last executing test programs: 6m59.50094053s ago: executing program 3 (id=2208): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 6m59.262195074s ago: executing program 3 (id=2209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130728bd700000000000ac1e01010000000000000000000000001a82669c0000000000000000000000004e230001000000000200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd70000000000002000000000000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m59.080904035s ago: executing program 3 (id=2210): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000002aa33000001"], 0x0) 6m58.957972687s ago: executing program 3 (id=2211): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0x1ff, 0xd033, 0x10000, 0x8000}, {0x7, 0x7fff, 0x0, 0x40}, {0x40, 0x80000001, 0x0, 0xffffffff}, {0x5, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x10001, 0x7, 0xc841, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x1, 0x800, 0xc2e0, 0x5}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x24040094) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000099baab8202120001000000000904000000dfb9e6eb43208caf00"], 0x0) 6m55.771465235s ago: executing program 3 (id=2237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10) r5 = syz_io_uring_complete(0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4c99}]}, 0x5c}}, 0x4000000) 6m55.545989158s ago: executing program 3 (id=2238): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/141, 0x8d, 0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 6m55.038984253s ago: executing program 32 (id=2238): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/141, 0x8d, 0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 15.338241628s ago: executing program 2 (id=3771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key$user(0x0, 0x0, &(0x7f0000000440)="b2f8ec9a9e58986d2f9534f603fa8e25950f6cd185542b3cbc714258c11e62e6b44f4fd24b781ee9208da27d59c1d84a630851064da243c90500000000000000eddf419f888a344028c35d9f5100000000e930785c670c8723d78ea010dc4bd3aab9198138b99721837c7f7e2e645092898e92f40d16df1b6f8bc192a03668292987eef8a399d933283359037b7aa46e124f4aefc3b8e816895e4940f46ac3d1b94d", 0xa2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240), 0x6, 0x2) r8 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r10 = socket$kcm(0x10, 0x2, 0x0) keyctl$search(0xa, r6, &(0x7f0000000280)='user\x00', &(0x7f0000000500)={'syz', 0x2}, r5) sendmsg$kcm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) close_range(r8, 0xffffffffffffffff, 0x0) 12.087093134s ago: executing program 2 (id=3780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) unshare(0x62040200) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000040)=0x1, 0x3c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0xfff, 0x10, 0x5, 0x2, 0x5, "c1634ab5870812740f6a57b67edc00d5b46ad8"}) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0x107, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x1b, 0x4, 0x3, 0x6, 0xf9, 0x64, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xac, 0x3, 0xc, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x8}, {@private=0xa010100, 0x4a3d}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast1, 0x7}, {@local, 0x8}]}, @end, @lsrr={0x83, 0x13, 0xec, [@remote, @multicast2, @private=0xa010102, @private=0xa010100]}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x7, "d8ecd9", 0xa9, "9e22aa"}, "62f76ebd22f5efef4b69d67f9f12578cd99cc1129c87cb67b39ae18117d9238658d2a5e5f84faad8860b3994b12763f7b2aa68e01e0bfbe6e6c217027f985ad04be6d6b0148a4e455fb98ba2994a75e0c7a5ba00b6b781cb8d2f88bcafe74eef437fb7b51c3c14404ac255f7756acfa25fe884741fd5324ba4e32bf9c0"}}}}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x1) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x202800, 0x0) write$rfkill(r7, &(0x7f0000000040)={0x1, 0x9, 0x3}, 0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000010000400"/104], 0x68) 9.704216131s ago: executing program 5 (id=3792): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="14000100ff01000000000000000000000000000114000600c5"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003075f37407104020695a4010203814f29e0475237af29494fb3caf7aa380109021b000142000a0904001001323ab4080905070210007fdc1433f821643feaf29fb0fabd5549b6f21a6cf9c0f549474faed1df351a3b3e3eddb776b8524b0350068e03753f59ade5fad50b7df31ed50dbea659c2a92c324457915e78241926ccd1cd1af2c856f77ff4"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000040)=@OVL_FILEID_V1={0x65, 0xf8, {'\x00', {0x0, 0xfb, 0x62, 0x3, 0x0, "7b43b77f6d768a287a13367734c11f80", "3a02ed9ac38c4b09b7dd7bc13ab2a9f1e94915632ab6399c0710d2fd83abbcab5489eda4cdb228ab0ca53606e6e91a450aa2f6d5d206590328e8818a9c3a7ef30f9a9f21b5a61e7eccd6dd2c87"}}}, 0x0, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000380)={'L+', 0xfffffffffffffffa}, 0x16, 0x0) 8.570527613s ago: executing program 0 (id=3797): r0 = syz_usb_connect(0x2, 0x546, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000872de608110f0020bcc7010203010902340501000000000904e0000ee84d5a000905070310000880fb09050303"], 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x46, {0x46, 0x24, "39599e5d05ed0df7538a21233937930f07cf2c2035e74539319c42a0be0dda59ee1aec775371c3a9b6e5c964cc8392a22041b3781c2cd0088f0cb207a563115282c9055e"}}, &(0x7f0000000080)={0x0, 0x3, 0xe, @string={0xe, 0x3, "a8f172e24e5880264bd33b50"}}, &(0x7f00000000c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xf, 0xf0f, 0x800, [0xffc030, 0xff002e, 0xc7, 0x3fd1, 0xffffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "28fb53f87f9630fdb7994a37cc96b66f"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x2, 0x9, 0xc, "dea4fab8", "3ee75966"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe6, 0x0, 0x69, 0x9, 0x7, 0x9, 0x66}}}, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x15, 0xad, "bbe12e6b3879119e933ed118ea12fbdd06248f1a9cb724900de726c105824fa714a3099cc8b7f5532f9603ef826ef60bd2c45dcb137c1d897014439b34a67477e7f9d72e761c158f1ad31584369e2dd79833d8e2f8e802ad8a89cb61fddf0c71d4ca889575acbcbed7c378b8f152cd5378af987d2d56711130e99e591239d4504da797da60ca6897ffb0ea2bc7b7f9172624fa6799c253b7d5ccb019314abfeb95a543f4f193e1fdbbaf296887"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x140, 0x80}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2cf4}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2f}, &(0x7f0000000400)={0x40, 0xb, 0x2, "adaf"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f0000000480)={0x40, 0x13, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "e7cb"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x28d}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xd7}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xf1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x9}}) 8.52078773s ago: executing program 2 (id=3798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x1) r1 = syz_usbip_server_init(0x2) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="730000446b2021fc2953bb9fc28278da76c804b396aa00"], 0x8) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xb, 0x1, 0x6, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0xffffffff, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0x2, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x3ff, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x3, 0x1000, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x7, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x5, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0xad, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000020, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x7ffe, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffff9, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x3, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000d80)='bic\x00', 0x4) setsockopt$inet6_mtu(r4, 0x29, 0x4e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000100)=@can={0x1d, r3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000280)="724594c51000f5ea6886781659cc40f061325de19436a34b8140d500a11a047667168d7850efcfa18f924653a5279be7141017d59e6dab355332bf3a91e34908fdc723a5a5de5ddef68c6da787871380207e8534d8bfe0211b37ae439cad8db14f5558927fab4e649c837f00effb1bf9b14f1403462bfd9bfa37b14c3e1f2daa566e9edce1b4ac847284d3280752c26e7ed43196c6f023ca8ce1b1a13e6909924becdc3119", 0xa5}, {&(0x7f0000000340)="4a21acab7103a99247517dc24ed7ff195c479790bcdf965e28a2c9b5f6008d150b69003ddf4e1f25181aa2e1389452297fe54b0157db0682173b186afcd2200c7a3a79b0161fc291e9de73f7e6721ee62c2b08a502c1dbe66980130e15", 0x5d}, {&(0x7f00000003c0)="cd71547220de75c3096f284c674c7c507ee04f254c33a985ad063a3a7ef2b42525242142c9f84ac721c9bf6579a0eb77ef5db761997a1bad6478e1992b903d49ff4080fa40326a7d64a95bd8272112f1e26731ddf05fe3", 0x57}, {&(0x7f00000004c0)="5975e4b89d15e1fc52b6521884ac64d8343199121aaf8e0bf719e9942411b78cb7ab1ef4a85ee4377f2e390ae0b49bd70ef88ebeb9c4f33402dbb8c6b400c55cccb749a22a5e18f27fc18c5f589e390e6a0c06e56d9314f7f329ffb93ce533301fce80636466b86cac849d5fe72e324bf36d688948d7b82562ba8eb467b5c98cc63c9ff32a3e1d576c960029937056f4f10488f781061e82e4a733be8c7f103fa5e772f98f77458dfc73d4554d286fe0", 0xb0}, {&(0x7f0000000840)="53e71742f107d0f8a31c87418cb6fd7f7705e4d1b957e9bbf5f91515d6369f5094bce468e50ada3ff81553221ab9a8a2b808cc36d7073c2fcf0b272e09771e549fb45c933624161c98d7dcc3f86f6cd81c0c7b775a7e8ba9305045a24a91edac88041e55b6fdf3d0578eecc3f250842169b3a942d45f9d40857c3922ce625618c929fb91a37211118213de7cbf7cb4d7ec9cb05161db8a63cc47d47e4b90a47729c44595c6361c6e1a10a8f391a0eab7544a091793f7e3251ab2ee35483365fa7dfe5f9e6ab8eaa3cb093d9cd028d422140eba5c8b", 0xd5}, {&(0x7f0000000180)="5023e589fb228d2dc2bdb71f", 0xc}, {&(0x7f0000000b00)="ff09bcdf5d32250bc47c54cb27ca2e55aadc51d3d18d02f4be7213ecbedc1eb8536ab375ca389623526268f280422ee71f17c835a2e46def91d1a185c91dbbaec5c27810512d40337171a0361fe29621f90189fe319611a01bc19f34f73f7c09fe0ab675a741178c7c49f781cde8a844f4925be14cec45d6b8546d8b5cc780cabe53b5fe4bdd8510e060ad294376f9c6ec1b1eb0b58257c9240ce1a307fa36f8175b32e1b203688ee65513", 0xab}, {&(0x7f0000000440)="9db3437bff7887d897a3d5eadd7e17833e", 0x11}], 0x8, &(0x7f0000000bc0)=[{0xb8, 0x10b, 0x2, "42e87d8934f3c7758027c33afcd104d8150face178492c697bedf35159a2dce3971d98f1f5847fa415abc9b693dbd901ee5e67072fc051e84256b26b305721d6aa9f91860a58a8f5edc83e2bf0320f68c31bf42d0fe7c28503f05c825723d9cc586b61bb173a99e6c1bea6fead9a392018e2fcbd9b87cc92c169200de2bc0fbfdc36b3bbd85933ce054331c92af378bfb90489c9e08581993ed77d849aaa38e4c2f4b3515f4b"}, {0xe8, 0x10a, 0x3ff, "b8a1e711199d6d03e9c54ebe393f44b3b13bc0b868cad4827cd5a59c45150f4d5039be026f40ca6f2bfa822dd9187a0e3765c8238361ea2921bc2d9ab1a65f5f27ba4b1b58c371f6446fc0e26654d8960ee8fc3a8cde7e16c66dfd6133935d3fdc4ee0c3df8a67d1abe4a3af7a47ac74aced66f4834f38de430b1b839e6d86092eaa740862fc63915fa1a22f8b2b62cae8cad37795d034d3fa2a95f49db79de0bb00a01b009b878db2f5803a3b26fbbbfe1948c2d5f7cd365656005683773610550486217836b7e993c813bc5495ac664c090ebf6d"}], 0x1a0}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a0a0101"], 0x20}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xe0, 0xf8, [{{0x9, 0x4, 0x0, 0xa, 0x41, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0xd5e, 0x4, 0x1, {0x22, 0x79a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x4a, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x4, 0xc}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x1c, 0x2, 0x8, 0xfa}, 0x142, &(0x7f0000000640)=ANY=[@ANYBLOB="050f420105961003e55c5863952067215898860deb62ee58d8e524d337f23f0eddfbc33cda27a39508e82a2b1fb3e2b31f61a08313f0777e9dec83df7054c212dfc34cafdbe574494b47e776d185fef6ee61fdd6d1d81795172757c2b369b4908a5f31f027c24930ddb6b2036871ad237ef969da343d4a27ff472f144a909eff51a16a4706ecac52a3c4590c981ef94c14100408d76f6cc2d832d0525b2aeed074cd93e678100a0f27030a01bbe459cf87a353799b439c92c4ef6b591da19aa10f2394ebce235a319534e8f7fc2a271b21c6f93495051aee398adcb28a623987092e0900d119d9b475501b46f6546f49b8ec4b4d2d301ea726e30641c611a2ae6040462361dc060f0006962cf20dc9ed163100314bdcd8972443f9a7141004012dc36944d6863b38eaa5fdc035fe325107100228a30700000000000000000000000005e3e54add027ed5ada29a197f0835706b77ce7637dd787708e263fc35c5d4630569999ae12e80853fbfc005ddc5708de2c0d359ca4a0732423bae144ad1d54c02b1ea357452d4b1cf35d2542a147dc43aba962873d9a4bb7fb4688461caa55937277843bf90b1cf52b141aa2f0bdaa51a135e9209bac70b8545cc0817eedb96542ba7957be376baf8d64b5a"], 0x4, [{0x8a, &(0x7f0000000840)=ANY=[]}, {0x7d, &(0x7f0000000000)=@string={0x7d, 0x3, "21eca945fe744fcc7f505dc45dbd8c4086c50856be3825c278df42d1c99ef2219a1c4df730ad8ff484b6f3cc9fa546a10811c8ee5104ee628750545ef9c5c32609f2dd32a8dff2a528b849739245eea883416b02930bcf0173af1060e84009b9b77a4e64a702021f58030a4b9f8dc35519c52c92eb423000000000"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x94, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}]}) socket$inet_sctp(0x2, 0x5, 0x84) 8.120503212s ago: executing program 4 (id=3799): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0xffffffff, 0x41414270, 0x6, 0x2, [{0x2}, {0x0, 0x8}, {}, {0x6, 0x80010}, {0x0, 0x4a}, {0xfffffffc, 0x9}, {}, {0x1}], 0x0, 0xfd, 0x8}}) newfstatat(0xffffffffffffff9c, &(0x7f0000002e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f0000000840)=ANY=[@ANYRESHEX=r1], 0x0) fallocate(r2, 0x0, 0xb7d4, 0x1001f0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x44) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = fsopen(&(0x7f0000000180)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffff20, 0x9c89ae0a8c1334fb, 0x0}, &(0x7f00000000c0)=0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec1617801f"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xe8aa3000) fsmount(r4, 0x0, 0x6) 6.670617573s ago: executing program 2 (id=3808): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'macsec0\x00', 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8501, 0x0) io_setup(0x3, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/116, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000000)=""/61, 0x49}, {&(0x7f0000000200)=""/77, 0xfffffffffffffe6c}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000080)=""/191, 0xbf}, 0x3}], 0x1, 0x40, &(0x7f0000003700)={0x77359400}) 6.577867764s ago: executing program 5 (id=3809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x2000, 0x51424752}}) (async) set_tid_address(0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000043005f4627bd7000fedbdf250000f0ff070002"], 0x6c}, 0x1, 0x0, 0x0, 0x48810}, 0x8054) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003e000701defeffffff00000000017c000008004280040008000400018004000280"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async, rerun: 64) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (rerun: 64) preadv(r8, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4) (async) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) io_submit(r6, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0xa, 0x0, 0x6, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x7, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xf, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0xfd}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x2, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x8}, {0x80a0000}, {0xeeef9004, 0x8}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x3e80000000000000, 0x0, 0x1]}) 6.136204838s ago: executing program 5 (id=3810): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) r14 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r14, 0x7a8, &(0x7f0000001cc0)={{@hyper, 0xb94c}, @host, 0x2, 0x4, 0x71d, 0x5, 0xd, 0x2, 0xb}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000d40)=0x0) r16 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180), 0x101002, 0x0) r17 = syz_open_dev$ndb(&(0x7f00000011c0), 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001200)={0x5, r9, 'id0\x00'}) r19 = dup3(r1, r6, 0x0) fstat(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)="7396513989643147d2afb200dd2d18573e669c9cc4186d5b6cd89106529271eaf5f3e8c87b38f8f9d0a01a58e0701ca584ae7252d584cdbcb4b32315df6fa0e0f9db6afcb5399c8c1bf66d", 0x4b}, {&(0x7f0000000a00)="b9c8744b0235217c7f023e4ef57dc602ccfd797d48f6efe822c8795408330b7307e5e29bd688e8083c432732be6789aa5716cb35ab44317111022163bf4dd88ec309f54d46acf4f8e795248140c06468832a0e30785e5ca918a4f4b353d1426535298a25", 0x64}, {&(0x7f0000000a80)="ba0c030b28a746fd5fd3ceedcd06ad74d98ba80dbb71bdec061271a2692a8bece9c4c7dde185fbd98aa709a2da5b7fabaa1748c733565e87d8e26e50c968b36ff437693a5fa09e9cc7fcfc7d7061063149b1e8e4a51ac45a2124c8b985873d6c39796f69b0954debe58f7fab7b18b5285f6449bda6527a4f4f2bc723a88ffaad0777a2f7242d570ced42d92f1482789039b092cbd82305cc986e3ff855977a", 0x9f}, {&(0x7f0000000b40)="40660bb416273129a5cfe5cba98afb8e57d52754f8ca6e2bb39bc3b58f967092df0f1222e5d3ef8f69ffed49178e9f0ae0e0e0beaedcd370d72245ab061391b7ade32c7a14065bb02a05355824354c2dad9935653657", 0x56}, {&(0x7f0000000bc0)="065c1b380ecbc6f124dcce68ccae00dbbc1b73ea237d082095c0dd814bb564dd7ba90d14799e3e2c3bfaba4595a137b19819610bbf15afd758b2ed2d042ce585c56dc2072b602f7f241bb9ee46f2c5f3d37c10d58135757326f2b3193fb102c5446bd156b54b07bd", 0x68}], 0x5, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee01, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r10, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r5, r0]}}], 0x70, 0x40080}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e80)="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", 0xfb}, {&(0x7f0000000f80)="84df5866cbd8a264f20a41b2f476300c249350887d9b64d754319bdee97cb310a3526712e3c96a3d93cfbfaa32fbfc41a111100104399c7aed75be2d01d13d38848c0a104ded8484af615704fba231534408bfcfca0e8bf05d50d075dae97734290001dfb9a95457d86c8caeec2e98adcd42784f8466ddf0fc9aa05f92e36e6d2f0e325392b49f55fd21c8d367cbf6832e6a96ae88edbdddb0a91a9d7163fdac7d409c61e9412a51d8c3a83fa6c7ec618501c722b383078cd022450a30d458d740040f55da89749a9eba31bb6e0a34203417c0d318d81151fafb3b4737bc4ed75d59690e5d14ec8505efecb8352e0bf3", 0xf0}, {&(0x7f0000001080)="ea4b06299c1b397fa3528b3990c6abd3a581fc1a6e93f64e6be6a265bfe09debeaaa0b610b705f8bd174eccd2b3c8bc1f713b9f4857dd8bccba678e61590cdbc6968d35f7e56050fde468e57bbd5a508ae1f82ed052d7ab61e6db1ef10dcd430b2890d10a9fab7ccd2a5b0f19d4fd4bbec08eec8f9d6ada3dc960b7eb67a5610dbba8c3c36cd6b10e9a14cefc9002069df7c28320d032388dfe51d84cefd2a56c527eb5ecb53dce81ed70e76c9dcc7dde9451044b293ee75384db56821", 0xbd}], 0x3, &(0x7f0000001280)=[@rights={{0x18, 0x1, 0x1, [r0, r16]}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r17]}}, @rights={{0x20, 0x1, 0x1, [r9, r11, r18, r19]}}, @rights={{0x24, 0x1, 0x1, [r7, r9, r0, r2, r3]}}], 0x80, 0x80}}, {{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001380)="3fedcabe714eb356f502e5aa489d3d4e3459019c24a6f1efde36937c7f538eafcae4ab3f9ac478828f5d04a174f0343bfc8a2b7203b33b69c148d5bc15309f5c38876dc51d2a718c8c58491c2108e168f4a525c9d0068d1542e59e8d91db10216e1918a22083c25189b1235608", 0x6d}, {&(0x7f0000001400)="a3b3ab700e2dabe0e3c00961bad29c97a8f7d001a10264645022c4ea9222e0d4e74209bc35e7f74b778768e2ccb075a3bfde79b60092bf7bce6fa9", 0x3b}, {&(0x7f0000001440)="83a294d65dd3eb9eca3acab2f99d0f566063236f684f74f7c32db4a0131193b55730e5f99d0df1f6c5aebc451c86111bcfc55e13f79f630256dae4db4c447003870fcff22ab79d7207adec53f95f0f0c5a391dbb75cfc59029dcb8f210738b3a37cdca54d950c3603a6b8c240ed8447f5a289a3b829eb85d26944169", 0x7c}, {&(0x7f00000014c0)="2a263430c7fe19d29012e36831c2c38112db1fe607eb36e2633f0ddeae1501f8a0f29670f27bf243f5e73d32053f5facefc54bd1c705a31fd5156b5cd13d5a6337e3", 0x42}, {&(0x7f0000001540)="071ed09b39e0be3aa03432dd8bbbc4b1c4556ac6fa7e8693b1a6b18f8d88a097bfcad74ea540fa5ba17b64e833bc8e737f4089a0f7e1edc47631e2ed1a551fe71187ba231a9f61ebf377dd22d249c97f352927c886e812d828c37ad73449a833b31ae2626dfc7b690934f088e3f0e54a5719788e821e7df0458b83655647612417efbe7f3de21656a3b995be05aacc4de0a6b903d5eeb00734e529c3a7dce48e7fc27955d267f21d08842e5b37ef41866d0d6d3276b89bb0b028e0e62be917adce62af88122d88ae996e9cfc1f8fe94ec5b7efc40e5ca8a80cb75ce717be8264d3812577e375cf7adcf7ceb70e32843b", 0xf0}, {&(0x7f0000001640)="f64cdd4017af87fcea3df9a4d363294a11c4f3a2ef4dbcaef1e6ada3eb30a1e3491dc93ec2dc152466198746ef23c708a630bbc65c50c7d751ebc60f0d5cdcf4", 0x40}, {&(0x7f0000001680)="994477c28445512761b33d4f4617b63ac68c51080df30e896f388a310a7c74a3508441fbd2e55d76fc75f04456d2a869a91b", 0x32}, {&(0x7f00000016c0)="176edd417935551d46c6bd1f3f539b57d15cca32ef068c0070daf9a5e6d2113bf9081526dbda17817dfa0b51bf359b35196099802920cb44833e9fa0a9a5433c8927cb4c4dddf3ba3d838608052e9b39868b1ce9df935f0332e132feb837c244b0ac89fc0e4c31650562f709d4f20972230bee8213066229f671fbafa2071cc4b720347af73498114f549c68dfed68320585d9865e", 0x95}, {&(0x7f0000001780)}], 0x9, 0x0, 0x0, 0x1}}, {{&(0x7f0000001880)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001900)="90e7d4251774a2050332f62c86fa01865e27", 0x12}, {&(0x7f0000001940)="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", 0xff}, {&(0x7f0000001a40)="59f5c74152d52e07b9e3453ebe086462b34c7d0ebd838946d42b0076fc6b966a773f971ebac624e6609f0eef4435f65190a26ee84f250159c094", 0x3a}], 0x3, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r10, r3, r0, r7, r2]}}, @rights={{0x1c, 0x1, 0x1, [r11, r9, r8]}}], 0x68, 0x4}}], 0x4, 0x20048850) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r11, @ANYRES16=r4], 0x0) 5.521024741s ago: executing program 2 (id=3811): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) personality(0x6000003) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r6 = socket$inet(0x2, 0x80007, 0x2fc) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x5c}, 0x1, 0x40afc, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 5.445040041s ago: executing program 0 (id=3812): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) accept4(r0, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_init() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) ioctl$NBD_DO_IT(r5, 0x1261) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.356662114s ago: executing program 1 (id=3813): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) timer_create(0x6, &(0x7f0000000140)={0x0, 0xc, 0x4, @thr={&(0x7f0000000000)="4613d1df94547ecde87af2d67e55f1f5daa1d432be038aaa36fd4a9a5db2234618a06164b15bf687ef9522518cfefce916c17e84d7b6aa6e3733d2f72a3dbb51e6e75d81fd1e7540c81285988d1f353c0492dae5eb8e18a7d05ced6d6c145054", &(0x7f00000000c0)="52f5146d525d003c8dc877a4c6a9318860f1cc686d4b240abc5671390cc3549da84176cc12604e5bf81a1ee4317e7ea98c5b727cd17418f5732451a1f818f543719b90bfe87a6b9cd9d3158c464723663978e51e8c56c57722f8cb4476e47d1e305503c1a69815b2c2c1af3f83c8f4a51e"}}, &(0x7f0000000180)=0x0) timer_gettime(r2, &(0x7f00000001c0)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x600000000000000, 0x2) 4.55510782s ago: executing program 4 (id=3814): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x4100, 0x4000d}, 0x20000000) 4.274549175s ago: executing program 5 (id=3815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="0111bf"]}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r5, 0xd}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0x7}, &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "08000000000000000f008000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x4c, &(0x7f0000000100)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x24008043) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="a921000001000500140003007465616d5f73bdb73d30003d4c7d6e738defa70001802800010000"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0xc801) 4.088711575s ago: executing program 4 (id=3816): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695e40102030109021b000142d8000a0904001001323ab4080905070210007fdc14"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 3.706897019s ago: executing program 2 (id=3817): prctl$PR_PAC_RESET_KEYS(0x36, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x75, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r1, 0x9, 0x0, &(0x7f0000000280)="6682c8215c75cd4c52be0d783a1ed9f962a4fbbfaa78d4d6ca14a6d4e559c241caed1dc98c05505ad4e60ec1fd3258d7488c520ff2c5d0a3d7ab2528128c4bc930353d0c62a5fe0bc09b442cf426d267d04a4a3b22ec4ae023dba8c4c37a58ce696d63322f390bdf9320890226b4a3b7614aa17e65d5da2194fb11bcdc74daba3720766b716626bbc24aeb44083491bec43dc08c52a5b0692996fc1a077d58e5ef75378a32809db452749781aab5304a75e8dc079a08d352f9ed98391d1c4c3917971f5c3ab7b8084ac888f84c", 0xcd) (async) setsockopt(r1, 0x9, 0x0, &(0x7f0000000280)="6682c8215c75cd4c52be0d783a1ed9f962a4fbbfaa78d4d6ca14a6d4e559c241caed1dc98c05505ad4e60ec1fd3258d7488c520ff2c5d0a3d7ab2528128c4bc930353d0c62a5fe0bc09b442cf426d267d04a4a3b22ec4ae023dba8c4c37a58ce696d63322f390bdf9320890226b4a3b7614aa17e65d5da2194fb11bcdc74daba3720766b716626bbc24aeb44083491bec43dc08c52a5b0692996fc1a077d58e5ef75378a32809db452749781aab5304a75e8dc079a08d352f9ed98391d1c4c3917971f5c3ab7b8084ac888f84c", 0xcd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0xffffffffffffff52, 0x0}, 0xd5) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0xffffffffffffff52, 0x0}, 0xd5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) (async) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r9 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000800000002000000140007004c04005e006504004c029078000000006401010107070b64010101441499917f00000100000006e0000002000000080016059078e0000001ba5ba2ef03c9026a40b510d28cabd79904956c5edd002f9ef2b9b21e791233ee670026c63929bde67648c121c926c7ffc9db43fceec00d77734711e2"], 0x6c) 3.628674201s ago: executing program 1 (id=3818): r0 = syz_open_dev$video(&(0x7f0000000100), 0x4, 0x262482) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @random="5db25e71351e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @loopback, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xab0, 0x4, @remote}}}}}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0xe7, {0x400e802, 0x4, 0x7, 0xfff}}) 3.456576055s ago: executing program 0 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) 3.445307544s ago: executing program 1 (id=3820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x1, 0xffffffff, 0x7109}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.316685934s ago: executing program 0 (id=3821): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES64=r1], 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 2.454469958s ago: executing program 5 (id=3823): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) (async) 2.271248331s ago: executing program 1 (id=3824): fanotify_init(0x4, 0x0) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/221, 0xdd}], 0x1}, 0x2d}], 0x2, 0x40010101, 0x0) r2 = dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00et/\x00\x00v4\x00\x00s/\x92y\x04\x00\x00\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20040600) unshare(0x24060400) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.195259721s ago: executing program 4 (id=3825): mmap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x4, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x3a4}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="f36dc744240015000000c74424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', @remote}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, 0x0, 0x0, 0x20000000000000a, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4140aecd, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x202401, 0x0) 2.088707003s ago: executing program 0 (id=3826): pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0x13a}], 0x1, 0x0, 0x0) 1.992236348s ago: executing program 5 (id=3827): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb7, 0x8, &(0x7f0000000080)) (async) r0 = getpid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0x400, 0x5}, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x24004080) (async, rerun: 64) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x80100) (rerun: 64) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x2f126000) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000ae7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b970030000b8f9060000ba000000000f300f08c4c1c05d3e66400fc730460f01b8a48c0000c744240051000000c744240278b53ba3ff2c240f20c035200000000f22c066ba6100b044ee660f3880228fe850efcaf4", 0x55}], 0x1, 0x10, &(0x7f0000000240)=[@efer={0x2, 0x1000}, @flags={0x3, 0x308042}], 0x2) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) 1.954205445s ago: executing program 1 (id=3828): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x161281, 0x0) fgetxattr(r0, &(0x7f00000011c0)=@random={'osx.', 'wrr\x00'}, &(0x7f0000001200)=""/149, 0x95) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000021060000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085d8"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4075, 0xfeb}], 0x1, 0x96, 0x1) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chmod(0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x2d, 0x40085, 0x13}, 0x2c) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3cd50213a8175d19, 0x0, 0x10001, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x11, 0x0, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 1.860445374s ago: executing program 0 (id=3829): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000011c0)={0x80002005}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$inet6(0xa, 0x800000000000002, 0x3) write$UHID_INPUT(r5, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000001340)={0x3, 0x5, 0x3}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x44810) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000001180)={&(0x7f00000012c0), 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0x38, r9, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x50f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r11 = fsmount(r0, 0x0, 0xa) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r11}}, 0x58) 1.176515696s ago: executing program 1 (id=3830): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002f80)={0x1c, &(0x7f0000000e80)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000800)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002150000", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r5, 0xfffd}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r5}, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="f65a9fed256a0374688def3b1dee013c405094043213ed534bb6ccb4ee3b9dc6454ea90e500eec2322b35bff9b91f141b6ec26190bb675446b5d0d467a6eab25b4b2e975c44984c89d1f11a975253881bde18a0d63e2347316127c7c1ec430ae618d5a814675a43fda44d0f994e9f796f0782c75e1558566edc8d9d2d9bb38ce4eb6aa8d33867516af947a26f97b762598d0a4ed51aa46321f888b38d695cba8c0a0acd8d1716faa8c1a98518b65f78002ce5a66c11d77efd8d3cac7207f03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 458.898646ms ago: executing program 4 (id=3831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) 0s ago: executing program 4 (id=3832): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @local, @remote}}}}, 0x0) kernel console output (not intermixed with test programs): 'hsr0' with parent 'hsr' already present! [ 938.926330][T11777] Bluetooth: hci1: command tx timeout [ 938.932456][T18956] Cannot create hsr debugfs directory [ 939.250411][ T977] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 939.522298][ T977] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 939.532746][ T5923] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 939.552054][ T977] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 939.611938][ T977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 939.684931][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.695670][ T5923] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.712670][ T5923] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.800411][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 939.833040][ T5923] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 940.035873][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.062383][ T5923] usb 5-1: config 0 descriptor?? [ 940.078519][T19078] delete_channel: no stack [ 940.088824][ T5922] usb 1-1: USB disconnect, device number 93 [ 940.166043][T17403] usb 3-1: USB disconnect, device number 81 [ 940.523095][ T5923] aquacomputer_d5next 0003:0C70:F010.002B: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0 [ 940.649992][ T5922] usb 2-1: USB disconnect, device number 55 [ 940.726781][T19071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 940.733369][T19071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 940.774851][T19071] vhci_hcd vhci_hcd.0: Device attached [ 940.797109][T17403] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 940.850640][T19071] netlink: 'syz.4.3599': attribute type 1 has an invalid length. [ 940.971079][T17403] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 940.976617][T11777] Bluetooth: hci1: command tx timeout [ 940.999775][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.008856][ T5923] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 941.018276][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.046549][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.057985][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.068358][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.079757][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.088005][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.097367][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.108566][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.117782][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.134980][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.147277][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.155061][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.164596][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.176997][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.190640][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.202104][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.215104][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.239561][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.240254][T19071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.259587][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.275508][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.290434][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.344310][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.395042][T19088] gretap1: entered promiscuous mode [ 941.401061][T17403] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 941.430838][T17403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 941.434287][T19088] bond1: (slave gretap1): making interface the new active one [ 941.463026][T17403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.471059][T19088] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 941.493657][T17403] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 941.512679][T17403] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 941.533225][T17403] usb 3-1: Product: syz [ 941.533932][T19090] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 941.557148][T17403] usb 3-1: Manufacturer: syz [ 941.562020][T17403] usb 3-1: SerialNumber: syz [ 941.578424][T17403] usb 3-1: config 0 descriptor?? [ 941.607233][T17403] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 941.716452][ T5924] usb 5-1: reset high-speed USB device number 82 using dummy_hcd [ 941.906724][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 941.928674][ T5937] usb 3-1: USB disconnect, device number 82 [ 941.986031][ T5937] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 942.162705][T18956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 942.218393][T18956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 942.274383][T18956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 942.331505][T18956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 942.357447][T19108] loop2: detected capacity change from 0 to 7 [ 942.384775][T19108] Dev loop2: unable to read RDB block 7 [ 942.410544][T19108] loop2: unable to read partition table [ 942.455342][T19108] loop2: partition table beyond EOD, truncated [ 942.478073][T19108] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 942.626485][ T5943] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 942.708340][T18956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.745448][T19083] vhci_hcd: connection reset by peer [ 942.748887][T18956] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.794847][T10050] vhci_hcd: stop threads [ 942.800466][ T5956] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 942.806381][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 942.815188][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.822370][T10051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.830313][T10050] vhci_hcd: release socket [ 942.851623][ T5943] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 942.866100][T10050] vhci_hcd: disconnect device [ 942.878496][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.903545][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.910736][T10050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.913393][ T5943] usb 1-1: config 0 descriptor?? [ 942.954216][ T5943] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 943.026930][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 943.037711][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.091472][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 943.121080][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.141344][ T5956] usb 2-1: config 0 descriptor?? [ 943.235668][T18956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.329069][T18956] veth0_vlan: entered promiscuous mode [ 943.352633][T18956] veth1_vlan: entered promiscuous mode [ 943.369587][T19108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.409510][T19108] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 943.445298][T18956] veth0_macvtap: entered promiscuous mode [ 943.474324][T18956] veth1_macvtap: entered promiscuous mode [ 943.520192][T18956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.551496][T18956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.560168][ T5943] gspca_sonixj: reg_w1 err -71 [ 943.570748][ T5943] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 943.580141][T17403] usb 5-1: USB disconnect, device number 82 [ 943.593257][T18956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.603293][ T5943] usb 1-1: USB disconnect, device number 94 [ 943.625578][T18956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.644940][T18956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.655625][T18956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.808526][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.825355][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.892848][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.914769][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.936264][T17403] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 945.145391][T17403] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 945.181854][T17403] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 945.232742][ T5956] usb 2-1: USB disconnect, device number 56 [ 945.368807][T17403] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 945.429640][T17403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.567461][T19164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 945.592604][T17403] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 946.188371][ T5923] vhci_hcd: vhci_device speed not set [ 946.355612][T19193] netlink: 'syz.4.3617': attribute type 10 has an invalid length. [ 946.384223][T19193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3617'. [ 946.409160][T19193] dummy0: entered promiscuous mode [ 946.439027][T19193] bridge0: port 3(dummy0) entered blocking state [ 946.536391][T19193] bridge0: port 3(dummy0) entered disabled state [ 946.551454][T19193] dummy0: entered allmulticast mode [ 946.566556][T19193] bridge0: port 3(dummy0) entered blocking state [ 946.572994][T19193] bridge0: port 3(dummy0) entered forwarding state [ 948.004830][T19219] fuse: Unknown parameter 'ӿ V @Eod{Cx@ ZH' [ 948.033114][T19220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3618'. [ 948.059901][T19220] ALSA: mixer_oss: invalid index 40000 [ 948.155809][ T48] usb 6-1: USB disconnect, device number 77 [ 948.416241][ T5956] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 948.648723][ T5956] usb 1-1: config 0 has no interfaces? [ 948.678002][ T5956] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 948.687336][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.726415][ T5956] usb 1-1: Product: syz [ 948.741352][ T5956] usb 1-1: Manufacturer: syz [ 948.761103][ T5956] usb 1-1: SerialNumber: syz [ 948.784661][ T5956] usb 1-1: config 0 descriptor?? [ 948.816824][ T48] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 948.996655][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 949.013758][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.024480][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.049879][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.060889][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.093457][ T48] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 949.126233][ T48] usb 6-1: config 0 has no interface number 0 [ 949.200648][ T48] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 949.228810][ T48] usb 6-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 949.248901][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.279479][ T48] usb 6-1: Product: syz [ 949.336432][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3624'. [ 949.348985][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3624'. [ 949.359585][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3624'. [ 949.391090][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3624'. [ 949.419093][ T48] usb 6-1: Manufacturer: syz [ 949.464816][ T48] usb 6-1: SerialNumber: syz [ 949.501252][ T48] usb 6-1: config 0 descriptor?? [ 949.532998][T19226] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 949.580015][ T48] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 949.772754][T19226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.786958][T19226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.801567][ T48] usb 6-1: USB disconnect, device number 78 [ 949.946623][ T5923] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 950.076390][ T5923] usb 2-1: device descriptor read/64, error -71 [ 950.316680][ T5923] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 950.466399][ T5923] usb 2-1: device descriptor read/64, error -71 [ 950.576819][ T5923] usb usb2-port1: attempt power cycle [ 950.687170][ T977] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 950.868239][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.878905][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.892623][T19260] loop2: detected capacity change from 0 to 7 [ 950.893175][ T977] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.905161][T19260] loop2: [POWERTEC] p1 p2 p3 [ 950.915599][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.915903][T19260] loop2: p2 start 4294967287 is beyond EOD, [ 950.923966][ T977] usb 6-1: Product: syz [ 950.923988][ T977] usb 6-1: Manufacturer: syz [ 950.939854][ T5923] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 950.947814][ T977] usb 6-1: SerialNumber: syz [ 950.967790][ T5923] usb 2-1: device descriptor read/8, error -71 [ 950.990341][T19260] truncated [ 951.001834][T19260] loop2: p3 start 1932423285 is beyond EOD, truncated [ 951.097498][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 951.203063][ T977] usb 6-1: 0:2 : does not exist [ 951.215859][ T977] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 951.224144][ T5923] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 951.257390][ T5923] usb 2-1: device descriptor read/8, error -71 [ 951.276911][ T977] usb 6-1: USB disconnect, device number 79 [ 951.311138][ T5956] usb 1-1: USB disconnect, device number 95 [ 951.361594][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.392556][ T5923] usb usb2-port1: unable to enumerate USB device [ 952.246340][ T977] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 952.287501][T17403] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 952.423162][ T977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 952.438439][ T977] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 952.448923][ T977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 952.458866][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.477055][T17403] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 952.488731][T19268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 952.504144][T17403] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.515299][ T977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 952.533802][T17403] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 952.555114][T17403] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 952.580340][T17403] usb 6-1: Product: syz [ 952.584651][T17403] usb 6-1: Manufacturer: syz [ 952.604995][T17403] usb 6-1: SerialNumber: syz [ 952.625744][T17403] usb 6-1: config 0 descriptor?? [ 952.663639][T17403] usb 6-1: selecting invalid altsetting 0 [ 952.798483][T19287] FAULT_INJECTION: forcing a failure. [ 952.798483][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.816782][T19287] CPU: 1 UID: 0 PID: 19287 Comm: syz.4.3640 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 952.816808][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.816820][T19287] Call Trace: [ 952.816828][T19287] [ 952.816836][T19287] dump_stack_lvl+0x189/0x250 [ 952.816867][T19287] ? __pfx____ratelimit+0x10/0x10 [ 952.816892][T19287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.816916][T19287] ? __pfx__printk+0x10/0x10 [ 952.816935][T19287] ? __might_fault+0xb0/0x130 [ 952.816963][T19287] should_fail_ex+0x414/0x560 [ 952.816989][T19287] _copy_from_iter+0x1db/0x16f0 [ 952.817017][T19287] ? rcu_is_watching+0x15/0xb0 [ 952.817042][T19287] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 952.817062][T19287] ? __pfx__copy_from_iter+0x10/0x10 [ 952.817085][T19287] ? __build_skb_around+0x257/0x3e0 [ 952.817108][T19287] ? netlink_sendmsg+0x642/0xb30 [ 952.817126][T19287] ? skb_put+0x11b/0x210 [ 952.817148][T19287] netlink_sendmsg+0x6b2/0xb30 [ 952.817176][T19287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.817197][T19287] ? aa_sock_msg_perm+0x94/0x160 [ 952.817219][T19287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.817240][T19287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.817260][T19287] __sock_sendmsg+0x21c/0x270 [ 952.817287][T19287] ____sys_sendmsg+0x52d/0x830 [ 952.817312][T19287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.817340][T19287] ? import_iovec+0x74/0xa0 [ 952.817361][T19287] ___sys_sendmsg+0x21f/0x2a0 [ 952.817383][T19287] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.817436][T19287] ? __fget_files+0x2a/0x420 [ 952.817455][T19287] ? __fget_files+0x3a0/0x420 [ 952.817484][T19287] __sys_sendmmsg+0x227/0x430 [ 952.817510][T19287] ? __pfx___sys_sendmmsg+0x10/0x10 [ 952.817528][T19287] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 952.817577][T19287] ? ksys_write+0x22a/0x250 [ 952.817597][T19287] ? __pfx_ksys_write+0x10/0x10 [ 952.817611][T19287] ? rcu_is_watching+0x15/0xb0 [ 952.817646][T19287] __x64_sys_sendmmsg+0xa0/0xc0 [ 952.817675][T19287] do_syscall_64+0xfa/0x3b0 [ 952.817697][T19287] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.817720][T19287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.817738][T19287] ? clear_bhb_loop+0x60/0xb0 [ 952.817760][T19287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.817778][T19287] RIP: 0033:0x7f855eb8e929 [ 952.817794][T19287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.817810][T19287] RSP: 002b:00007f855f971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 952.817829][T19287] RAX: ffffffffffffffda RBX: 00007f855edb5fa0 RCX: 00007f855eb8e929 [ 952.817841][T19287] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 952.817854][T19287] RBP: 00007f855f971090 R08: 0000000000000000 R09: 0000000000000000 [ 952.817865][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.817877][T19287] R13: 0000000000000000 R14: 00007f855edb5fa0 R15: 00007f855eedfa28 [ 952.817904][T19287] [ 953.225271][T19292] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 953.663543][ T48] usb 6-1: USB disconnect, device number 80 [ 953.666665][T19306] delete_channel: no stack [ 954.496805][ T977] usb 1-1: USB disconnect, device number 96 [ 956.202726][T19315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.177609][T19137] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 957.360227][T19137] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.378544][T19137] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.404147][T19137] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.415219][T19137] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.426446][ T48] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 957.444148][T19137] usb 5-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 957.456339][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.464574][T19137] usb 5-1: Product: syz [ 957.471122][T19137] usb 5-1: Manufacturer: syz [ 957.476486][T19137] usb 5-1: SerialNumber: syz [ 957.487788][T19137] cdc_ncm 5-1:1.0: skipping garbage [ 957.607468][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 957.621376][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 957.645614][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.679913][ T48] usb 6-1: config 0 has no interfaces? [ 957.695283][ T48] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 957.705658][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.715694][ T48] usb 6-1: Product: syz [ 957.720441][ T48] usb 6-1: Manufacturer: syz [ 957.725066][ T48] usb 6-1: SerialNumber: syz [ 957.733254][ T48] usb 6-1: config 0 descriptor?? [ 957.937469][T19343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.966410][T19347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.975248][T19343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.985697][T19347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.008784][ T48] usb 6-1: USB disconnect, device number 81 [ 958.339900][T19367] FAULT_INJECTION: forcing a failure. [ 958.339900][T19367] name failslab, interval 1, probability 0, space 0, times 0 [ 958.352903][T19367] CPU: 0 UID: 0 PID: 19367 Comm: syz.0.3663 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 958.352932][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.352944][T19367] Call Trace: [ 958.352953][T19367] [ 958.352962][T19367] dump_stack_lvl+0x189/0x250 [ 958.352993][T19367] ? __pfx____ratelimit+0x10/0x10 [ 958.353018][T19367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.353044][T19367] ? __pfx__printk+0x10/0x10 [ 958.353070][T19367] ? ref_tracker_alloc+0x318/0x460 [ 958.353094][T19367] should_fail_ex+0x414/0x560 [ 958.353128][T19367] should_failslab+0xa8/0x100 [ 958.353149][T19367] kmem_cache_alloc_noprof+0x73/0x3c0 [ 958.353176][T19367] ? skb_clone+0x212/0x3a0 [ 958.353203][T19367] skb_clone+0x212/0x3a0 [ 958.353229][T19367] __netlink_deliver_tap+0x404/0x850 [ 958.353263][T19367] ? netlink_deliver_tap+0x2e/0x1b0 [ 958.353284][T19367] netlink_deliver_tap+0x19c/0x1b0 [ 958.353305][T19367] netlink_unicast+0x72f/0x8d0 [ 958.353334][T19367] netlink_sendmsg+0x805/0xb30 [ 958.353362][T19367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.353386][T19367] ? aa_sock_msg_perm+0x94/0x160 [ 958.353410][T19367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.353432][T19367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.353453][T19367] __sock_sendmsg+0x21c/0x270 [ 958.353481][T19367] ____sys_sendmsg+0x52d/0x830 [ 958.353509][T19367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.353539][T19367] ? import_iovec+0x74/0xa0 [ 958.353560][T19367] ___sys_sendmsg+0x21f/0x2a0 [ 958.353585][T19367] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.353643][T19367] ? __fget_files+0x2a/0x420 [ 958.353661][T19367] ? __fget_files+0x3a0/0x420 [ 958.353691][T19367] __sys_sendmmsg+0x227/0x430 [ 958.353719][T19367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 958.353737][T19367] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 958.353789][T19367] ? ksys_write+0x22a/0x250 [ 958.353808][T19367] ? __pfx_ksys_write+0x10/0x10 [ 958.353832][T19367] __x64_sys_sendmmsg+0xa0/0xc0 [ 958.353855][T19367] do_syscall_64+0xfa/0x3b0 [ 958.353879][T19367] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.353902][T19367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.353920][T19367] ? clear_bhb_loop+0x60/0xb0 [ 958.353942][T19367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.353960][T19367] RIP: 0033:0x7f53a7f8e929 [ 958.353977][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.353993][T19367] RSP: 002b:00007f53a8d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.354013][T19367] RAX: ffffffffffffffda RBX: 00007f53a81b5fa0 RCX: 00007f53a7f8e929 [ 958.354026][T19367] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 958.354039][T19367] RBP: 00007f53a8d69090 R08: 0000000000000000 R09: 0000000000000000 [ 958.354051][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.354063][T19367] R13: 0000000000000000 R14: 00007f53a81b5fa0 R15: 00007f53a82dfa28 [ 958.354092][T19367] [ 958.796784][T17403] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 958.882199][T19343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.905934][T19373] loop4: detected capacity change from 0 to 7 [ 958.920434][T19343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.946464][T17403] usb 2-1: Using ep0 maxpacket: 8 [ 958.953913][T17403] usb 2-1: config 2 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 958.958619][ T7517] Dev loop4: unable to read RDB block 7 [ 958.967245][T17403] usb 2-1: config 2 interface 0 has no altsetting 0 [ 958.973101][ T7517] loop4: unable to read partition table [ 958.979342][T17403] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 958.979369][T17403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.994663][T19137] cdc_ncm 5-1:1.0: bind() failure [ 959.022342][T19137] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 959.030794][ T7517] loop4: partition table beyond EOD, truncated [ 959.049880][T19137] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 959.088332][T19137] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 959.098812][T19373] Dev loop4: unable to read RDB block 7 [ 959.104430][T19373] loop4: unable to read partition table [ 959.125044][T19373] loop4: partition table beyond EOD, truncated [ 959.183587][T19383] lo: MTU too low for tipc bearer [ 959.189028][T19383] tipc: Enabling of bearer rejected, failed to enable media [ 959.217642][T19373] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 959.274434][ T977] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 959.295660][ T5205] Dev loop4: unable to read RDB block 7 [ 959.302941][T19137] usb 5-1: USB disconnect, device number 83 [ 959.307416][ T5205] loop4: unable to read partition table [ 959.332891][ T5205] loop4: partition table beyond EOD, truncated [ 959.459724][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 959.504547][T19364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.518150][T19364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.531164][ T977] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 959.558837][ T977] usb 6-1: config 0 has no interface number 0 [ 959.757193][T17403] usbhid 2-1:2.0: can't add hid device: -71 [ 959.757303][T17403] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 959.941096][T17403] usb 2-1: USB disconnect, device number 61 [ 959.970338][ T977] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 959.970372][ T977] usb 6-1: config 0 interface 244 has no altsetting 0 [ 959.996605][ T48] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 960.016508][ T977] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 960.016541][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.016561][ T977] usb 6-1: Product: syz [ 960.016577][ T977] usb 6-1: Manufacturer: syz [ 960.016592][ T977] usb 6-1: SerialNumber: syz [ 960.025219][ T977] usb 6-1: config 0 descriptor?? [ 960.031854][ T977] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 960.210692][ T48] usb 3-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 960.224262][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.258052][T19379] netlink: 186232 bytes leftover after parsing attributes in process `syz.5.3666'. [ 960.290486][T19379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.299481][T19379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.348147][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 960.550303][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.598717][ T48] usb 3-1: config 0 descriptor?? [ 960.617724][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 960.712557][ T977] snd_usb_toneport 6-1:0.244: set_interface failed [ 960.736467][ T977] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 960.756493][ T977] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 960.804092][ T977] usb 6-1: USB disconnect, device number 82 [ 961.053959][T19401] FAULT_INJECTION: forcing a failure. [ 961.053959][T19401] name failslab, interval 1, probability 0, space 0, times 0 [ 961.086593][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.1.3674 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 961.086619][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 961.086630][T19401] Call Trace: [ 961.086638][T19401] [ 961.086646][T19401] dump_stack_lvl+0x189/0x250 [ 961.086675][T19401] ? __pfx____ratelimit+0x10/0x10 [ 961.086700][T19401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.086724][T19401] ? __pfx__printk+0x10/0x10 [ 961.086756][T19401] should_fail_ex+0x414/0x560 [ 961.086780][T19401] should_failslab+0xa8/0x100 [ 961.086800][T19401] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 961.086817][T19401] ? __alloc_skb+0x112/0x2d0 [ 961.086839][T19401] __alloc_skb+0x112/0x2d0 [ 961.086859][T19401] rtnl_bridge_notify+0x9e/0x260 [ 961.086883][T19401] rtnl_bridge_setlink+0x696/0x7d0 [ 961.086909][T19401] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 961.086937][T19401] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 961.086954][T19401] rtnetlink_rcv_msg+0x779/0xb70 [ 961.086976][T19401] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 961.086993][T19401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 961.087008][T19401] ? ref_tracker_free+0x63a/0x7d0 [ 961.087028][T19401] ? __copy_skb_header+0xa7/0x550 [ 961.087051][T19401] ? __pfx_ref_tracker_free+0x10/0x10 [ 961.087093][T19401] netlink_rcv_skb+0x205/0x470 [ 961.087115][T19401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 961.087134][T19401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 961.087166][T19401] ? netlink_deliver_tap+0x2e/0x1b0 [ 961.087185][T19401] ? netlink_deliver_tap+0x2e/0x1b0 [ 961.087209][T19401] netlink_unicast+0x758/0x8d0 [ 961.087239][T19401] netlink_sendmsg+0x805/0xb30 [ 961.087268][T19401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.087290][T19401] ? aa_sock_msg_perm+0x94/0x160 [ 961.087314][T19401] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 961.087335][T19401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.087356][T19401] __sock_sendmsg+0x21c/0x270 [ 961.087385][T19401] ____sys_sendmsg+0x52d/0x830 [ 961.087411][T19401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.087442][T19401] ? import_iovec+0x74/0xa0 [ 961.087463][T19401] ___sys_sendmsg+0x21f/0x2a0 [ 961.087486][T19401] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.087542][T19401] ? __fget_files+0x2a/0x420 [ 961.087561][T19401] ? __fget_files+0x3a0/0x420 [ 961.087590][T19401] __sys_sendmmsg+0x227/0x430 [ 961.087617][T19401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 961.087635][T19401] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 961.087685][T19401] ? ksys_write+0x22a/0x250 [ 961.087703][T19401] ? __pfx_ksys_write+0x10/0x10 [ 961.087727][T19401] __x64_sys_sendmmsg+0xa0/0xc0 [ 961.087750][T19401] do_syscall_64+0xfa/0x3b0 [ 961.087773][T19401] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.087812][T19401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.087829][T19401] ? clear_bhb_loop+0x60/0xb0 [ 961.087849][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.087867][T19401] RIP: 0033:0x7fc3d8b8e929 [ 961.087883][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.087898][T19401] RSP: 002b:00007fc3d9974038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 961.087918][T19401] RAX: ffffffffffffffda RBX: 00007fc3d8db5fa0 RCX: 00007fc3d8b8e929 [ 961.087931][T19401] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 961.087942][T19401] RBP: 00007fc3d9974090 R08: 0000000000000000 R09: 0000000000000000 [ 961.087953][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.087964][T19401] R13: 0000000000000000 R14: 00007fc3d8db5fa0 R15: 00007fc3d8edfa28 [ 961.087994][T19401] [ 961.470951][T19403] pim6reg1: entered promiscuous mode [ 961.479909][T19403] pim6reg1: entered allmulticast mode [ 961.796852][ T5956] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 961.811822][T19414] fuse: Unknown parameter 'gdW' [ 961.896310][T19137] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 961.986363][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 961.994238][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 962.005440][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.016070][ T5956] usb 2-1: config 0 has no interfaces? [ 962.025070][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 962.035611][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.044203][ T5956] usb 2-1: Product: syz [ 962.047224][T19137] usb 6-1: Using ep0 maxpacket: 16 [ 962.049066][ T5956] usb 2-1: Manufacturer: syz [ 962.058412][ T5956] usb 2-1: SerialNumber: syz [ 962.066018][ T5956] usb 2-1: config 0 descriptor?? [ 962.072445][T19137] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 962.087288][T19137] usb 6-1: config index 0 descriptor too short (expected 53884, got 18) [ 962.095767][T19137] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 962.106976][ T977] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 962.114736][T19137] usb 6-1: can't read configurations, error -22 [ 962.216329][ T48] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 962.251677][T19137] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 962.277644][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 962.284900][ T977] usb 5-1: config index 0 descriptor too short (expected 31780, got 36) [ 962.294355][ T977] usb 5-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 962.295133][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.303777][ T977] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 962.322519][ T977] usb 5-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 962.334230][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.335249][ T977] usb 5-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 962.352679][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.361723][ T977] usb 5-1: Product: syz [ 962.365783][ T5956] usb 2-1: USB disconnect, device number 62 [ 962.366136][ T977] usb 5-1: Manufacturer: syz [ 962.374461][ T48] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 962.377194][ T977] usb 5-1: SerialNumber: syz [ 962.400668][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.416372][T19137] usb 6-1: Using ep0 maxpacket: 16 [ 962.421882][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.422526][T19137] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 962.434025][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.450400][T19137] usb 6-1: config index 0 descriptor too short (expected 53884, got 18) [ 962.454628][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.459413][T19137] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 962.477382][T19137] usb 6-1: can't read configurations, error -22 [ 962.477460][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.484417][T19137] usb usb6-port1: attempt power cycle [ 962.505279][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.513869][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.528105][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.542340][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.553045][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.565896][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.566802][T17403] usb 3-1: USB disconnect, device number 83 [ 962.592512][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.601468][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.606076][ T977] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 962.636729][ T977] gspca_sn9c20x: Write register 1000 failed -71 [ 962.644823][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.653245][ T977] gspca_sn9c20x: Device initialization failed [ 962.663618][ T977] gspca_sn9c20x 5-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 962.673253][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.674429][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.699246][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.711712][ T977] usb 5-1: USB disconnect, device number 84 [ 962.714024][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.734940][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.745699][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.765840][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.773917][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.786750][ T48] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.803829][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.813686][ T48] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 962.823433][ T48] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 962.832190][ T48] usb 1-1: Product: syz [ 962.838276][ T48] usb 1-1: Manufacturer: syz [ 962.842896][ T48] usb 1-1: SerialNumber: syz [ 962.850881][ T48] usb 1-1: config 0 descriptor?? [ 962.856371][T19137] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 962.887428][ T48] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 962.908398][T19137] usb 6-1: Using ep0 maxpacket: 16 [ 962.926951][T19137] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 962.947683][T19137] usb 6-1: config index 0 descriptor too short (expected 53884, got 18) [ 962.963205][T19137] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 962.986445][T19137] usb 6-1: can't read configurations, error -22 [ 963.116598][T19137] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 963.167936][T19137] usb 6-1: Using ep0 maxpacket: 16 [ 963.184149][T19137] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 963.208181][T19137] usb 6-1: config index 0 descriptor too short (expected 53884, got 18) [ 963.236452][T19137] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 963.244953][T19137] usb 6-1: can't read configurations, error -22 [ 963.262606][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 963.270239][T19137] usb usb6-port1: unable to enumerate USB device [ 963.279555][ T5937] usb 1-1: USB disconnect, device number 97 [ 963.312662][ T5937] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 963.856563][ T5937] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 964.011834][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 964.021324][ T5937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 964.436567][T19137] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 964.464523][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 964.521294][ T5937] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 964.535206][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 964.562343][ T5937] usb 1-1: SerialNumber: syz [ 964.600055][T19137] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 964.615239][T19137] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.626369][ T48] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 964.640833][T19137] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 964.686975][T19137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 964.700688][ T5937] usb 1-1: config 0 descriptor?? [ 964.733014][T19137] usb 2-1: SerialNumber: syz [ 964.852964][ T48] usb 5-1: config 0 has no interfaces? [ 965.117643][ T48] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 965.126994][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.135545][ T48] usb 5-1: Product: syz [ 965.140223][ T48] usb 5-1: Manufacturer: syz [ 965.144936][ T48] usb 5-1: SerialNumber: syz [ 965.159322][ T48] usb 5-1: config 0 descriptor?? [ 965.391634][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.402400][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.736323][ T48] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 965.935610][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.953028][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.968212][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 965.980772][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.037796][ T5937] usb 1-1: USB disconnect, device number 98 [ 966.129081][ T48] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.379029][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.459489][ T48] usb 3-1: config 0 descriptor?? [ 966.596483][ T5937] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 966.788571][ T5937] usb 1-1: config 0 has no interfaces? [ 966.795481][ T5937] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 966.804908][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 966.815007][ T5937] usb 1-1: SerialNumber: syz [ 966.860857][ T5937] usb 1-1: config 0 descriptor?? [ 966.886918][T19137] usb 2-1: 0:2 : does not exist [ 966.897732][ T48] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 966.985865][T19137] usb 2-1: USB disconnect, device number 63 [ 967.094921][T17403] usb 1-1: USB disconnect, device number 99 [ 967.149550][ T7517] udevd[7517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.312754][ T5937] usb 5-1: USB disconnect, device number 85 [ 967.365168][T19479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3697'. [ 967.516525][T19137] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 967.516569][ T48] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 967.581752][T19487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.593787][T19487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.604768][T19487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.615450][T19487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.628411][T19487] delete_channel: no stack [ 967.687947][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 967.699307][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 967.724524][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.745433][ T48] usb 6-1: config 0 has no interfaces? [ 967.745474][T19137] usb 2-1: config 0 has no interfaces? [ 967.767860][T19137] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 967.774333][ T48] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 967.777016][T19137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.789044][T19137] usb 2-1: config 0 descriptor?? [ 967.819412][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.833809][ T48] usb 6-1: Product: syz [ 967.844370][ T48] usb 6-1: Manufacturer: syz [ 967.854349][ T48] usb 6-1: SerialNumber: syz [ 967.868464][ T48] usb 6-1: config 0 descriptor?? [ 968.060453][T19494] xt_hashlimit: size too large, truncated to 1048576 [ 968.075239][T19494] xt_hashlimit: max too large, truncated to 1048576 [ 968.124460][T19477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.156755][T19477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.181800][ T48] usb 6-1: USB disconnect, device number 87 [ 968.232416][T19494] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 968.596647][ T977] usb 3-1: reset high-speed USB device number 84 using dummy_hcd [ 968.666435][T19137] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 968.848615][T19137] usb 5-1: Using ep0 maxpacket: 16 [ 968.855970][T19137] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 968.880553][T19137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.917299][T19137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 968.950960][T19137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024 [ 969.040260][T19137] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.087867][T19137] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 969.149821][T19137] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 969.158668][T19137] usb 5-1: Manufacturer: syz [ 969.169844][T19137] usb 5-1: config 0 descriptor?? [ 969.411584][ T5943] usb 5-1: USB disconnect, device number 86 [ 969.436437][ T5923] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 969.583406][ T977] usb 3-1: device descriptor read/64, error -71 [ 969.636713][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.688120][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.760190][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 969.791637][ T5923] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.810784][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.825169][ T5923] usb 6-1: config 0 descriptor?? [ 969.856982][ T977] usb 3-1: reset high-speed USB device number 84 using dummy_hcd [ 970.060740][ T977] usb 3-1: device firmware changed [ 970.066856][ T5922] usb 2-1: USB disconnect, device number 64 [ 970.185588][T17403] usb 3-1: USB disconnect, device number 84 [ 970.215599][T19526] input: syz1 as /devices/virtual/input/input44 [ 970.273381][T19524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3708'. [ 970.346498][ T48] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 970.436684][ T5923] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 970.510035][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 970.547771][T17403] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 970.547913][ T5922] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 970.565577][ T48] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 970.586522][ T48] usb 1-1: config 6 has no interface number 0 [ 970.592643][ T48] usb 1-1: config 6 interface 113 has no altsetting 0 [ 970.666582][ T48] usb 1-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 970.682879][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.691042][ T48] usb 1-1: Product: syz [ 970.703181][ T48] usb 1-1: Manufacturer: syz [ 970.710044][ T48] usb 1-1: SerialNumber: syz [ 970.720490][T17403] usb 3-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 970.734400][T17403] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 970.765555][T17403] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 970.776769][T17403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.785701][T17403] usb 3-1: Product: syz [ 970.792477][ T5922] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 970.800857][ T5922] usb 2-1: config 0 has no interface number 0 [ 970.807096][ T5922] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.821789][ T5922] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 970.821814][T17403] usb 3-1: Manufacturer: syz [ 970.821850][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.844492][T17403] usb 3-1: SerialNumber: syz [ 970.920406][ T5922] usb 2-1: Product: syz [ 970.933363][T17403] usb 3-1: config 0 descriptor?? [ 970.936398][ T5922] usb 2-1: Manufacturer: syz [ 970.965122][ T5922] usb 2-1: SerialNumber: syz [ 970.972362][ T48] usb-storage 1-1:6.113: USB Mass Storage device detected [ 971.028446][ T48] usb-storage 1-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 971.064366][ T5922] usb 2-1: config 0 descriptor?? [ 971.083251][ T5922] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 971.324612][ T5937] usb 3-1: USB disconnect, device number 85 [ 971.343306][ T48] usb 1-1: USB disconnect, device number 100 [ 971.576348][ T5956] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 971.592383][T17403] usb 2-1: USB disconnect, device number 65 [ 971.601202][T17403] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 971.696791][ T5937] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 971.726414][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 971.735750][ T5956] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 971.746384][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.760875][ T5956] usb 5-1: Product: syz [ 971.765156][ T5956] usb 5-1: Manufacturer: syz [ 971.771285][ T5956] usb 5-1: SerialNumber: syz [ 971.801464][ T5956] usb 5-1: config 0 descriptor?? [ 971.852122][ T5937] usb 6-1: device descriptor read/64, error -32 [ 972.105671][ T5956] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 972.160115][ T5937] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 972.343565][ T5937] usb 6-1: device descriptor read/64, error -32 [ 972.577529][T19551] FAULT_INJECTION: forcing a failure. [ 972.577529][T19551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.592843][T19551] CPU: 1 UID: 0 PID: 19551 Comm: syz.1.3714 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 972.592869][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.592879][T19551] Call Trace: [ 972.592888][T19551] [ 972.592896][T19551] dump_stack_lvl+0x189/0x250 [ 972.592939][T19551] ? __pfx____ratelimit+0x10/0x10 [ 972.592963][T19551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.592989][T19551] ? __pfx__printk+0x10/0x10 [ 972.593021][T19551] should_fail_ex+0x414/0x560 [ 972.593048][T19551] _copy_to_user+0x31/0xb0 [ 972.593067][T19551] simple_read_from_buffer+0xe1/0x170 [ 972.593092][T19551] proc_fail_nth_read+0x1df/0x250 [ 972.593118][T19551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.593141][T19551] ? rw_verify_area+0x258/0x650 [ 972.593165][T19551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.593188][T19551] vfs_read+0x1fd/0x980 [ 972.593218][T19551] ? __pfx___mutex_lock+0x10/0x10 [ 972.593243][T19551] ? __pfx_vfs_read+0x10/0x10 [ 972.593269][T19551] ? __fget_files+0x2a/0x420 [ 972.593292][T19551] ? __fget_files+0x3a0/0x420 [ 972.593309][T19551] ? __fget_files+0x2a/0x420 [ 972.593336][T19551] ksys_read+0x145/0x250 [ 972.593364][T19551] ? __pfx_ksys_read+0x10/0x10 [ 972.593393][T19551] ? do_syscall_64+0xbe/0x3b0 [ 972.593421][T19551] do_syscall_64+0xfa/0x3b0 [ 972.593446][T19551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.593463][T19551] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 972.593481][T19551] ? clear_bhb_loop+0x60/0xb0 [ 972.593503][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.593520][T19551] RIP: 0033:0x7fc3d8b8d33c [ 972.593537][T19551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 972.593552][T19551] RSP: 002b:00007fc3d9974030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.593571][T19551] RAX: ffffffffffffffda RBX: 00007fc3d8db5fa0 RCX: 00007fc3d8b8d33c [ 972.593585][T19551] RDX: 000000000000000f RSI: 00007fc3d99740a0 RDI: 0000000000000005 [ 972.593597][T19551] RBP: 00007fc3d9974090 R08: 0000000000000000 R09: 0000000000000000 [ 972.593608][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.593619][T19551] R13: 0000000000000000 R14: 00007fc3d8db5fa0 R15: 00007fc3d8edfa28 [ 972.593649][T19551] [ 972.822624][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.054705][ T5937] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 973.076650][ T5937] usb 6-1: device descriptor read/8, error -32 [ 973.488698][T19535] netlink: 'syz.4.3710': attribute type 1 has an invalid length. [ 973.532853][T19535] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.602241][T19535] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.726624][T19535] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.741488][T19535] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.775007][T19535] bond2: (slave geneve2): making interface the new active one [ 973.849204][T19535] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 973.946841][ T5943] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 974.000730][ T48] usb 6-1: USB disconnect, device number 88 [ 974.080733][ T5956] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 974.122045][ T5943] usb 3-1: config 0 has no interfaces? [ 974.135338][ T5943] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 974.145405][T19575] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3721'. [ 974.147041][ T5956] usb 5-1: USB disconnect, device number 87 [ 974.156265][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.246279][ T5943] usb 3-1: Product: syz [ 974.271444][ T5943] usb 3-1: Manufacturer: syz [ 974.304415][ T5943] usb 3-1: SerialNumber: syz [ 974.351457][ T5943] usb 3-1: config 0 descriptor?? [ 974.530876][T19589] loop6: detected capacity change from 0 to 524287999 [ 974.789487][T19571] program syz.2.3720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 974.801877][T19571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.810840][T19571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.890117][ T5964] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 974.929928][T19558] syz.5.3718 (19558): drop_caches: 2 [ 975.246534][ T5943] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 975.381578][T19559] syz.5.3718 (19559): drop_caches: 2 [ 975.431438][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.445795][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.499726][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.515985][ T5943] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 975.531153][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.553223][ T5943] usb 5-1: config 0 descriptor?? [ 975.776753][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.806604][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.880014][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 975.899611][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 976.091916][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3723'. [ 976.260559][T19603] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 977.410080][ T5956] usb 3-1: USB disconnect, device number 86 [ 977.747125][T19627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3734'. [ 978.254256][ T5943] usbhid 5-1:0.0: can't add hid device: -71 [ 978.260553][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 978.353545][ T5943] usb 5-1: USB disconnect, device number 88 [ 979.066333][ T48] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 979.272052][ T48] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 979.280851][ T48] usb 3-1: config 0 has no interface number 0 [ 979.296353][ T48] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 979.378605][ T48] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 979.482870][ T48] usb 3-1: config 0 interface 255 has no altsetting 0 [ 979.519255][ T48] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 979.543480][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.614774][ T48] usb 3-1: config 0 descriptor?? [ 979.640562][ T48] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 979.956513][ T5937] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 979.964248][ T5956] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 980.026549][T19536] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 980.096896][ T5937] usb 2-1: device descriptor read/64, error -71 [ 980.116433][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 980.123351][ T5956] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 980.132044][ T5956] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 980.142591][ T5956] usb 1-1: config 0 has no interface number 0 [ 980.153982][ T5956] usb 1-1: too many endpoints for config 0 interface 103 altsetting 219: 67, using maximum allowed: 30 [ 980.175173][ T5956] usb 1-1: config 0 interface 103 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 980.189724][T19536] usb 5-1: Using ep0 maxpacket: 32 [ 980.212208][T19536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.226549][T19536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.236410][ T5956] usb 1-1: config 0 interface 103 has no altsetting 0 [ 980.246733][ T5956] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 980.255936][T19536] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 980.267846][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.275994][T19536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.366357][ T5937] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 980.406812][ T5956] usb 1-1: config 0 descriptor?? [ 980.415127][T19536] usb 5-1: config 0 descriptor?? [ 980.463009][T19536] hub 5-1:0.0: USB hub found [ 980.526359][ T5937] usb 2-1: device descriptor read/64, error -71 [ 980.637391][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 980.659376][T19536] hub 5-1:0.0: 1 port detected [ 980.673198][ T5937] usb usb2-port1: attempt power cycle [ 981.066420][ T5937] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 981.102598][ T5937] usb 2-1: device descriptor read/8, error -71 [ 981.287721][T19536] usb 5-1: USB disconnect, device number 89 [ 981.388791][ T5937] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 981.431256][ T5937] usb 2-1: device descriptor read/8, error -71 [ 981.656792][ T5937] usb usb2-port1: unable to enumerate USB device [ 981.694770][ T5943] usb 3-1: USB disconnect, device number 87 [ 981.857970][T19681] Cannot find add_set index 3 as target [ 982.671948][ T5943] usb 1-1: USB disconnect, device number 101 [ 983.223119][ T5943] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 983.265028][ T5943] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 983.446664][ T5937] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 983.616406][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 983.625992][ T5937] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 983.654883][ T5937] usb 2-1: config 0 has no interface number 0 [ 983.675541][ T5937] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 983.694033][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.733254][ T5937] usb 2-1: Product: syz [ 983.746253][ T5937] usb 2-1: Manufacturer: syz [ 983.763650][ T5937] usb 2-1: SerialNumber: syz [ 983.786328][ T48] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 983.805177][ T5937] usb 2-1: config 0 descriptor?? [ 983.978624][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 984.035987][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.136332][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 984.192187][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 984.212700][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.261783][T19723] netlink: 'syz.1.3761': attribute type 4 has an invalid length. [ 984.279881][ T48] usb 5-1: Product: syz [ 984.320582][ T48] usb 5-1: Manufacturer: syz [ 984.325275][ T48] usb 5-1: SerialNumber: syz [ 984.351531][T19723] netlink: 'syz.1.3761': attribute type 4 has an invalid length. [ 984.414334][T19726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.484585][T19726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.559349][ T5937] kaweth 2-1:0.235: Firmware present in device. [ 984.598943][ T48] usb 5-1: 0:2 : does not exist [ 984.667330][ T48] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 984.763844][ T5937] kaweth 2-1:0.235: Statistics collection: 0 [ 984.798464][ T48] usb 5-1: USB disconnect, device number 90 [ 984.805229][ T5937] kaweth 2-1:0.235: Multicast filter limit: 0 [ 984.821492][ T5937] kaweth 2-1:0.235: MTU: 0 [ 984.831636][ T5937] kaweth 2-1:0.235: Read MAC address 00:00:00:00:00:00 [ 984.960496][ T7517] udevd[7517]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.044458][ T5956] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 985.228945][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 985.239972][ T5956] usb 6-1: config 0 has an invalid interface number: 103 but max is 0 [ 985.249077][ T5956] usb 6-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 985.260232][ T5956] usb 6-1: config 0 has no interface number 0 [ 985.272111][ T5956] usb 6-1: too many endpoints for config 0 interface 103 altsetting 219: 67, using maximum allowed: 30 [ 985.308660][ T5956] usb 6-1: config 0 interface 103 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 985.331688][ T5956] usb 6-1: config 0 interface 103 has no altsetting 0 [ 985.338898][ T5956] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 985.364246][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.430939][ T5956] usb 6-1: config 0 descriptor?? [ 985.679923][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3767'. [ 985.937658][T19536] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 986.102554][T19536] usb 3-1: config 0 has no interfaces? [ 986.114593][T19536] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 986.124029][T19536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.146720][T19536] usb 3-1: Product: syz [ 986.162137][T19536] usb 3-1: Manufacturer: syz [ 986.185618][T19536] usb 3-1: SerialNumber: syz [ 986.327204][ T5937] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 986.346354][T19536] usb 3-1: config 0 descriptor?? [ 986.394860][ T5937] usb 2-1: USB disconnect, device number 70 [ 986.647410][T19754] pimreg: entered allmulticast mode [ 986.671171][T19754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 986.836328][T19536] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 986.856272][ T5937] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 987.026608][T19536] usb 5-1: Using ep0 maxpacket: 8 [ 987.034597][T19536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 987.048253][T19536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.066619][ T5937] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 987.075062][ T5937] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 987.082649][T19767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 987.185578][T19536] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 987.197000][T19536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.210418][ T5937] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 987.236371][T19536] usb 5-1: Product: syz [ 987.244093][T19536] usb 5-1: Manufacturer: syz [ 987.257456][ T5937] usb 2-1: config 220 has no interface number 2 [ 987.270045][T19536] usb 5-1: SerialNumber: syz [ 987.283483][ T5937] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 987.318494][T19536] usb 5-1: config 0 descriptor?? [ 987.361079][T19536] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 987.412031][ T5937] usb 2-1: config 220 interface 0 has no altsetting 0 [ 987.442031][ T5937] usb 2-1: config 220 interface 76 has no altsetting 0 [ 987.473075][ T5937] usb 2-1: config 220 interface 1 has no altsetting 0 [ 987.500640][ T5937] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 987.506510][ T5943] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 987.548237][T19536] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 987.561815][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.580965][T19536] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 987.592652][ T5937] usb 2-1: Product: syz [ 987.602756][ T5937] usb 2-1: Manufacturer: syz [ 987.637746][T19536] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 987.649755][ T5937] usb 2-1: SerialNumber: syz [ 987.656390][ T5943] usb 1-1: device descriptor read/64, error -71 [ 987.720327][T19536] usb 6-1: USB disconnect, device number 89 [ 987.886393][ T5937] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 987.903902][ T5937] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 987.910568][ T5937] usb 2-1: No valid video chain found. [ 987.930191][ T5937] usb 2-1: selecting invalid altsetting 0 [ 988.017721][ T5943] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 988.140541][ T5937] usb 2-1: selecting invalid altsetting 0 [ 988.146806][ T5937] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 988.179831][ T5943] usb 1-1: device descriptor read/64, error -71 [ 988.183105][ T5937] usb 2-1: USB disconnect, device number 71 [ 988.375835][ T5943] usb usb1-port1: attempt power cycle [ 988.608762][T17403] usb 3-1: USB disconnect, device number 88 [ 988.736322][ T5943] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 988.757613][ T5943] usb 1-1: device descriptor read/8, error -71 [ 988.802473][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3780'. [ 988.932827][T19797] sctp: [Deprecated]: syz.2.3780 (pid 19797) Use of int in maxseg socket option. [ 988.932827][T19797] Use struct sctp_assoc_value instead [ 989.016526][ T5943] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 989.046984][ T5943] usb 1-1: device descriptor read/8, error -71 [ 989.086483][T19536] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 989.167197][ T5943] usb usb1-port1: unable to enumerate USB device [ 989.226311][T17403] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 989.277343][T19536] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 989.302394][T19536] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 989.320144][T19536] usb 2-1: Product: syz [ 989.324517][T19536] usb 2-1: SerialNumber: syz [ 989.339275][T19536] usb 2-1: config 0 descriptor?? [ 989.386471][T17403] usb 3-1: device descriptor read/64, error -71 [ 989.656313][T17403] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 989.934007][T17403] usb 3-1: device descriptor read/64, error -71 [ 990.092492][T17403] usb usb3-port1: attempt power cycle [ 990.497157][T17403] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 990.547313][T17403] usb 3-1: device descriptor read/8, error -71 [ 990.689153][T19824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3789'. [ 990.796504][T17403] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 990.845335][T17403] usb 3-1: device descriptor read/8, error -71 [ 991.075308][T17403] usb usb3-port1: unable to enumerate USB device [ 991.211152][T19832] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3792'. [ 991.254548][ T5937] usb 5-1: USB disconnect, device number 91 [ 991.518334][ T5923] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 991.698779][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 991.707679][ T5923] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 991.772240][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 991.782840][ T5923] usb 6-1: can't read configurations, error -61 [ 992.146288][ T5923] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 992.319645][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 992.345881][ T5923] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 992.392308][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 992.406097][ T5923] usb 6-1: can't read configurations, error -61 [ 992.417463][T19854] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 992.430248][T19854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.441713][ T5923] usb usb6-port1: attempt power cycle [ 992.458963][T19854] vhci_hcd vhci_hcd.0: Device attached [ 992.476590][ T5937] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 992.491553][T19857] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 992.498099][T19857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 992.561380][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3798'. [ 992.598985][T19857] vhci_hcd vhci_hcd.0: Device attached [ 992.640074][ T5937] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 992.649955][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.669442][ T5937] usb 1-1: config 0 has no interface number 0 [ 992.687395][ T5937] usb 1-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 992.699934][ T5937] usb 1-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 992.706270][ T977] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 992.710558][ T5937] usb 1-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 992.783092][ T5937] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 992.797762][ T5923] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 992.801126][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.815140][ T5937] usb 1-1: Product: syz [ 992.819675][ T5937] usb 1-1: Manufacturer: syz [ 992.824325][ T5937] usb 1-1: SerialNumber: syz [ 992.832679][ T5937] usb 1-1: config 0 descriptor?? [ 992.834236][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 992.846073][ T5923] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 992.852051][ T5937] ldusb 1-1:0.224: Interrupt in endpoint not found [ 992.856818][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 992.866483][ T48] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 992.868661][ T5923] usb 6-1: can't read configurations, error -61 [ 992.990160][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.996673][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.016530][ T5923] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 993.032271][ T48] usb 3-1: descriptor type invalid, skip [ 993.039628][ T48] usb 3-1: descriptor type invalid, skip [ 993.050091][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 993.058258][ T5923] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 993.066605][T19536] ldusb 2-1:0.0: Interrupt in endpoint not found [ 993.069395][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 993.083208][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 993.086237][ T5923] usb 6-1: can't read configurations, error -61 [ 993.095564][T19536] usb 2-1: USB disconnect, device number 72 [ 993.103237][ T5956] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 993.124300][ T5923] usb usb6-port1: unable to enumerate USB device [ 993.130210][ T48] usb 3-1: too many endpoints for config 1 interface 0 altsetting 10: 65, using maximum allowed: 30 [ 993.147999][ T48] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 993.159030][ T48] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 993.178721][ T48] usb 3-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 993.192722][ T48] usb 3-1: config 1 interface 0 has no altsetting 0 [ 993.203367][ T48] usb 3-1: language id specifier not provided by device, defaulting to English [ 993.214790][ T48] usb 3-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 993.225268][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.235103][ T48] usb 3-1: Product: Г [ 993.239501][ T48] usb 3-1: Manufacturer: 䖩瓾챏偿쑝뵝䂌얆嘈㢾숥텂黉⇲Ლ괰뚄쳳ꖟꅆᄈё拮傇幔엹⛃㋝ꗲ련獉䖒꣮䆃ɫஓǏ꽳怐䃨뤉窷摎ʧἂ͘䬊趟嗃씙鈬䋫0 [ 993.262374][ T48] usb 3-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ [ 993.269786][ T5956] usb 5-1: device descriptor read/64, error -71 [ 993.284942][T19854] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 993.292490][T19854] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 993.407317][T19868] loop2: detected capacity change from 0 to 7 [ 993.414544][T19868] loop2: [POWERTEC] p1 p2 p3 [ 993.428139][T19868] loop2: p2 start 4294967287 is beyond EOD, truncated [ 993.434980][T19868] loop2: p3 start 1932423285 is beyond EOD, truncated [ 993.511383][T19858] vhci_hcd: connection closed [ 993.511637][T10051] vhci_hcd: stop threads [ 993.516772][ T5956] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 993.527190][T10051] vhci_hcd: release socket [ 993.529116][T19855] vhci_hcd: connection reset by peer [ 993.536717][T10051] vhci_hcd: disconnect device [ 993.552209][ T7517] udevd[7517]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 993.565817][ T1324] vhci_hcd: stop threads [ 993.573680][ T1324] vhci_hcd: release socket [ 993.577572][ T48] usbhid 3-1:1.0: can't add hid device: -71 [ 993.584115][ T48] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 993.586339][ T1324] vhci_hcd: disconnect device [ 993.620804][ T48] usb 3-1: USB disconnect, device number 93 [ 993.691057][T19874] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3805'. [ 993.706911][ T5956] usb 5-1: device descriptor read/64, error -71 [ 993.714124][T19874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 993.816740][ T5956] usb usb5-port1: attempt power cycle [ 994.156423][ T5956] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 994.199227][ T5956] usb 5-1: device descriptor read/8, error -71 [ 994.237608][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 994.237624][ T30] audit: type=1326 audit(1751171516.132:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19887 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2d58e929 code=0x7ffc0000 [ 994.266373][ T48] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 994.287219][ T30] audit: type=1326 audit(1751171516.172:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19887 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2d58e929 code=0x7ffc0000 [ 994.431963][ T30] audit: type=1326 audit(1751171516.182:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19887 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7eff2d58e929 code=0x7ffc0000 [ 994.464832][ T30] audit: type=1326 audit(1751171516.182:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19887 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2d58e929 code=0x7ffc0000 [ 994.489068][ T30] audit: type=1326 audit(1751171516.182:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19887 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2d58e929 code=0x7ffc0000 [ 994.536553][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 994.573091][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.576498][ T5956] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 994.617550][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.658997][ T5956] usb 5-1: device descriptor read/8, error -71 [ 994.759375][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 994.777636][ T5956] usb usb5-port1: unable to enumerate USB device [ 994.785431][ T48] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 994.793249][ T48] usb 2-1: can't read configurations, error -71 [ 995.007540][ T5923] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 995.166518][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 995.176382][ T5923] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 995.196661][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.229134][ T5923] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 995.265708][T17403] usb 1-1: USB disconnect, device number 106 [ 995.307690][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.336283][ T5923] usb 6-1: Product: syz [ 995.340499][ T5923] usb 6-1: Manufacturer: syz [ 995.375770][ T5923] usb 6-1: SerialNumber: syz [ 995.611768][ T30] audit: type=1326 audit(1751171517.482:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfd8e929 code=0x7ffc0000 [ 995.924572][ T5923] usb 6-1: 0:2 : does not exist [ 996.373727][ T5923] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 996.381248][ T30] audit: type=1326 audit(1751171517.482:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6edfd8e929 code=0x7ffc0000 [ 996.426746][ T30] audit: type=1326 audit(1751171517.482:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfd8e929 code=0x7ffc0000 [ 996.496448][ T30] audit: type=1326 audit(1751171517.482:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6edfd8e929 code=0x7ffc0000 [ 996.519207][ T30] audit: type=1326 audit(1751171517.482:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.2.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edfd8e929 code=0x7ffc0000 [ 996.541611][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.557403][ T5923] usb 6-1: USB disconnect, device number 94 [ 996.715493][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.986681][T17403] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 997.158358][T17403] usb 5-1: unable to get BOS descriptor or descriptor too short [ 997.190359][T17403] usb 5-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 997.232203][T17403] usb 5-1: config 66 interface 0 has no altsetting 0 [ 997.308599][T17403] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=e4.95 [ 997.392904][T17403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.418286][T17403] usb 5-1: Product: syz [ 997.422493][T17403] usb 5-1: Manufacturer: syz [ 997.446236][T17403] usb 5-1: SerialNumber: syz [ 997.487861][T19913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 997.981294][T17403] ati_remote2 5-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 998.021611][ T977] vhci_hcd: vhci_device speed not set [ 998.080458][T17403] usb 5-1: USB disconnect, device number 96 [ 998.345524][T19939] bridge0: port 3(veth0_to_bridge) entered blocking state [ 998.386563][T19939] bridge0: port 3(veth0_to_bridge) entered disabled state [ 998.394004][T19939] veth0_to_bridge: entered allmulticast mode [ 998.429108][T19939] veth0_to_bridge: entered promiscuous mode [ 998.489377][T19939] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 998.503175][T19939] bridge0: port 3(veth0_to_bridge) entered blocking state [ 998.510454][T19939] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 999.274701][T19965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.285794][T19954] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 999.286905][T19965] batadv_slave_0: entered promiscuous mode [ 999.287006][ T5956] IPVS: starting estimator thread 0... [ 999.293806][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 999.293821][ T30] audit: type=1326 audit(1751171521.172:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d8b8e929 code=0x7ffc0000 [ 999.293866][ T30] audit: type=1326 audit(1751171521.182:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d8b8e929 code=0x7ffc0000 [ 999.376423][T19966] IPVS: using max 31 ests per chain, 74400 per kthread [ 999.414681][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.418781][ T30] audit: type=1326 audit(1751171521.282:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d8b8e929 code=0x7ffc0000 [ 999.418828][ T30] audit: type=1326 audit(1751171521.282:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d8b8e929 code=0x7ffc0000 [ 999.418863][ T30] audit: type=1326 audit(1751171521.282:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d8b8e929 code=0x7ffc0000 [ 999.431526][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.446725][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.517803][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.524325][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.027299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.039893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.052447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.065006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.077555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.090131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.102659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.115201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.127722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1000.239726][ T5923] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1000.595458][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 1000.889815][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1000.933386][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.979484][ T5923] usb 2-1: Product: syz [ 1000.983698][ T5923] usb 2-1: Manufacturer: syz [ 1001.039123][ T5923] usb 2-1: SerialNumber: syz [ 1001.052560][ T5923] usb 2-1: config 0 descriptor?? [ 1001.616828][ T5155] Bluetooth: hci2: command tx timeout [ 1001.837802][ T5923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1004.004071][ T5155] Bluetooth: hci2: command tx timeout [ 1004.286257][ C1] net_ratelimit: 18999 callbacks suppressed [ 1004.286276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.286313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1004.292561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.304575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1004.316495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.328355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1004.340342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.352258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1004.364307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1004.376232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1006.144022][ T5155] Bluetooth: hci2: command tx timeout [ 1006.566983][ C1] sched: DL replenish lagged too much [ 1008.191112][ T5155] Bluetooth: hci2: command tx timeout [ 1009.296246][ C1] net_ratelimit: 24907 callbacks suppressed [ 1009.296267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.296504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1009.302626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.314584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1009.326551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.338366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1009.350635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.362311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1009.375306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.387121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1013.462570][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.306308][ C1] net_ratelimit: 18221 callbacks suppressed [ 1014.306328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.306568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1014.312566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1014.325542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1014.336660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.349361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1014.360494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.373305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1014.384354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1014.397151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.316316][ C0] net_ratelimit: 17470 callbacks suppressed [ 1019.316338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.316482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.323554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.334748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.347580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.358497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1019.371617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.382651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.395473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1019.406532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.326368][ C1] net_ratelimit: 17105 callbacks suppressed [ 1024.326390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.326615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1024.332666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1024.345619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1024.356680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.369521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1024.380557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.393388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1024.404363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1024.417347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1026.177554][ T5923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1029.336245][ C0] net_ratelimit: 16968 callbacks suppressed [ 1029.336266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1029.336268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.336665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.343505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1029.354512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1029.367450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1029.378467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.391437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1029.402429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.415248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1034.346372][ C1] net_ratelimit: 16763 callbacks suppressed [ 1034.346394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1034.346835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1034.352679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.367004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1034.376627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.389512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1034.400370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1034.413481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1034.424388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.437451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1039.356464][ C1] net_ratelimit: 17273 callbacks suppressed [ 1039.356486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1039.356812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1039.362848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.375602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1039.386747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.399623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1039.410661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1039.423518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1039.434694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.447388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1044.366379][ C1] net_ratelimit: 16145 callbacks suppressed [ 1044.366400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.367042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1044.372742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.385590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1044.396601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1044.409611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1044.420589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.433439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1044.444546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.457348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1049.376633][ C1] net_ratelimit: 16612 callbacks suppressed [ 1049.376654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.377121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1049.382989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.395695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1049.406834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1049.419711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1049.430849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.443615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1049.454793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.467416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1054.386516][ C1] net_ratelimit: 15677 callbacks suppressed [ 1054.386537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.386821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1054.392786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1054.405840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1054.416838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.429695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1054.440764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.453549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1054.464638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1054.477604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1056.405656][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.424613][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.028247][T11777] Bluetooth: hci1: command 0x0406 tx timeout [ 1059.396271][ C1] net_ratelimit: 17089 callbacks suppressed [ 1059.396292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.396442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1059.402612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1059.415649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1059.426673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.439562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1059.450614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.463444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1059.474411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1059.487394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1064.406212][ C1] net_ratelimit: 18846 callbacks suppressed [ 1064.406233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.406836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1064.412583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.424931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1064.436413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1064.449056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1064.460468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.472821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1064.484355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.496844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1069.416308][ C1] net_ratelimit: 19538 callbacks suppressed [ 1069.416330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1069.416781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1069.422594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1069.435028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1069.446543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.458918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1069.470413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.482758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1069.494175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1069.506883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.426337][ C0] net_ratelimit: 19929 callbacks suppressed [ 1074.426358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.426491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.433152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.444575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.457200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.468585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.481001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.492584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.505199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1074.516600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.436386][ C0] net_ratelimit: 18597 callbacks suppressed [ 1079.436407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1079.436445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.443080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1079.454708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.466986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1079.478648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.491017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1079.502477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.514897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1079.526506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.446249][ C1] net_ratelimit: 16719 callbacks suppressed [ 1084.446270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.446526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1084.452578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.464899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1084.476495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.489726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1084.500455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.512760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1084.524313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.537994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1089.456249][ C1] net_ratelimit: 16679 callbacks suppressed [ 1089.456270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.457593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1089.462500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.475331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1089.486780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.500025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1089.510616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.522981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1089.534494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.547992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.466247][ C0] net_ratelimit: 16502 callbacks suppressed [ 1094.466268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.466411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.472957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.484896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.498027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.508710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.521024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.532583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.545732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1094.556514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.476199][ C1] net_ratelimit: 16475 callbacks suppressed [ 1099.476219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.476664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1099.482484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.495046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1099.506537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.520133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1099.530362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.542882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1099.554255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.567779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1104.486389][ C1] net_ratelimit: 17164 callbacks suppressed [ 1104.486412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.486529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1104.492729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.505600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1104.517149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.530584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1104.541121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.553513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1104.565017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.578291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1108.753262][ T5205] udevd[5205]: worker [5964] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 1109.496374][ C1] net_ratelimit: 16904 callbacks suppressed [ 1109.496395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.496780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1109.502713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.515141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1109.526558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.539908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1109.550448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.562842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1109.574467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.587778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1114.506466][ C1] net_ratelimit: 17726 callbacks suppressed [ 1114.506487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.506534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1114.512809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.526247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1114.536694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.549157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1114.560632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.574004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1114.584467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.597036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1119.516518][ C1] net_ratelimit: 19445 callbacks suppressed [ 1119.516538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.517631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1119.522859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.535288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1119.546736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.560328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1119.570644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.583232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1119.594674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.608125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1124.526231][ C1] net_ratelimit: 19496 callbacks suppressed [ 1124.526252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.526615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1124.532638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.546085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1124.556533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.568947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1124.580385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.593841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1124.604350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.627288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1126.911264][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.952879][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.536671][ C1] net_ratelimit: 18035 callbacks suppressed [ 1129.536693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.537051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1129.543674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.556144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1129.567666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.580849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1129.591693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.603888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1129.615578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.628610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1130.816184][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1130.823215][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19958/1:b..l [ 1130.831689][ C0] rcu: (detected by 0, t=10503 jiffies, g=133345, q=3719 ncpus=2) [ 1130.839606][ C0] task:syz.0.3829 state:R running task stack:23624 pid:19958 tgid:19956 ppid:15717 task_flags:0x2040044c flags:0x00004002 [ 1130.854563][ C0] Call Trace: [ 1130.857863][ C0] [ 1130.860790][ C0] __schedule+0x16f5/0x4d00 [ 1130.865293][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1130.870582][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1130.875899][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1130.881123][ C0] ? __pfx___schedule+0x10/0x10 [ 1130.885966][ C0] ? __lock_acquire+0xab9/0xd20 [ 1130.890833][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1130.896148][ C0] preempt_schedule_irq+0xb5/0x150 [ 1130.901270][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1130.907004][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1130.912848][ C0] irqentry_exit+0x6f/0x90 [ 1130.917288][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1130.923274][ C0] RIP: 0010:kasan_addr_to_slab+0x2f/0x90 [ 1130.928911][ C0] Code: 56 53 48 89 fb e8 61 b8 50 ff 84 c0 74 3c 4c 8b 35 7e 5c 96 0b 48 89 df e8 3e b6 50 ff 48 c1 e8 06 48 83 e0 c0 49 8b 4c 06 08 c1 01 75 26 49 01 c6 66 90 41 0f b6 4e 33 c1 e1 18 31 c0 81 f9 [ 1130.948546][ C0] RSP: 0018:ffffc9000557eeb0 EFLAGS: 00000206 [ 1130.954643][ C0] RAX: 0000000000cba200 RBX: ffff888032e88280 RCX: ffff88801a441780 [ 1130.962645][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1130.971074][ C0] RBP: ffffc9000557f018 R08: 0000000000000000 R09: ffffffff817451d8 [ 1130.979063][ C0] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: dffffc0000000000 [ 1130.987478][ C0] R13: 1ffff92000aafdec R14: ffffea0000000000 R15: 0000000000000000 [ 1130.995484][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1131.000620][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1131.006783][ C0] kasan_record_aux_stack+0xf/0xd0 [ 1131.011916][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1131.018092][ C0] call_rcu+0x157/0x9c0 [ 1131.022247][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1131.026933][ C0] ? __phys_addr+0xd3/0x180 [ 1131.031472][ C0] ? blk_update_request+0x5eb/0xe70 [ 1131.036693][ C0] kmem_cache_free+0x309/0x400 [ 1131.041518][ C0] blk_update_request+0x5eb/0xe70 [ 1131.046567][ C0] blk_mq_end_request+0x3e/0x70 [ 1131.051443][ C0] null_queue_rq+0xbfe/0xe30 [ 1131.056070][ C0] null_queue_rqs+0x123/0x270 [ 1131.060759][ C0] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 1131.067007][ C0] blk_mq_dispatch_queue_requests+0x414/0x800 [ 1131.073116][ C0] blk_mq_flush_plug_list+0x432/0x550 [ 1131.078517][ C0] ? filemap_get_folios_tag+0x53b/0x630 [ 1131.084064][ C0] ? filemap_get_folios_tag+0xed/0x630 [ 1131.089539][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1131.095468][ C0] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 1131.101378][ C0] __blk_flush_plug+0x3d3/0x4b0 [ 1131.106234][ C0] ? __pfx___blk_flush_plug+0x10/0x10 [ 1131.111641][ C0] blk_finish_plug+0x5e/0x90 [ 1131.116265][ C0] blkdev_writepages+0x10e/0x170 [ 1131.121218][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 1131.126700][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1131.131919][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 1131.137399][ C0] do_writepages+0x32e/0x550 [ 1131.141989][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1131.147194][ C0] filemap_write_and_wait_range+0x217/0x310 [ 1131.153112][ C0] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 1131.159561][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 1131.165008][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1131.170034][ C0] bdev_release+0x192/0x650 [ 1131.174569][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 1131.179776][ C0] blkdev_release+0x15/0x20 [ 1131.184346][ C0] __fput+0x449/0xa70 [ 1131.188347][ C0] task_work_run+0x1d1/0x260 [ 1131.192967][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1131.198092][ C0] do_exit+0x6b5/0x22e0 [ 1131.202239][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1131.207276][ C0] ? __pfx_do_exit+0x10/0x10 [ 1131.211904][ C0] do_group_exit+0x21c/0x2d0 [ 1131.216517][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.221732][ C0] get_signal+0x1286/0x1340 [ 1131.226254][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1131.231819][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1131.237125][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1131.243275][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1131.248742][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1131.254058][ C0] do_syscall_64+0x2bd/0x3b0 [ 1131.258664][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.263852][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.269921][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1131.274619][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.280520][ C0] RIP: 0033:0x7f53a7f8e929 [ 1131.284921][ C0] RSP: 002b:00007f53a8d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1131.293336][ C0] RAX: 0000000000010106 RBX: 00007f53a81b6080 RCX: 00007f53a7f8e929 [ 1131.301318][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1131.309291][ C0] RBP: 00007f53a8010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1131.317276][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1131.325253][ C0] R13: 0000000000000001 R14: 00007f53a81b6080 R15: 00007f53a82dfa28 [ 1131.333252][ C0] [ 1134.316500][ T5923] usb 2-1: USB disconnect, device number 75 [ 1134.546297][ C1] net_ratelimit: 14718 callbacks suppressed [ 1134.546319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.547623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1134.552588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.565098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1134.576535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.590044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1134.600447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.612933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1134.624343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.643443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1139.556294][ C1] net_ratelimit: 16778 callbacks suppressed [ 1139.556316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.556472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1139.562675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.576644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1139.586626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.599357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1139.610564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.624331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0) [ 1139.634469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.647050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:57:d0:a2:d6:7e, vlan:0)