] ? tcp_sendmsg_locked+0x291/0x5540 [ 1071.515731][T22137] ? __lock_acquire+0xab9/0xd20 [ 1071.515748][T22137] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1071.515762][T22137] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1071.515776][T22137] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1071.515793][T22137] tcp_sendmsg+0x2f/0x50 [ 1071.515808][T22137] __sock_sendmsg+0xe5/0x270 [ 1071.515824][T22137] __sys_sendto+0x3bd/0x520 [ 1071.515841][T22137] ? __pfx___sys_sendto+0x10/0x10 [ 1071.515855][T22137] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1071.515876][T22137] ? __fget_files+0x3a0/0x420 [ 1071.515896][T22137] ? ksys_write+0x22a/0x250 [ 1071.515912][T22137] ? __pfx_ksys_write+0x10/0x10 [ 1071.515928][T22137] __x64_sys_sendto+0xde/0x100 [ 1071.515946][T22137] do_syscall_64+0xfa/0xfa0 [ 1071.515959][T22137] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.515972][T22137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.515982][T22137] ? clear_bhb_loop+0x60/0xb0 [ 1071.515995][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.516005][T22137] RIP: 0033:0x7fc37ff8efc9 [ 1071.516016][T22137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.516025][T22137] RSP: 002b:00007fc37e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1071.516038][T22137] RAX: ffffffffffffffda RBX: 00007fc3801e5fa0 RCX: 00007fc37ff8efc9 [ 1071.516046][T22137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1071.516053][T22137] RBP: 00007fc37e1f6090 R08: 0000200000000100 R09: 000000000000001c [ 1071.516060][T22137] R10: 0000000024000881 R11: 0000000000000246 R12: 0000000000000001 [ 1071.516066][T22137] R13: 00007fc3801e6038 R14: 00007fc3801e5fa0 R15: 00007fc38030fa28 [ 1071.516083][T22137] [ 1071.567042][T18072] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1071.726693][ T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1071.896788][T18072] usb 2-1: Using ep0 maxpacket: 32 [ 1071.903813][T18072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.915187][T18072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.925896][T18072] usb 2-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1071.936771][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1071.942102][T18072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.947847][ T24] usb 1-1: config 3 has an invalid interface number: 47 but max is 0 [ 1071.963169][ T24] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.974236][ T24] usb 1-1: config 3 has no interface number 0 [ 1071.985144][T18072] usb 2-1: config 0 descriptor?? [ 1071.988165][ T24] usb 1-1: config 3 interface 47 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1072.011870][ T24] usb 1-1: config 3 interface 47 has no altsetting 0 [ 1072.022452][ T24] usb 1-1: New USB device found, idVendor=19d2, idProduct=0118, bcdDevice=38.a6 [ 1072.034526][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.042959][ T24] usb 1-1: Product: syz [ 1072.047510][ T24] usb 1-1: Manufacturer:   [ 1072.052118][ T24] usb 1-1: SerialNumber: syz [ 1072.103762][T22144] binder: BINDER_SET_CONTEXT_MGR already set [ 1072.110102][T22144] binder: 22142:22144 ioctl 4018620d 200000000280 returned -16 [ 1072.119418][T22141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1072.205665][T18072] usbhid 2-1:0.0: can't add hid device: -71 [ 1072.219234][T18072] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1072.228870][ T30] audit: type=1326 audit(1761448916.980:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22145 comm="syz.5.4003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f161218efc9 code=0x0 [ 1072.250743][T18072] usb 2-1: USB disconnect, device number 90 [ 1072.284533][T22149] FAULT_INJECTION: forcing a failure. [ 1072.284533][T22149] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.300096][T22149] CPU: 1 UID: 0 PID: 22149 Comm: syz.5.4003 Not tainted syzkaller #0 PREEMPT(full) [ 1072.300124][T22149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1072.300139][T22149] Call Trace: [ 1072.300148][T22149] [ 1072.300157][T22149] dump_stack_lvl+0x189/0x250 [ 1072.300188][T22149] ? __pfx____ratelimit+0x10/0x10 [ 1072.300212][T22149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.300237][T22149] ? __pfx__printk+0x10/0x10 [ 1072.300261][T22149] ? __pfx___might_resched+0x10/0x10 [ 1072.300282][T22149] ? fs_reclaim_acquire+0x7d/0x100 [ 1072.300314][T22149] should_fail_ex+0x414/0x560 [ 1072.300346][T22149] should_failslab+0xa8/0x100 [ 1072.300368][T22149] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1072.300394][T22149] ? alloc_empty_file+0x55/0x1d0 [ 1072.300415][T22149] ? kernel_text_address+0xa5/0xe0 [ 1072.300447][T22149] alloc_empty_file+0x55/0x1d0 [ 1072.300469][T22149] path_openat+0x107/0x3830 [ 1072.300504][T22149] ? stack_trace_save+0x9c/0xe0 [ 1072.300532][T22149] ? stack_depot_save_flags+0x40/0x860 [ 1072.300560][T22149] ? _parse_integer_limit+0x161/0x1f0 [ 1072.300601][T22149] ? kasan_save_track+0x4f/0x80 [ 1072.300629][T22149] ? getname_flags+0xb8/0x540 [ 1072.300647][T22149] ? do_sys_openat2+0xbc/0x1c0 [ 1072.300667][T22149] ? __x64_sys_openat+0x138/0x170 [ 1072.300689][T22149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.300710][T22149] ? __pfx_path_openat+0x10/0x10 [ 1072.300753][T22149] do_filp_open+0x1fa/0x410 [ 1072.300775][T22149] ? __lock_acquire+0xab9/0xd20 [ 1072.300796][T22149] ? __pfx_do_filp_open+0x10/0x10 [ 1072.300841][T22149] ? _raw_spin_unlock+0x28/0x50 [ 1072.300862][T22149] ? alloc_fd+0x64c/0x6c0 [ 1072.300900][T22149] do_sys_openat2+0x121/0x1c0 [ 1072.300925][T22149] ? __pfx_do_sys_openat2+0x10/0x10 [ 1072.300949][T22149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.300982][T22149] __x64_sys_openat+0x138/0x170 [ 1072.301010][T22149] do_syscall_64+0xfa/0xfa0 [ 1072.301032][T22149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.301057][T22149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.301076][T22149] ? clear_bhb_loop+0x60/0xb0 [ 1072.301099][T22149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.301118][T22149] RIP: 0033:0x7f161218d810 [ 1072.301135][T22149] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1072.301153][T22149] RSP: 002b:00007f16130a7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1072.301174][T22149] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f161218d810 [ 1072.301188][T22149] RDX: 0000000000000002 RSI: 00007f16130a7fa0 RDI: 00000000ffffff9c [ 1072.301202][T22149] RBP: 00007f16130a7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1072.301215][T22149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1072.301227][T22149] R13: 00007f16123e6128 R14: 00007f16123e6090 R15: 00007f161250fa28 [ 1072.301256][T22149] [ 1072.608032][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1072.615872][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1072.623473][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1072.631028][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1072.653135][ T24] option 1-1:3.47: GSM modem (1-port) converter detected [ 1072.672305][ T24] usb 1-1: USB disconnect, device number 98 [ 1072.692062][ T24] option 1-1:3.47: device disconnected [ 1073.143459][T22159] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1073.151164][T22159] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1073.160598][T22159] veth0_to_bridge: entered allmulticast mode [ 1073.169122][T22159] veth0_to_bridge: entered promiscuous mode [ 1073.175291][T22159] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1073.190916][T22159] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1073.198394][T22159] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1073.217446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.234418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.249031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.261705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.274475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.287256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.299915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.312582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.325579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.338349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.022045][T22167] netlink: 'syz.1.4009': attribute type 10 has an invalid length. [ 1074.081678][T22167] team0: Port device dummy0 added [ 1074.096978][T22168] netlink: 'syz.1.4009': attribute type 10 has an invalid length. [ 1074.275250][T22168] team0: Port device dummy0 removed [ 1074.329720][T22168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1074.446700][ T5904] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1074.637334][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 1074.649251][ T5904] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 1074.662561][ T5904] usb 2-1: config 2 has no interface number 0 [ 1074.673893][ T5904] usb 2-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1074.706849][ T5904] usb 2-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1074.737237][ T5904] usb 2-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 1074.750660][ T5904] usb 2-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 1074.763921][ T5904] usb 2-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1074.777905][ T5904] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1074.788255][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.815685][ T5904] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 1078.226653][ C0] net_ratelimit: 12304 callbacks suppressed [ 1078.226667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.245066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.257591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.269996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.282404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.294695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.307324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.319734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.332114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.344400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1082.996576][ C0] sched: DL replenish lagged too much [ 1083.236744][ C0] net_ratelimit: 15499 callbacks suppressed [ 1083.236759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.255026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.267306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.279658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.292073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.304556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.316928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.329322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.341548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.353861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.246820][ C0] net_ratelimit: 22738 callbacks suppressed [ 1088.246835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.265168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.277497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.289642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.301648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.314006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.326040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.338240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.350675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.363297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.256693][ C1] net_ratelimit: 35372 callbacks suppressed [ 1093.256714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.257306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.262806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.275105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.286635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.298551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.310484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.322387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.334262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.346859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.701371][ T5904] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1098.266569][ C1] net_ratelimit: 66491 callbacks suppressed [ 1098.266583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.266588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.266670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.272608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.284634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1098.296634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.308514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.320881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.332409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.332510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.276660][ C1] net_ratelimit: 77607 callbacks suppressed [ 1103.276695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.276976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.282724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.294801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.306710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.318580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.330575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.342770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.354766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.366857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.286621][ C1] net_ratelimit: 77617 callbacks suppressed [ 1108.286643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.286946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.292689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.304590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.316626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.328496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.340495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.352469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.364359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.376297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.296626][ C1] net_ratelimit: 88372 callbacks suppressed [ 1113.296649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.297015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.302678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.314654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.326598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.338550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.350519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.362404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.374291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.386184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.323117][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.401598][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.306644][ C0] net_ratelimit: 92558 callbacks suppressed [ 1118.306662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.306665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.306759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.313222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.324707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.337215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.348756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.360624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.372703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.384726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.316606][ C1] net_ratelimit: 92559 callbacks suppressed [ 1123.316628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.316651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.322659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.335029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.346586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.358438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.370428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.382319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.394201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.406295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.326591][ C1] net_ratelimit: 94285 callbacks suppressed [ 1128.326612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.326613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.326695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.332659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.344664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.356591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.368676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.380458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.392807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.404550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.336575][ C0] net_ratelimit: 95214 callbacks suppressed [ 1133.336590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.336597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.336675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.342609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.354518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.366620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.378456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.390409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.402360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.414361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.346573][ C1] net_ratelimit: 99514 callbacks suppressed [ 1138.346594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.346787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.352626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.364620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.376625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.388505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.400377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.412275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.424347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.436416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.356626][ C1] net_ratelimit: 100275 callbacks suppressed [ 1143.356648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.356922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.362749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.375145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.386824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.399086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.410598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.422497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.434483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.446458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.366630][ C1] net_ratelimit: 98549 callbacks suppressed [ 1148.366650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.366701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.372667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.384607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.396591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.408468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.420431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.432396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.444431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.456294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.376606][ C0] net_ratelimit: 94084 callbacks suppressed [ 1153.376627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.376720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.382644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.394640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.406716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.418601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.430486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.442382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.454260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.466244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.386600][ C1] net_ratelimit: 98645 callbacks suppressed [ 1158.386622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.386830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.392843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.405313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.416892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.429359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.440812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.452796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.464794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.476764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.396626][ C1] net_ratelimit: 98669 callbacks suppressed [ 1163.396649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.396690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.402736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.415173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.426739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.439009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.450588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.462566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.474546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.486414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.406603][ C1] net_ratelimit: 100926 callbacks suppressed [ 1168.406624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.406631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.406713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.412731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.424746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.436635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.448630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.460725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.472501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.484383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.416643][ C1] net_ratelimit: 100695 callbacks suppressed [ 1173.416665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.416736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.422765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.434856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.446711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.458598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.470573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.482482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.494427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.506421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.389492][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.400721][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.426643][ C1] net_ratelimit: 100066 callbacks suppressed [ 1178.426665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.426682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.432790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.444698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.456663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.468641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.480620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.492499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.504405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.516277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.436566][ C0] net_ratelimit: 104092 callbacks suppressed [ 1183.436587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.436607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.442700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.454608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.466620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.478488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.490364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.502258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.514223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.526194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.446619][ C0] net_ratelimit: 103273 callbacks suppressed [ 1188.446626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.446640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.446720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.452813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.464826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.476734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.488616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.500515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.512398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.524326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.456579][ C1] net_ratelimit: 103823 callbacks suppressed [ 1193.456601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.456615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.456710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.462725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.474653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.486654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.498543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.510506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.522480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.534404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.466614][ C1] net_ratelimit: 104371 callbacks suppressed [ 1198.466619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.466634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.466711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.472735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.484767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.496621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.508570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.520555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.532444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.544320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.476588][ C1] net_ratelimit: 104791 callbacks suppressed [ 1203.476609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.476809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.482718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.494643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.506594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.518521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.530493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.542409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.554271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.566157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.486575][ C1] net_ratelimit: 104599 callbacks suppressed [ 1208.486596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.486676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.492855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.504837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.516708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.528875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.540773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.552661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.564645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.576627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.156562][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1213.163551][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5847/1:b..l [ 1213.172012][ C1] rcu: (detected by 1, t=10502 jiffies, g=125065, q=91697 ncpus=2) [ 1213.180015][ C1] task:syz-executor state:R running task stack:21672 pid:5847 tgid:5847 ppid:5825 task_flags:0x400140 flags:0x00080001 [ 1213.194916][ C1] Call Trace: [ 1213.198214][ C1] [ 1213.201160][ C1] __schedule+0x1798/0x4cc0 [ 1213.205705][ C1] ? __pfx___schedule+0x10/0x10 [ 1213.210574][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1213.215850][ C1] preempt_schedule_irq+0xb5/0x150 [ 1213.220954][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1213.226726][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1213.232524][ C1] irqentry_exit+0x6f/0x90 [ 1213.236926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1213.242906][ C1] RIP: 0010:unwind_next_frame+0xa7c/0x2390 [ 1213.248713][ C1] Code: e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 48 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 78 13 00 00 <49> 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0 0f 85 88 13 00 00 0f b6 [ 1213.268298][ C1] RSP: 0018:ffffc9000415ef78 EFLAGS: 00000246 [ 1213.274352][ C1] RAX: 0000000000000000 RBX: ffffffff9016eb33 RCX: ffffffff8f9874e8 [ 1213.282303][ C1] RDX: ffffffff9016eb2e RSI: ffffffff9016eb32 RDI: ffffffff8bbf0580 [ 1213.290253][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81738d25 [ 1213.298202][ C1] R10: ffffc9000415f098 R11: ffffffff81ac2cc0 R12: ffffc9000415f370 [ 1213.306150][ C1] R13: ffffc9000415f098 R14: ffffc9000415f048 R15: ffffc9000415f080 [ 1213.314101][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.320236][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1213.325343][ C1] ? unwind_next_frame+0xd4/0x2390 [ 1213.330454][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1213.335542][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 1213.340823][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.346971][ C1] arch_stack_walk+0x11c/0x150 [ 1213.351732][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 1213.357009][ C1] stack_trace_save+0x9c/0xe0 [ 1213.361671][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1213.367029][ C1] save_stack+0xf5/0x1f0 [ 1213.371256][ C1] ? __pfx_save_stack+0x10/0x10 [ 1213.376085][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 1213.381358][ C1] __reset_page_owner+0x71/0x1f0 [ 1213.386286][ C1] __free_frozen_pages+0xbc4/0xd30 [ 1213.391395][ C1] __put_partials+0x146/0x170 [ 1213.396055][ C1] put_cpu_partial+0x1f2/0x2e0 [ 1213.400802][ C1] __slab_free+0x2b9/0x390 [ 1213.405207][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1213.411191][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1213.417499][ C1] ? __phys_addr+0xd3/0x180 [ 1213.421984][ C1] qlist_free_all+0x97/0x140 [ 1213.426553][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1213.432012][ C1] __kasan_slab_alloc+0x22/0x80 [ 1213.436868][ C1] __kmalloc_noprof+0x3c3/0x7f0 [ 1213.441709][ C1] ? kfree+0x4d/0x6d0 [ 1213.445678][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1213.451413][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1213.456950][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1213.462825][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1213.468868][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1213.475280][ C1] ? lockref_get+0x15/0x60 [ 1213.479684][ C1] ? tomoyo_file_open+0x165/0x220 [ 1213.484688][ C1] security_file_open+0xb1/0x270 [ 1213.489607][ C1] do_dentry_open+0x384/0x13f0 [ 1213.494376][ C1] ? vfs_open+0x31/0x340 [ 1213.498597][ C1] vfs_open+0x3b/0x340 [ 1213.502642][ C1] ? path_openat+0x2ecd/0x3830 [ 1213.507390][ C1] path_openat+0x2ee5/0x3830 [ 1213.511982][ C1] ? __pfx_path_openat+0x10/0x10 [ 1213.516909][ C1] do_filp_open+0x1fa/0x410 [ 1213.521391][ C1] ? __lock_acquire+0xab9/0xd20 [ 1213.526300][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1213.531339][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1213.536191][ C1] ? alloc_fd+0x64c/0x6c0 [ 1213.540512][ C1] do_sys_openat2+0x121/0x1c0 [ 1213.545173][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1213.550354][ C1] ? __se_sys_clock_nanosleep+0x339/0x390 [ 1213.556060][ C1] __x64_sys_openat+0x138/0x170 [ 1213.560983][ C1] do_syscall_64+0xfa/0xfa0 [ 1213.565555][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.571597][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1213.577730][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1213.582389][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.588261][ C1] RIP: 0033:0x7fc37ff8e8c1 [ 1213.592655][ C1] RSP: 002b:00007fc38030fd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1213.601043][ C1] RAX: ffffffffffffffda RBX: 0000000000000674 RCX: 00007fc37ff8e8c1 [ 1213.609020][ C1] RDX: 0000000000090800 RSI: 00007fc380012286 RDI: 00000000ffffff9c [ 1213.616970][ C1] RBP: 00007fc38030fdec R08: 0000000000000000 R09: 0000000000000000 [ 1213.624925][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00000000000001e1 [ 1213.632893][ C1] R13: 0000000000000000 R14: 0000000000105f2e R15: 00007fc38030fe40 [ 1213.640850][ C1] [ 1213.643859][ C1] rcu: rcu_preempt kthread starved for 2092 jiffies! g125065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1213.655053][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1213.665042][ C1] rcu: RCU grace-period kthread stack dump: [ 1213.666632][ C0] net_ratelimit: 98301 callbacks suppressed [ 1213.666649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.670936][ C1] task:rcu_preempt state:R running task [ 1213.676963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.688748][ C1] stack:27352 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1213.695159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.707013][ C1] Call Trace: [ 1213.707022][ C1] [ 1213.707035][ C1] __schedule+0x1798/0x4cc0 [ 1213.716651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.728359][ C1] ? __lock_acquire+0xab9/0xd20 [ 1213.728386][ C1] ? __pfx___schedule+0x10/0x10 [ 1213.731797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.734600][ C1] ? schedule+0x91/0x360 [ 1213.739228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.751030][ C1] schedule+0x165/0x360 [ 1213.751063][ C1] schedule_timeout+0x12b/0x270 [ 1213.756332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.760713][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1213.760734][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1213.772853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.776921][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1213.776953][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1213.788950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.792961][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1213.797896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.809660][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1213.878476][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1213.883783][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1213.889018][ C1] rcu_gp_kthread+0x99/0x390 [ 1213.893630][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1213.898849][ C1] ? __kthread_parkme+0x7b/0x200 [ 1213.903805][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1213.908852][ C1] kthread+0x711/0x8a0 [ 1213.912948][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1213.918246][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.922862][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.928086][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.933399][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.938016][ C1] ret_from_fork+0x4bc/0x870 [ 1213.942628][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.947769][ C1] ? __switch_to_asm+0x39/0x70 [ 1213.952556][ C1] ? __switch_to_asm+0x33/0x70 [ 1213.957331][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.961945][ C1] ret_from_fork_asm+0x1a/0x30 [ 1213.966739][ C1] [ 1213.969772][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1213.976123][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1213.981358][ C0] NMI backtrace for cpu 0 [ 1213.981377][ C0] CPU: 0 UID: 0 PID: 18944 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1213.981399][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1213.981412][ C0] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 1213.981438][ C0] RIP: 0010:ipt_do_table+0x6bc/0x1640 [ 1213.981459][ C0] Code: 4c 89 e7 e8 f6 d9 48 f8 4d 23 34 24 4d 09 fe 41 0f 94 c7 31 ff 4c 89 f6 e8 a1 29 e3 f7 45 30 ef 41 f6 c7 01 0f 84 d5 01 00 00 <4c> 8b b4 24 c8 00 00 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 [ 1213.981475][ C0] RSP: 0018:ffffc90000006be0 EFLAGS: 00000202 [ 1213.981490][ C0] RAX: ffffffff89dcdf3f RBX: ffff888026d0d170 RCX: ffff88805625bc80 [ 1213.981505][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1213.981516][ C0] RBP: ffffc90000006dc0 R08: ffff888026d0d000 R09: 0000000000000000 [ 1213.981529][ C0] R10: ffffc90000006d20 R11: fffff52000000da8 R12: ffff888026d0d1a8 [ 1213.981543][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 1213.981555][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 1213.981570][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.981583][ C0] CR2: 00007f09557156e8 CR3: 000000007d9ae000 CR4: 00000000003526f0 [ 1213.981600][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1213.981612][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1213.981625][ C0] Call Trace: [ 1213.981632][ C0] [ 1213.981652][ C0] ? __lock_acquire+0xab9/0xd20 [ 1213.981670][ C0] ? ipt_do_table+0x2a3/0x1640 [ 1213.981687][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1213.981707][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1213.981726][ C0] ? iptable_mangle_hook+0x189/0x4c0 [ 1213.981748][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1213.981768][ C0] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 1213.981790][ C0] nf_hook_slow+0xc5/0x220 [ 1213.981808][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1213.981829][ C0] NF_HOOK+0x53e/0x6b0 [ 1213.981852][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1213.981873][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1213.981901][ C0] br_nf_forward_ip+0x647/0x7e0 [ 1213.981923][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1213.981947][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1213.981970][ C0] nf_hook_slow+0xc5/0x220 [ 1213.981987][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1213.982007][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1213.982026][ C0] NF_HOOK+0x215/0x3c0 [ 1213.982046][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1213.982069][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1213.982089][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1213.982108][ C0] ? should_deliver+0x1e3/0x360 [ 1213.982132][ C0] __br_forward+0x41e/0x600 [ 1213.982150][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1213.982168][ C0] ? br_multicast_flood+0x105c/0x1450 [ 1213.982191][ C0] ? __pfx___br_forward+0x10/0x10 [ 1213.982215][ C0] br_handle_frame_finish+0x1541/0x1c50 [ 1213.982242][ C0] ? stack_trace_save+0x9c/0xe0 [ 1213.982269][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1213.982295][ C0] ? ipt_do_table+0x13dd/0x1640 [ 1213.982317][ C0] ? nf_hook_slow+0x176/0x220 [ 1213.982336][ C0] br_nf_pre_routing_finish+0x1364/0x1af0 [ 1213.982366][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1213.982390][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1213.982414][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1213.982434][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1213.982454][ C0] NF_HOOK+0x61b/0x6b0 [ 1213.982477][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1213.982499][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1213.982521][ C0] ? brnf_get_logical_dev+0x181/0x270 [ 1213.982544][ C0] ? setup_pre_routing+0x307/0x470 [ 1213.982566][ C0] br_nf_pre_routing+0xeb7/0x1470 [ 1213.982588][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1213.982615][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1213.982636][ C0] br_handle_frame+0x982/0x14c0 [ 1213.982663][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1213.982683][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 1213.982708][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1213.982729][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 1213.982753][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1213.982776][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 1213.982812][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1213.982837][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1213.982868][ C0] ? process_backlog+0x2d5/0x14f0 [ 1213.982892][ C0] ? process_backlog+0x2d5/0x14f0 [ 1213.982918][ C0] __netif_receive_skb+0x72/0x380 [ 1213.982942][ C0] ? process_backlog+0x2d5/0x14f0 [ 1213.982967][ C0] process_backlog+0x60e/0x14f0 [ 1213.982999][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1213.983022][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1213.983045][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.983070][ C0] __napi_poll+0xc7/0x360 [ 1213.983091][ C0] ? skb_defer_free_flush+0x229/0x250 [ 1213.983121][ C0] net_rx_action+0x5f7/0xdf0 [ 1213.983152][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1213.983192][ C0] handle_softirqs+0x286/0x870 [ 1213.983213][ C0] ? do_softirq+0xec/0x180 [ 1213.983233][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1213.983254][ C0] ? rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1213.983279][ C0] do_softirq+0xec/0x180 [ 1213.983297][ C0] [ 1213.983303][ C0] [ 1213.983310][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1213.983331][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1213.983349][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1213.983368][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1213.983390][ C0] ? rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1213.983411][ C0] rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1213.983437][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1213.983457][ C0] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 1213.983483][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.983503][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1213.983521][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1213.983540][ C0] process_scheduled_works+0xae1/0x17b0 [ 1213.983572][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1213.983599][ C0] worker_thread+0x8a0/0xda0 [ 1213.983619][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1213.983643][ C0] ? __kthread_parkme+0x7b/0x200 [ 1213.983668][ C0] kthread+0x711/0x8a0 [ 1213.983692][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1213.983710][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.983733][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.983753][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.983775][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.983798][ C0] ret_from_fork+0x4bc/0x870 [ 1213.983818][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.983839][ C0] ? __switch_to_asm+0x39/0x70 [ 1213.983854][ C0] ? __switch_to_asm+0x33/0x70 [ 1213.983869][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.983891][ C0] ret_from_fork_asm+0x1a/0x30 [ 1213.983915][ C0] [ 1218.676649][ C0] net_ratelimit: 92379 callbacks suppressed [ 1218.676649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.676671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.682663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.695105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.706656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.718938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.730604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.742871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.754406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.766397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)