last executing test programs: 18m51.411364436s ago: executing program 3 (id=4497): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000021c0)=""/136, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 18m51.248542484s ago: executing program 3 (id=4498): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2230164cf063df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000003300), 0x0, 0x40010143, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 18m50.693222297s ago: executing program 3 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2800128024000180090001006c61737400000000040002801000fa7f0c000100"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 18m50.474853427s ago: executing program 3 (id=4503): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x7f, 0xffffffff}) unshare(0x20000400) r0 = syz_mount_image$fuse(0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r1, 0x4, 0x0) close(0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000001100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}, {0x20, 'net_prio.prioidx\x00'}, {0x20, '%f\''}], 0xa, "7d9940685a0b4388a1a1893e41ee768bf912a45649d5aae266078d19a4cd6a98a8222a6c185a029273ddcd443325fab6add8c1769d871a85d9dad5e33fc8c0ba4d506c0f573f9a4eec5f9ce8ec7e61279933d9305e630c694f2d2ac9a432f86d5029bcf9733683f130b14dc0b7e978b01e"}, 0x1083) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) writev(r0, &(0x7f00000047c0)=[{&(0x7f0000004840)="1cd6eb4875a8e9789172c3623995848a9c8aba9e73b0f1f7d6014816f88ed3e6204505aeba7d569aeb6caa961c4d5accfad3c376f0d931b315f22ee649898560e86b071d524de07cb7f5bd477afbef827e1858d0c5b26ac9f7f1f7319e2b9a6739ee555c76a8df6df551c706fcd8b95e0c95b8e9f97dfb41aa1c751d92370c4c6aaa7e09335785ae13258dc84b1a8d1753", 0xfffffccc}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004800)="d50b1a269a02d41cc1cb0757b4ed84414bdfd5501efb3684806bde6c2c86b194d39975f9d18e48c070ce9a026222dd7ed04a829ad9f69abecdcc0cef4415f153", 0x40}, {&(0x7f0000004740)="7eb151ea6b06e796d6bacdc86937f34480f20b872ecf490d4f6c22a227e3e9d2fd4b26bd72c887ad91ecb13a942a01d12ad3146fca27cc1dd674a4f754eebf5bbd585a", 0x43}], 0x4) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r6}) 18m48.697373397s ago: executing program 3 (id=4517): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="fb4fc04c63b03fde57454311fa58207fd06d", 0x12, 0x20000800, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000180)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000004}) r5 = dup(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000740)={0xb467d103e8338fee}) epoll_pwait2(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18m48.031780848s ago: executing program 3 (id=4520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0xcc040}, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 18m35.800370871s ago: executing program 2 (id=4616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20008000) 18m35.729735218s ago: executing program 2 (id=4617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200"], 0x118}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001300050000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400000000001400030064756d6d793000000000000000000000050021000000000024002b8008"], 0x60}}, 0x8084) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301c0c310080b000201223061090400000001013000"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000100), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000240)=[@request_death, @clear_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000540)="ec77b3c70b80e11380298b97c39316bd537d241cf2cfdfc81cc4a3d9ce3b4ac7e8591123380f80ad227532b79119d0802a1bc1bbd76d0488e0be0800a96f709d5640d8fb31b5ce1e6a3e9a47f9e8"}) close(r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x84000) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x38, 0x4004995}, 0x24004056) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={r10, 0xffffffff}, 0x8) 18m35.090555606s ago: executing program 2 (id=4619): syz_emit_ethernet(0xed, &(0x7f00000002c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x6a, 0xfffe, {0x30, 0x4, 0x1, 0x3, 0x6, 0x67, 0xe, 0x1, 0x32, 0x3, @local, @empty, {[@lsrr={0x83, 0x1b, 0x81, [@local, @remote, @multicast1, @remote, @empty, @multicast1]}, @timestamp={0x44, 0x4, 0xa5, 0x0, 0x8}, @ssrr={0x89, 0xf, 0x6c, [@private=0xa010102, @multicast2, @loopback]}, @lsrr={0x83, 0x13, 0x97, [@rand_addr=0x64010100, @loopback, @empty, @multicast1]}, @timestamp_addr={0x44, 0x54, 0x76, 0x1, 0x9, [{@empty, 0x8000}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}, {@empty, 0x2}, {@local, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@local, 0x2}, {@private=0xa010100}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x3, [{@empty, 0x800}]}, @lsrr={0x83, 0x3, 0xbd}, @lsrr={0x83, 0x7, 0xf7, [@remote]}]}}, "f61d68"}}}}}, 0x0) 18m35.030413706s ago: executing program 2 (id=4620): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) 18m34.966373402s ago: executing program 2 (id=4621): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x18, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x47c94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m34.812645618s ago: executing program 2 (id=4622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 18m32.814771457s ago: executing program 32 (id=4520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0xcc040}, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 18m30.817979971s ago: executing program 5 (id=4635): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 18m30.650247191s ago: executing program 5 (id=4638): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xcc040}, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 18m19.783197265s ago: executing program 33 (id=4622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 18m15.595360769s ago: executing program 34 (id=4638): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xcc040}, 0x26048040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 9m14.872206929s ago: executing program 0 (id=7451): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000800)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000200)="f697", 0x2}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m11.773231363s ago: executing program 0 (id=7462): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x2, 0x0) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x6, 0xbab, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001e6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a0101000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) close(r2) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x48}, 0x20000000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x100, @empty}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) 9m10.861051584s ago: executing program 0 (id=7467): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev(r0, &(0x7f0000001680)=[{&(0x7f00000001c0)="96d17b31d23db6", 0x7}, {0x0, 0x700}, {0x0}], 0x3, 0x2, 0xfff) 9m10.818179968s ago: executing program 0 (id=7468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0xfffffcab}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000305b0100140003006e657464657673696d3000000000000034001680300001802c000c8014"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xde3, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x9, 0x0, 0xbde], 0x1000, 0x1c4200}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x4, 0x800000, 0xe, 0x80, 0x2000000000000000, 0x100000001, 0x4, 0x101, 0x8, 0x8, 0x2, 0x700000000000000, 0x6, 0xfffe, 0x3, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x3, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xffffff7ffffffff9, 0x5, 0xffffffffffffffff, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000003, 0x0, 0x14f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0xfffffffffffffffd, 0x2000000000000007, 0x7fffffffffffffff, 0x38f, 0x7, 0xb, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0x7, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0x4, 0x7, 0x9, 0x21, 0xfffffffffffffbff, 0x400, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x5, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xe, 0x9, 0x9, 0x8fc3, 0xfff, 0x80, 0xac87, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x4, 0x2, 0x2, 0x9, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 9m9.813030688s ago: executing program 0 (id=7474): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) pipe(&(0x7f0000000140)) getpid() (async) syz_io_uring_setup(0x30da, &(0x7f0000000400)={0x0, 0x4ddb, 0x10000, 0x1, 0x2cd}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a006da8000057f2423c00001c14000031"], 0x24}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0xc0040, 0xe) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d9"], 0x4c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10020, 0x60}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x80}]}}}]}, 0x50}}, 0x0) (rerun: 32) 9m9.507785239s ago: executing program 0 (id=7475): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000580)={0x1}) 8m54.388760374s ago: executing program 35 (id=7475): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000580)={0x1}) 2m43.575782393s ago: executing program 8 (id=9128): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x7) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x4, {0x7, 0x25, 0x1, 0x8, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) sendfile(r9, r7, 0x0, 0x100000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 2m41.495079033s ago: executing program 8 (id=9132): r0 = socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x55, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000002, 0xa000}}}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) syz_emit_ethernet(0xf2, &(0x7f0000000e80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x2e, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xa, "1881ff8a62659257"}, @cipso={0x86, 0x46, 0x1, [{0x6, 0x10, "eda1bb806ca9c22aacc4dda3b9e3"}, {0x1, 0x7, "859365011f"}, {0x0, 0x7, "575bec01a2"}, {0x5, 0x5, "0c1e71"}, {0x1, 0x10, "b42378d27d5c1a2816d7dd7e0681"}, {0x2, 0x8, "7126b6f7fc31"}, {0xb, 0x5, "f4886b"}]}, @ssrr={0x89, 0x13, 0x72, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @local]}, @timestamp={0x44, 0x14, 0xe1, 0x0, 0x4, [0x9, 0xf9, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0xc, 0x53, 0x1, 0xe, [{@broadcast, 0x80000001}]}, @end, @timestamp={0x44, 0x18, 0xb2, 0x0, 0x7, [0xf, 0x81, 0x2, 0xf90c, 0x9]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0xbf, [@dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) close(0x4) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x20000000) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYRESHEX], 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x14) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x908, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x8, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x2745, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x3, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x2, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f, 0x2}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff, 0x4000}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x4, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0xfffffffe, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x3}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0x800, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000002}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0x2}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x90, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x5}, {0x0, 0x2}, {0xdf91, 0x1}, {0x3, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0xfe}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffdfffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1004, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) 2m39.716853061s ago: executing program 8 (id=9142): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m38.592900857s ago: executing program 8 (id=9148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r7, &(0x7f0000000140)='.\x00', r6, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x220) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r3, 0x0) read(r3, &(0x7f0000000080)=""/221, 0xdd) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r9, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c000080"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 2m38.383466281s ago: executing program 8 (id=9150): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2000000, 0x0, 0x0, 0x100}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2m37.936289445s ago: executing program 8 (id=9154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000206107002000128008000100677470001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="96e7b00126ce364cde024133f400fd60e94c35"], 0x40}, 0x1, 0xba01}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x80004, 0xbb72, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x15, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 2m37.469622863s ago: executing program 36 (id=9154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000206107002000128008000100677470001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="96e7b00126ce364cde024133f400fd60e94c35"], 0x40}, 0x1, 0xba01}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x80004, 0xbb72, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x15, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 27.34225581s ago: executing program 6 (id=9859): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000a40)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2, 0xa, 0xe, 0x2, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x4000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0xc85) 27.200043501s ago: executing program 6 (id=9860): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e00000000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 26.980287221s ago: executing program 4 (id=9862): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f946684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430afc162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf50104350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb2a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b70ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9960ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831db5933d93994ba3064279b18a5bd27098ce536bea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0xcf8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x3a5400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000c980)=@newtfilter={0x78, 0x2c, 0xf3f, 0x70bd25, 0x25ffdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5931, 0xe, 0x0, 0x2, 0x40, {0x9, 0x2, 0x9, 0x6, 0x4, 0x3}, {0x7, 0x1, 0x8, 0x1, 0xfe01, 0x33}, 0xd66, 0x5, 0xfffffff9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_pid(r8, &(0x7f0000000040)=0xffffffffffffffff, 0x12) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001440)={'syztnl2\x00', 0x0, 0x40, 0x8, 0x730e70d6, 0x9, {{0x2f, 0x4, 0x3, 0xc, 0xbc, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "96"}, @end, @cipso={0x86, 0x6e, 0x3, [{0x0, 0x10, "c300f5fd9447f8bc55468eeec81f"}, {0x7, 0xb, "42ce01cbac9553e1f5"}, {0x5, 0xd, "8da8a23efeafd2ce20b649"}, {0x0, 0x9, "55a2304d30eb61"}, {0x2, 0x10, "3449d9fe9f44bbdf086cbd586d4f"}, {0x0, 0x8, "8f20c9c5c7c0"}, {0x5, 0xf, "09d9bc53f1803de7278a76e8ec"}, {0x5, 0x10, "3fb94b40207c64a4f27547be865d"}]}, @ssrr={0x89, 0x17, 0xf6, [@rand_addr=0x64010100, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x1d, 0x3, [{0x6, 0x2}, {0x7, 0xf, "aa4a8b07685ba1aba95fe394bc"}, {0x7, 0x6, "a2ad2f4f"}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001600)={'syztnl0\x00', &(0x7f0000001580)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x6, 0x50, @rand_addr=' \x01\x00', @mcast1, 0x8000, 0xf800, 0x9, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001a80)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)={0x3f8, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd20f}}, {0x8}}}, {0x40, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x8000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0xfffffeb1, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @enabled={{}, {0x0, 0x6, r9}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a"], 0x24}}, 0x400040c0) r13 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r13, 0xc0045005, &(0x7f0000000240)=0x4) socket$netlink(0x10, 0x3, 0xe) 25.984247439s ago: executing program 4 (id=9866): syz_usb_connect$uac2(0x5, 0x83, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b032002eebad3ff00000600000000"]}, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) 25.42000357s ago: executing program 6 (id=9870): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x1000, 0x0, &(0x7f0000000300)=""/148, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xb000}) r1 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002140)) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0xa, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xe6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x9, 0x7}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x6, 0x6, 0x81, 0x9f, 0x6}, 0x26, &(0x7f00000002c0)={0x5, 0xf, 0x26, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "3279263e8c97f8394e109edec7abed99"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x772}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "60877dec6cd1f8a5406d238259b30d4db4f0adf78e18a5032712b105173b284a7b74d010803f97a9956b14f66f08efb345ec2727e7f16d3d941a6b5a5b7a36e1e1ae5f1aa4c33e059f47f53c29ced9ad46fc43686f702e9e908f28898bce3c9926c943b77cf2797aea6a2d5b81323172ab4c95a263f78722cde7f1cbb6c171b3b184e1e87eb67195fa6afdc46c20e8e41755521240193bb3e92059ddccb14c3aa06da22c546f03766bf2691e6c1a97c5e97ae73ea3f80fad7cfcc253"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000880)={0x14, &(0x7f0000000500)={0x0, 0x10, 0xd, {0xd, 0x7, "804f5436b4f00bf2251822"}}, &(0x7f0000000780)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "2fbe1a4d3d373059e7a20f1bc953b27e6c1787295942cbe57dec710483ca7ee56ad64285733b95eb870af9a4c4e9b2b20d6ff1727ac3d1bc44dbb3314c080c484ecbcb747b2b115a055524c4e1fb6680698e4cd1ff8d0c8190b2171c6aea3e777343673aefbc507a7b09ef06f7c6ec853ece013a1c2b0887fdf065193970e9e8596563fdb1d96cb3c8dc484069623ac6ae2e612b23aec3ee510e2374a180f7e24ca6e943189be173affd2e30093a978bdb64c9e88ab380e14a4f6fc811030ce0619f59552e1c5d3fc42dca33d868c2a175f26409c610fd5e43410e6bdadba6ffb5170ba5"}}}, &(0x7f0000000b40)={0x34, &(0x7f00000008c0)={0x40, 0x31, 0x2f, "609d60783507222516fa949fac77686bbe5ca582e95fb49dd0500ca50a8fd645bc6df2ff62f5d8c8da6b132632ae6c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0xf0, {0xee, "119df10cb53e481bace08ca3d69fb366aff5fd510ff7f54ae282674b2985561ce62d927662146831a56d8830ec6aee31bcfebf88228f3d43a1b038e343624f1454f2a3eeb7db292273204a5d29791f9f938c82f2e813ba212d011778cb3f882511a4e0d8cec25aab4b7272b35460d143b661744e524b96b45b8fa23de0fbdc71192d8898a23240a4b1b59c75254663666589abc62bf223f00fe9e0fff09a8edb1cfbc52298e59950b93e17356133e9f5d3e89eb09f6873f5e6650ef55ca592687169c89086afef9b17fbfefe09db807ca79478f3b38a75205dd9001aee7c7828b4a55fc948ae3eceb8143b4275c3"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="000047fdf5000000000000040000000000000000000000b451e4fcfe58ed0400650612b417fe1a3901ff847b8f30b3bce324c6d223c5b6c20e2dc0000000378fa22900b7404984168c1a4c8f5289f9855c1eb9a1e459a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x14) 23.776431477s ago: executing program 1 (id=9877): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.600892322s ago: executing program 6 (id=9878): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_usb_connect(0x3, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005920f010402038b1420100000001090238000100000000090400000371055900090582eb10f2ffff000200090502f3"], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000216000/0x2000)=nil, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x25, 0x2}) r2 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_gettime(r1, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) 23.598002271s ago: executing program 1 (id=9879): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562d84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.4338842s ago: executing program 9 (id=9880): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e00000000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23.402380543s ago: executing program 7 (id=9881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x1000f) 23.304690225s ago: executing program 1 (id=9882): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x2f97, 0x4, 0x0, 0x81, 0xfffffffb, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) socket$unix(0x1, 0x5, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 23.178172452s ago: executing program 1 (id=9883): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)=0xff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) sendmmsg$inet6(r1, &(0x7f0000004000)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @local, 0x3c}, 0x1c, &(0x7f0000003740)=[{&(0x7f00000004c0)="45a8debcb234d818cb0c9b33070c9ca2aa2ddb39520f9610e839c282d22f7f6ebed7e5f1f9c2e44654330f1ec4816e0c", 0x30}], 0x1}}], 0x1, 0x44804) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) 23.043454496s ago: executing program 1 (id=9884): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0xb4, 0xa, 0xb2b9, 0x26, 0x9, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe76b, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xc66, 0xa8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x402, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0xc, 0x2, 0x2e6bf783, 0x5, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x157b, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xbb3f, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={0x0}, 0x1, 0x0, 0x0, 0x40811}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500070000000a0018000303030303030000"], 0x30}}, 0xc0c4) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x1, 0x31324d4e, 0x3, @discrete={0x80000001, 0x6}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40088d5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 22.87275806s ago: executing program 4 (id=9885): r0 = semget$private(0x0, 0x1, 0xd3) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f00000004c0)=""/201) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000009c0)={&(0x7f0000000000), 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1cc, 0x0, 0x310, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1, 0xdb}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300)) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x800, 0x8, 0x2, 0x8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010800000000000000", @ANYRES32, @ANYRES64=r1, @ANYRESDEC=r0], 0x44}}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000ac0)={&(0x7f00000006c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x15) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff030000000905820267"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x0, 0x70a, 0x70bd25, 0x0, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xde7a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x93}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x240480c5) r7 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffab530000000033763c789f858871f20000000000000000000026256dff0e37428839ed2ace5ef9cadf6524a5551fa2cc6d9e42b484a3aa43c2ecaca7e86995525844b31b8640ad377e5a59481fa8406f8881cac3f3eb8e8073facc7a1134d74797c1f709b441970a0dc2a8c53a40abf844fd7cf0a7710d837d19c2c50ef7b8cb67e4ee708f131c220f4423943110166462827680308253402f41cbd477dc5f54ca05a222a2e78aa3fbace6f09f90bdf47c49fc91c2183992b19344825f3c2469"], 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.40692667s ago: executing program 7 (id=9886): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}}}, 0x30) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbcd246c00040008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 22.371458321s ago: executing program 1 (id=9887): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000800009040000090300020009210008000000290009058103"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2240, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0x1, 0x8, 0x5}, {0x28, 0x4, 0x5, 0xffdff034}, {0x6, 0x27, 0x2, 0x7}]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xfffffffd}}}, &(0x7f0000001300), 0x600) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000011c0)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x2000}, 0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000c000/0x1000)=nil) 22.168476522s ago: executing program 7 (id=9888): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x1000, 0x0, &(0x7f0000000300)=""/148, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xb000}) r1 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002140)) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0xa, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xe6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x9, 0x7}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x6, 0x6, 0x81, 0x9f, 0x6}, 0x26, &(0x7f00000002c0)={0x5, 0xf, 0x26, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "3279263e8c97f8394e109edec7abed99"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x9, 0x772}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "60877dec6cd1f8a5406d238259b30d4db4f0adf78e18a5032712b105173b284a7b74d010803f97a9956b14f66f08efb345ec2727e7f16d3d941a6b5a5b7a36e1e1ae5f1aa4c33e059f47f53c29ced9ad46fc43686f702e9e908f28898bce3c9926c943b77cf2797aea6a2d5b81323172ab4c95a263f78722cde7f1cbb6c171b3b184e1e87eb67195fa6afdc46c20e8e41755521240193bb3e92059ddccb14c3aa06da22c546f03766bf2691e6c1a97c5e97ae73ea3f80fad7cfcc253"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000880)={0x14, &(0x7f0000000500)={0x0, 0x10, 0x12, {0x12, 0x7, "804f5436b4f00bf225182297d5b1f979"}}, &(0x7f0000000780)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "2fbe1a4d3d373059e7a20f1bc953b27e6c1787295942cbe57dec710483ca7ee56ad64285733b95eb870af9a4c4e9b2b20d6ff1727ac3d1bc44dbb3314c080c484ecbcb747b2b115a055524c4e1fb6680698e4cd1ff8d0c8190b2171c6aea3e777343673aefbc507a7b09ef06f7c6ec853ece013a1c2b0887fdf065193970e9e8596563fdb1d96cb3c8dc484069623ac6ae2e612b23aec3ee510e2374a180f7e24ca6e943189be173affd2e30093a978bdb64c9e88ab380e14a4f6fc811030ce0619f59552e1c5d3fc42dca33d868c2a175f26409c610fd5e43410e6bdadba6ffb5170ba5"}}}, &(0x7f0000000b40)={0x34, &(0x7f00000008c0)={0x40, 0x31, 0x2f, "609d60783507222516fa949fac77686bbe5ca582e95fb49dd0500ca50a8fd645bc6df2ff62f5d8c8da6b132632ae6c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0xf0, {0xee, "119df10cb53e481bace08ca3d69fb366aff5fd510ff7f54ae282674b2985561ce62d927662146831a56d8830ec6aee31bcfebf88228f3d43a1b038e343624f1454f2a3eeb7db292273204a5d29791f9f938c82f2e813ba212d011778cb3f882511a4e0d8cec25aab4b7272b35460d143b661744e524b96b45b8fa23de0fbdc71192d8898a23240a4b1b59c75254663666589abc62bf223f00fe9e0fff09a8edb1cfbc52298e59950b93e17356133e9f5d3e89eb09f6873f5e6650ef55ca592687169c89086afef9b17fbfefe09db807ca79478f3b38a75205dd9001aee7c7828b4a55fc948ae3eceb8143b4275c3"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="000047fdf5000000000000040000000000000000000000b451e4fcfe58ed0400650612b417fe1a3901ff847b8f30b3bce324c6d223c5b6c20e2dc0000000378fa22900b7404984168c1a4c8f5289f9855c1eb9a1e459a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x14) 21.967464378s ago: executing program 4 (id=9889): clock_gettime(0x4, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x775d388a, 0x0, &(0x7f0000000540), &(0x7f00000002c0), 0x1000000000000270}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x44}}, 0x24044884) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000328bd7000fbdb03004400000008000300", @ANYRES32=r4, @ANYBLOB="0400bf001a00240082600330986c966c8cb01bb0048ba4044885840305240000"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x40000) (async) mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0x2) (async) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000035a000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x54, &(0x7f0000001280), 0x4) (async) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf29047c0000040000000c000380"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x3, &(0x7f0000000040)=""/174, &(0x7f0000000140)=0xae) (async) socket(0x10, 0x803, 0x0) 21.580288112s ago: executing program 9 (id=9890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 21.372748495s ago: executing program 4 (id=9891): unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000180000012bbd7000e1dbdf251d010600"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45"], 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000540)="d25a9850a9a91163f76c5357f3bbadf2650001000085d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e181d83dd712eaa86fc58a2cd8a8803ad7a6a2423eb2cc62741ac687b193eb857ef730c7bbace01f007452de19347aa56dcdf7a15ee2adb573eea382242c781c6e8e1709241a23dae05d5a1cfc4435a80a29b4927c156c51c43f27fb6975f667abbc4cb4e00503343f1dcdce1b286a6f0ed91b761aba1c2bb6a3704045631720cc73d17cd4a8f32e096b882b9a0b7ebd5b7815e1ab8ce2eafc4e02f1b5f40f3ae1df98f73ffa9c6e15ff47cac5e04e282f264634c517ad0d305f6826c4", 0xe9, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) r2 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000100)={0xa}) 21.357136383s ago: executing program 7 (id=9892): syz_clone(0x42908280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) (fail_nth: 2) 21.321866491s ago: executing program 6 (id=9893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 21.184259329s ago: executing program 6 (id=9894): userfaultfd(0x80001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x3, 0xffffffff, 0x8, 0x1, 0x3, 0x81}) socket$xdp(0x2c, 0x3, 0x0) 20.783282649s ago: executing program 9 (id=9895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101840, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) close(0x3) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3, 0x3}, &(0x7f0000000080)=0x8) 20.610528478s ago: executing program 9 (id=9896): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x1000f) 20.407899946s ago: executing program 9 (id=9897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="8c6d160f22e60fc73f66b8010000000f01d90f2f310fc7342ef2dd0f6766c744240098bd00006766c7442402bddc00006766c744240600000000670f0114242e0f23aa6766c7442400fc8400006766c74424026b5000006766c744240600000000670f011424", 0x66}], 0x1, 0x32, &(0x7f0000000100), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x303080, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1c}}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4) r8 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3}, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, 0xfffffffffffffffe, 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x295}]}) 20.047210433s ago: executing program 9 (id=9898): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e"}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x552}]}, 0x34}}, 0x0) 19.892174142s ago: executing program 7 (id=9899): r0 = semget$private(0x0, 0x3, 0x504) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/4096) semget$private(0x0, 0x4, 0x6) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000001000)=""/138) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)=[0x7, 0x9]) ftruncate(0xffffffffffffffff, 0xe3e) r1 = syz_open_dev$dvb_demux(&(0x7f0000001100), 0x5c, 0x28100) ioctl$DVB_DEMUX_DMX_QBUF(r1, 0xc0186f3f, &(0x7f0000001140)={0x9, 0xc, 0x4, 0x1, 0x4, 0x5}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001180), 0x10040, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000011c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000012c0)={r3, 0x5, &(0x7f0000001200)=[0x10, 0x8, 0x1, 0xffff, 0x9], &(0x7f0000001240)=[0x3, 0x5, 0x401], &(0x7f0000001280)=[0x9, 0x7, 0x6, 0x456, 0x1, 0x9, 0x0, 0x9]}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000001300)) r4 = syz_open_dev$sg(&(0x7f0000001340), 0x4, 0x4000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000001380)) semctl$GETPID(r0, 0x1, 0xb, &(0x7f00000013c0)=""/145) r5 = syz_open_dev$I2C(&(0x7f0000001480), 0x7, 0x80001) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000015c0)={&(0x7f0000001580)=[{0x8, 0x1, 0x88, &(0x7f00000014c0)="52c995517c5a88b4b8728d125b474333798ecc12dee3d80844b1ca7107531ff42d7a664e6a7b00fbab4ca02f7e56c09a3c40b73a3a3e4b66b0e1be888a9022aca5b0be7215393d52f737a6e3dbf6891e6c3b383eda27d5798d9bc04a3a87d82b274b16020e9ce2205b85305e84d9b283e64314f783c2cac5f1afdee1cc2c43b78242256abe9b78f7"}], 0x1}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000001600)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r7, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x1) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000001840)={0x990000, 0x1, 0x24, 0xffffffffffffffff, 0x0, &(0x7f0000001800)={0x990a30, 0x4222f399, '\x00', @p_u8=&(0x7f00000017c0)=0xd1}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001880)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3c) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r10, &(0x7f0000001900)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x2}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f0000001b40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xc4, 0x0, 0x21, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x91}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x93}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 19.87610024s ago: executing program 4 (id=9900): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e00000000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 19.781837138s ago: executing program 7 (id=9901): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) io_setup(0x0, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = socket(0x2, 0x80805, 0x1) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I%', 0x2}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1}) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0xb, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x203}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x9, 0x68, 0x8, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 0s ago: executing program 37 (id=9887): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000800009040000090300020009210008000000290009058103"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2240, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0x1, 0x8, 0x5}, {0x28, 0x4, 0x5, 0xffdff034}, {0x6, 0x27, 0x2, 0x7}]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xfffffffd}}}, &(0x7f0000001300), 0x600) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000011c0)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x2000}, 0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000c000/0x1000)=nil) kernel console output (not intermixed with test programs): rite submit urb error = -90 [ 1645.336617][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.357834][T11690] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1645.373948][T11690] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input245 [ 1645.424129][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.449592][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.490008][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.527843][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.554699][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.596624][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.646591][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.677771][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.691320][ T1578] syzkaller1: entered promiscuous mode [ 1645.698335][ T1578] syzkaller1: entered allmulticast mode [ 1645.722403][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.725298][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9617'. [ 1645.777061][T11690] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1645.809240][T11690] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1645.825086][T11690] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1645.864737][T11690] usb 7-1: USB disconnect, device number 35 [ 1645.882333][ T1602] usb usb8: usbfs: process 1602 (syz.4.9619) did not claim interface 0 before use [ 1645.985351][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.020339][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.055660][ T1609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1646.086772][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.103427][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.339872][ T1618] binder: 1612:1618 ioctl c0306201 2000000003c0 returned -14 [ 1646.349872][ T1619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.373962][ T1619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.396702][ T5646] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1646.820565][ T1626] FAULT_INJECTION: forcing a failure. [ 1646.820565][ T1626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1646.879027][ T1626] CPU: 0 UID: 0 PID: 1626 Comm: syz.7.9625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.879059][ T1626] Tainted: [L]=SOFTLOCKUP [ 1646.879066][ T1626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1646.879078][ T1626] Call Trace: [ 1646.879086][ T1626] [ 1646.879095][ T1626] dump_stack_lvl+0xe8/0x150 [ 1646.879121][ T1626] should_fail_ex+0x412/0x560 [ 1646.879151][ T1626] _copy_from_iter+0x1d3/0x1670 [ 1646.879181][ T1626] ? rcu_is_watching+0x15/0xb0 [ 1646.879212][ T1626] ? __pfx__copy_from_iter+0x10/0x10 [ 1646.879244][ T1626] ? netlink_sendmsg+0x650/0xb40 [ 1646.879268][ T1626] ? skb_put+0x11b/0x210 [ 1646.879295][ T1626] netlink_sendmsg+0x6c0/0xb40 [ 1646.879328][ T1626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.879356][ T1626] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1646.879382][ T1626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1646.879409][ T1626] ____sys_sendmsg+0x972/0x9f0 [ 1646.879433][ T1626] ? __might_fault+0xaf/0x130 [ 1646.879461][ T1626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.879496][ T1626] ? import_iovec+0x73/0xa0 [ 1646.879525][ T1626] ___sys_sendmsg+0x2a5/0x360 [ 1646.879551][ T1626] ? __lock_acquire+0x6b5/0x2cf0 [ 1646.879576][ T1626] ? __pfx____sys_sendmsg+0x10/0x10 [ 1646.879607][ T1626] ? kstrtouint+0x6e/0xe0 [ 1646.879651][ T1626] ? __fget_files+0x2a/0x420 [ 1646.879673][ T1626] ? __fget_files+0x3a0/0x420 [ 1646.879705][ T1626] __sys_sendmmsg+0x27c/0x4e0 [ 1646.879737][ T1626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1646.879761][ T1626] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1646.879804][ T1626] ? ksys_write+0x242/0x270 [ 1646.879831][ T1626] ? __pfx_ksys_write+0x10/0x10 [ 1646.879860][ T1626] __x64_sys_sendmmsg+0xa0/0xc0 [ 1646.879886][ T1626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.879917][ T1626] do_syscall_64+0x15f/0xf80 [ 1646.879934][ T1626] ? trace_irq_disable+0x3b/0x140 [ 1646.879960][ T1626] ? clear_bhb_loop+0x40/0x90 [ 1646.880038][ T1626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.880056][ T1626] RIP: 0033:0x7f941779ce59 [ 1646.880074][ T1626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.880090][ T1626] RSP: 002b:00007f94186ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1646.880109][ T1626] RAX: ffffffffffffffda RBX: 00007f9417a15fa0 RCX: 00007f941779ce59 [ 1646.880122][ T1626] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1646.880135][ T1626] RBP: 00007f94186ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.880146][ T1626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.880157][ T1626] R13: 00007f9417a16038 R14: 00007f9417a15fa0 R15: 00007f9417b3fa48 [ 1646.880184][ T1626] [ 1647.466325][T11133] usb 10-1: USB disconnect, device number 15 [ 1647.723184][ T1632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.735243][ T1632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.051885][ T1641] netlink: 'syz.1.9631': attribute type 10 has an invalid length. [ 1648.396552][T29974] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1648.439148][ T1650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.450293][ T1650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.512927][ T1650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.524375][ T1650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.569566][T29974] usb 10-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1648.590447][T29974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.606482][T29974] usb 10-1: config 0 descriptor?? [ 1648.616851][T29974] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1649.006470][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.015331][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.151918][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.162692][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.537796][T29974] gspca_spca505: reg write: error -110 [ 1649.548352][T29974] spca505 10-1:0.0: probe with driver spca505 failed with error -5 [ 1649.636502][ T5646] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1649.826494][ T5646] usb 7-1: Using ep0 maxpacket: 16 [ 1649.835444][ T5646] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 1649.857972][ T5646] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 1649.858095][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.875953][ T5646] usb 7-1: config 166 has no interface number 0 [ 1649.878996][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.896453][ T5646] usb 7-1: config 166 has no interface number 1 [ 1649.914818][ T5646] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1649.940805][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.943491][ T5646] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1649.950448][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.989848][ T5646] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1650.007088][ T5646] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1650.019031][ T5646] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1650.031272][ T5646] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1650.041679][ T5646] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1650.053976][ T5646] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1650.064192][ T5646] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1650.078134][ T5646] usb 7-1: config 166 interface 177 has no altsetting 0 [ 1650.085142][ T5646] usb 7-1: config 166 interface 34 has no altsetting 0 [ 1650.094984][ T5646] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1650.104512][ T5646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.112641][ T5646] usb 7-1: Product: syz [ 1650.116881][ T5646] usb 7-1: Manufacturer: syz [ 1650.121930][ T5646] usb 7-1: SerialNumber: syz [ 1650.349621][ T5646] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 1650.558888][ T5646] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 1650.598726][ T1701] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9650'. [ 1650.826054][ T5646] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5 [ 1650.842252][ T5646] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1650.852809][ T5646] uvcvideo 7-1:166.34: No valid video chain found. [ 1650.878180][ T5646] usb 7-1: USB disconnect, device number 36 [ 1651.091588][ T1707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.100933][ T1707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.128669][ T1707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.137874][ T1707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.181396][T11133] usb 10-1: USB disconnect, device number 16 [ 1651.504960][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.518637][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.760699][ T1720] FAULT_INJECTION: forcing a failure. [ 1651.760699][ T1720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.793334][ T1720] CPU: 0 UID: 0 PID: 1720 Comm: syz.4.9657 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.793367][ T1720] Tainted: [L]=SOFTLOCKUP [ 1651.793373][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1651.793385][ T1720] Call Trace: [ 1651.793396][ T1720] [ 1651.793405][ T1720] dump_stack_lvl+0xe8/0x150 [ 1651.793433][ T1720] should_fail_ex+0x412/0x560 [ 1651.793458][ T1720] _copy_from_iter+0x1d3/0x1670 [ 1651.793486][ T1720] ? rcu_is_watching+0x15/0xb0 [ 1651.793512][ T1720] ? __pfx__copy_from_iter+0x10/0x10 [ 1651.793539][ T1720] ? netlink_sendmsg+0x650/0xb40 [ 1651.793562][ T1720] ? skb_put+0x11b/0x210 [ 1651.793589][ T1720] netlink_sendmsg+0x6c0/0xb40 [ 1651.793622][ T1720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.793652][ T1720] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1651.793679][ T1720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1651.793707][ T1720] ____sys_sendmsg+0x972/0x9f0 [ 1651.793735][ T1720] ? __might_fault+0xaf/0x130 [ 1651.793764][ T1720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1651.793799][ T1720] ? import_iovec+0x73/0xa0 [ 1651.793827][ T1720] ___sys_sendmsg+0x2a5/0x360 [ 1651.793853][ T1720] ? __lock_acquire+0x6b5/0x2cf0 [ 1651.793873][ T1720] ? __pfx____sys_sendmsg+0x10/0x10 [ 1651.793917][ T1720] ? __fget_files+0x2a/0x420 [ 1651.793934][ T1720] ? __fget_files+0x3a0/0x420 [ 1651.793958][ T1720] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1651.793982][ T1720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1651.794009][ T1720] ? __pfx_ksys_write+0x10/0x10 [ 1651.794036][ T1720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.794052][ T1720] do_syscall_64+0x15f/0xf80 [ 1651.794067][ T1720] ? trace_irq_disable+0x3b/0x140 [ 1651.794089][ T1720] ? clear_bhb_loop+0x40/0x90 [ 1651.794108][ T1720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.794123][ T1720] RIP: 0033:0x7f3d5579ce59 [ 1651.794140][ T1720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.794155][ T1720] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.794173][ T1720] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1651.794184][ T1720] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000003 [ 1651.794194][ T1720] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.794204][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.794213][ T1720] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1651.794236][ T1720] [ 1652.041897][T11133] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1652.198536][T11133] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1652.240911][T11133] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.292489][T11133] usb 7-1: config 0 descriptor?? [ 1652.862994][ T1737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.895052][ T1737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.948137][ T1737] F2FS-fs: Conflicting test_dummy_encryption options [ 1653.039186][ T1735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.065803][ T1735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.505313][ T1744] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9665'. [ 1653.692809][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.733414][ T1747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.735935][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.767327][ T1747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.838975][T11133] usb 7-1: Cannot read MAC address [ 1653.875876][T11133] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1653.908709][T11133] usb 7-1: USB disconnect, device number 37 [ 1653.919329][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.945678][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.980629][ T30] audit: type=1326 audit(1779498659.038:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.9.9669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83899ce59 code=0x0 [ 1654.104353][ T1760] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9669'. [ 1654.140305][ T1760] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2149952964 (4299905928 ns) > initial count (33554432 ns). Using initial count to start timer. [ 1654.142281][ T1762] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!00000000000000000003000000 [ 1654.215561][ T1763] sysfs: cannot create duplicate filename '/class/ieee80211/1^!000000000000000000030000000' [ 1654.227988][ T1763] CPU: 0 UID: 0 PID: 1763 Comm: syz.7.9671 Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.228019][ T1763] Tainted: [L]=SOFTLOCKUP [ 1654.228026][ T1763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1654.228037][ T1763] Call Trace: [ 1654.228045][ T1763] [ 1654.228054][ T1763] dump_stack_lvl+0xe8/0x150 [ 1654.228082][ T1763] sysfs_warn_dup+0x8e/0xa0 [ 1654.228105][ T1763] sysfs_do_create_link_sd+0xc0/0x110 [ 1654.228131][ T1763] device_add_class_symlinks+0x1cf/0x240 [ 1654.228158][ T1763] device_add+0x475/0xbb0 [ 1654.228189][ T1763] wiphy_register+0x1dc5/0x2dc0 [ 1654.228223][ T1763] ? __pfx_wiphy_register+0x10/0x10 [ 1654.228243][ T1763] ? __pfx_netdev_run_todo+0x10/0x10 [ 1654.228266][ T1763] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1654.228299][ T1763] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1654.228349][ T1763] ieee80211_register_hw+0x3d82/0x4a70 [ 1654.228384][ T1763] ? ieee80211_register_hw+0x19b1/0x4a70 [ 1654.228428][ T1763] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1654.228452][ T1763] ? __asan_memset+0x22/0x50 [ 1654.228476][ T1763] ? __hrtimer_setup+0x1b7/0x260 [ 1654.228499][ T1763] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1654.228528][ T1763] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1654.228578][ T1763] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1654.228602][ T1763] ? kstrndup+0xbf/0x160 [ 1654.228631][ T1763] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1654.228677][ T1763] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1654.228709][ T1763] ? rcu_is_watching+0x15/0xb0 [ 1654.228731][ T1763] ? trace_kmalloc+0x2a/0xf0 [ 1654.228761][ T1763] ? __nla_parse+0x40/0x60 [ 1654.228792][ T1763] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1654.228823][ T1763] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1654.228856][ T1763] genl_family_rcv_msg_doit+0x22a/0x330 [ 1654.228886][ T1763] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1654.228922][ T1763] ? bpf_lsm_capable+0x9/0x20 [ 1654.228941][ T1763] ? security_capable+0x7e/0x2c0 [ 1654.228971][ T1763] genl_rcv_msg+0x61c/0x7a0 [ 1654.229000][ T1763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1654.229022][ T1763] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1654.229046][ T1763] ? __pfx_ref_tracker_free+0x10/0x10 [ 1654.229071][ T1763] ? __asan_memcpy+0x40/0x70 [ 1654.229092][ T1763] ? __skb_clone+0x63/0x7a0 [ 1654.229124][ T1763] netlink_rcv_skb+0x232/0x4b0 [ 1654.229152][ T1763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1654.229175][ T1763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1654.229216][ T1763] ? down_read+0x270/0x2e0 [ 1654.229234][ T1763] ? genl_rcv+0xd/0x40 [ 1654.229257][ T1763] genl_rcv+0x28/0x40 [ 1654.229276][ T1763] netlink_unicast+0x75c/0x8e0 [ 1654.229312][ T1763] netlink_sendmsg+0x813/0xb40 [ 1654.229374][ T1763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.229403][ T1763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1654.229432][ T1763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1654.229460][ T1763] ____sys_sendmsg+0x972/0x9f0 [ 1654.229485][ T1763] ? __might_fault+0xaf/0x130 [ 1654.229515][ T1763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1654.229553][ T1763] ? import_iovec+0x73/0xa0 [ 1654.229584][ T1763] ___sys_sendmsg+0x2a5/0x360 [ 1654.229612][ T1763] ? __lock_acquire+0x6b5/0x2cf0 [ 1654.229637][ T1763] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.229673][ T1763] ? futex_wake+0x4ac/0x580 [ 1654.229728][ T1763] ? __fget_files+0x2a/0x420 [ 1654.229751][ T1763] ? __fget_files+0x3a0/0x420 [ 1654.229785][ T1763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1654.229816][ T1763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.229854][ T1763] ? rcu_is_watching+0x15/0xb0 [ 1654.229887][ T1763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.229909][ T1763] do_syscall_64+0x15f/0xf80 [ 1654.229930][ T1763] ? clear_bhb_loop+0x40/0x90 [ 1654.229955][ T1763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.229974][ T1763] RIP: 0033:0x7f941779ce59 [ 1654.229994][ T1763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.230011][ T1763] RSP: 002b:00007f94186cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.230031][ T1763] RAX: ffffffffffffffda RBX: 00007f9417a16090 RCX: 00007f941779ce59 [ 1654.230046][ T1763] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1654.230060][ T1763] RBP: 00007f9417832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1654.230073][ T1763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1654.230085][ T1763] R13: 00007f9417a16128 R14: 00007f9417a16090 R15: 00007f9417b3fa48 [ 1654.230118][ T1763] [ 1654.958226][ T1774] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1655.066591][ T5646] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1655.080631][ T1779] netlink: 'syz.9.9677': attribute type 3 has an invalid length. [ 1655.098800][ T1779] netlink: 'syz.9.9677': attribute type 7 has an invalid length. [ 1655.116161][ T1779] netlink: 136 bytes leftover after parsing attributes in process `syz.9.9677'. [ 1655.163615][ T1783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.173310][ T1783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.257214][ T5646] usb 7-1: Using ep0 maxpacket: 16 [ 1655.269886][ T5646] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1655.282109][ T1789] FAULT_INJECTION: forcing a failure. [ 1655.282109][ T1789] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.282920][ T5646] usb 7-1: config 0 has no interface number 0 [ 1655.297755][ T1789] CPU: 1 UID: 0 PID: 1789 Comm: syz.1.9680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.297787][ T1789] Tainted: [L]=SOFTLOCKUP [ 1655.297794][ T1789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1655.297806][ T1789] Call Trace: [ 1655.297813][ T1789] [ 1655.297821][ T1789] dump_stack_lvl+0xe8/0x150 [ 1655.297848][ T1789] should_fail_ex+0x412/0x560 [ 1655.297877][ T1789] should_failslab+0xa8/0x100 [ 1655.297905][ T1789] ? dst_alloc+0x105/0x170 [ 1655.297924][ T1789] kmem_cache_alloc_noprof+0x87/0x650 [ 1655.297956][ T1789] dst_alloc+0x105/0x170 [ 1655.297972][ T1789] ? ip_check_mc_rcu+0x400/0x680 [ 1655.298001][ T1789] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1655.298030][ T1789] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1655.298052][ T1789] ip_route_output_key_hash+0x18d/0x2a0 [ 1655.298075][ T1789] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1655.298110][ T1789] ip_route_output_flow+0x2a/0x150 [ 1655.298135][ T1789] ? security_sk_classify_flow+0x6d/0x150 [ 1655.298158][ T1789] raw_sendmsg+0x1199/0x1a50 [ 1655.298191][ T1789] ? __pfx_raw_sendmsg+0x10/0x10 [ 1655.298223][ T1789] ? aa_sk_perm+0x6d5/0x900 [ 1655.298253][ T1789] ? __pfx_aa_sk_perm+0x10/0x10 [ 1655.298273][ T1789] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1655.298303][ T1789] ? sock_rps_record_flow+0x19/0x350 [ 1655.298325][ T1789] ? inet_sendmsg+0x2f4/0x370 [ 1655.298342][ T1789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1655.298370][ T1789] ____sys_sendmsg+0x80a/0x9f0 [ 1655.298405][ T1789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1655.298440][ T1789] ? import_iovec+0x73/0xa0 [ 1655.298470][ T1789] ___sys_sendmsg+0x2a5/0x360 [ 1655.298501][ T1789] ? __lock_acquire+0x6b5/0x2cf0 [ 1655.298526][ T1789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1655.298583][ T1789] ? __fget_files+0x2a/0x420 [ 1655.298603][ T1789] ? __fget_files+0x3a0/0x420 [ 1655.298634][ T1789] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1655.298663][ T1789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1655.298697][ T1789] ? __pfx_ksys_write+0x10/0x10 [ 1655.298730][ T1789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.298750][ T1789] do_syscall_64+0x15f/0xf80 [ 1655.298767][ T1789] ? trace_irq_disable+0x3b/0x140 [ 1655.298793][ T1789] ? clear_bhb_loop+0x40/0x90 [ 1655.298816][ T1789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.298834][ T1789] RIP: 0033:0x7f2d4e59ce59 [ 1655.298856][ T1789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.298872][ T1789] RSP: 002b:00007f2d4f3a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.298891][ T1789] RAX: ffffffffffffffda RBX: 00007f2d4e815fa0 RCX: 00007f2d4e59ce59 [ 1655.298904][ T1789] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003 [ 1655.298917][ T1789] RBP: 00007f2d4f3a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.298928][ T1789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.298940][ T1789] R13: 00007f2d4e816038 R14: 00007f2d4e815fa0 R15: 00007f2d4e93fa48 [ 1655.298969][ T1789] [ 1655.602808][ T1795] fuse: Bad value for 'fd' [ 1655.609820][ T5646] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1655.619106][ T5646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.627413][ T5646] usb 7-1: Product: syz [ 1655.631584][ T5646] usb 7-1: Manufacturer: syz [ 1655.636163][ T5646] usb 7-1: SerialNumber: syz [ 1655.644743][ T5646] usb 7-1: config 0 descriptor?? [ 1655.652963][ T5646] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1655.841196][ T1779] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1655.851023][ T1779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1655.858362][ T1779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1655.869136][ T1779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1656.014833][ T1802] FAULT_INJECTION: forcing a failure. [ 1656.014833][ T1802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.029146][ T1802] CPU: 1 UID: 0 PID: 1802 Comm: syz.4.9685 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.029178][ T1802] Tainted: [L]=SOFTLOCKUP [ 1656.029186][ T1802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1656.029198][ T1802] Call Trace: [ 1656.029206][ T1802] [ 1656.029214][ T1802] dump_stack_lvl+0xe8/0x150 [ 1656.029241][ T1802] should_fail_ex+0x412/0x560 [ 1656.029269][ T1802] _copy_from_iter+0x1d3/0x1670 [ 1656.029297][ T1802] ? rcu_is_watching+0x15/0xb0 [ 1656.029324][ T1802] ? __pfx__copy_from_iter+0x10/0x10 [ 1656.029354][ T1802] ? netlink_sendmsg+0x650/0xb40 [ 1656.029378][ T1802] ? skb_put+0x11b/0x210 [ 1656.029406][ T1802] netlink_sendmsg+0x6c0/0xb40 [ 1656.029440][ T1802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.029501][ T1802] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1656.029528][ T1802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1656.029557][ T1802] ____sys_sendmsg+0x972/0x9f0 [ 1656.029584][ T1802] ? __might_fault+0xaf/0x130 [ 1656.029613][ T1802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1656.029649][ T1802] ? import_iovec+0x73/0xa0 [ 1656.029679][ T1802] ___sys_sendmsg+0x2a5/0x360 [ 1656.029704][ T1802] ? __lock_acquire+0x6b5/0x2cf0 [ 1656.029730][ T1802] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.029789][ T1802] ? __fget_files+0x2a/0x420 [ 1656.029811][ T1802] ? __fget_files+0x3a0/0x420 [ 1656.029842][ T1802] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1656.029873][ T1802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1656.029908][ T1802] ? __pfx_ksys_write+0x10/0x10 [ 1656.029943][ T1802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.029963][ T1802] do_syscall_64+0x15f/0xf80 [ 1656.029981][ T1802] ? trace_irq_disable+0x3b/0x140 [ 1656.030009][ T1802] ? clear_bhb_loop+0x40/0x90 [ 1656.030032][ T1802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.030051][ T1802] RIP: 0033:0x7f3d5579ce59 [ 1656.030070][ T1802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.030087][ T1802] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.030107][ T1802] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1656.030121][ T1802] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1656.030134][ T1802] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.030145][ T1802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.030157][ T1802] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1656.030184][ T1802] [ 1656.461643][T27061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1656.480951][ T5723] usb 2-1: USB disconnect, device number 79 [ 1656.497809][T27061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1656.507830][T27061] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1656.549287][T27061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1656.558597][T27061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1656.617987][T29974] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1656.796548][T29974] usb 10-1: Using ep0 maxpacket: 8 [ 1656.811653][T29974] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.835166][T29974] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1656.884168][T29974] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1656.905089][T29974] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1656.925536][T29974] usb 10-1: Product: syz [ 1656.950978][T29974] usb 10-1: Manufacturer: syz [ 1656.978311][T29974] usb 10-1: SerialNumber: syz [ 1657.025502][T29974] usb 10-1: config 0 descriptor?? [ 1657.048254][T29974] imon_raw 10-1:0.0: IR endpoint missing [ 1657.084406][ T1823] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9692'. [ 1657.105017][ T5646] gspca_spca1528: reg_w err -71 [ 1657.110131][ T5646] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1657.138363][ T5646] usb 7-1: USB disconnect, device number 38 [ 1657.163987][ T1823] binder: BINDER_SET_CONTEXT_MGR already set [ 1657.170791][ T1823] binder: 1822:1823 ioctl 4018620d 200000000100 returned -16 [ 1657.283846][ T1805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.310365][ T1805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.366622][T27061] Bluetooth: hci6: command 0x0419 tx timeout [ 1657.389099][ T1831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.403332][ T1831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.560370][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.567849][ T1810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.575224][ T1810] bridge_slave_0: entered allmulticast mode [ 1657.583096][ T1810] bridge_slave_0: entered promiscuous mode [ 1657.591025][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.598725][ T1810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.606056][ T1810] bridge_slave_1: entered allmulticast mode [ 1657.614691][ T1810] bridge_slave_1: entered promiscuous mode [ 1657.729379][ T1840] FAULT_INJECTION: forcing a failure. [ 1657.729379][ T1840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.744048][ T1840] CPU: 1 UID: 0 PID: 1840 Comm: syz.6.9696 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.744077][ T1840] Tainted: [L]=SOFTLOCKUP [ 1657.744083][ T1840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1657.744093][ T1840] Call Trace: [ 1657.744099][ T1840] [ 1657.744106][ T1840] dump_stack_lvl+0xe8/0x150 [ 1657.744133][ T1840] should_fail_ex+0x412/0x560 [ 1657.744159][ T1840] _copy_from_user+0x2d/0xb0 [ 1657.744187][ T1840] ____sys_sendmsg+0x308/0x9f0 [ 1657.744219][ T1840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1657.744252][ T1840] ? import_iovec+0x73/0xa0 [ 1657.744279][ T1840] ___sys_sendmsg+0x2a5/0x360 [ 1657.744302][ T1840] ? __lock_acquire+0x6b5/0x2cf0 [ 1657.744334][ T1840] ? __pfx____sys_sendmsg+0x10/0x10 [ 1657.744386][ T1840] ? __fget_files+0x2a/0x420 [ 1657.744406][ T1840] ? __fget_files+0x3a0/0x420 [ 1657.744436][ T1840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1657.744463][ T1840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1657.744496][ T1840] ? __pfx_ksys_write+0x10/0x10 [ 1657.744527][ T1840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.744543][ T1840] do_syscall_64+0x15f/0xf80 [ 1657.744560][ T1840] ? trace_irq_disable+0x3b/0x140 [ 1657.744586][ T1840] ? clear_bhb_loop+0x40/0x90 [ 1657.744612][ T1840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.744630][ T1840] RIP: 0033:0x7fecf659ce59 [ 1657.744648][ T1840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.744665][ T1840] RSP: 002b:00007fecf47ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1657.744684][ T1840] RAX: ffffffffffffffda RBX: 00007fecf6815fa0 RCX: 00007fecf659ce59 [ 1657.744697][ T1840] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000003 [ 1657.744709][ T1840] RBP: 00007fecf47ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.744721][ T1840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.744730][ T1840] R13: 00007fecf6816038 R14: 00007fecf6815fa0 R15: 00007fecf693fa48 [ 1657.744758][ T1840] [ 1657.761509][ T1810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.926731][T27061] Bluetooth: hci1: command 0x0c1a tx timeout [ 1658.045022][ T1810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.210795][ T1810] team0: Port device team_slave_0 added [ 1658.241340][ T1810] team0: Port device team_slave_1 added [ 1658.651843][T27061] Bluetooth: hci5: command tx timeout [ 1658.715877][ T1865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1658.727695][ T1810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.753318][ T1810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.784006][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.793291][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.814920][ T1810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.085103][ T1810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.120777][ T1810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.241259][ T1877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.250135][ T1810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.271620][ T1877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.331851][ T1870] bond0: (slave bond_slave_0): Releasing backup interface [ 1659.374091][ T1870] bond0: (slave bond_slave_1): Releasing backup interface [ 1659.414986][ T1870] team0: Port device team_slave_0 removed [ 1659.438038][ T1870] team0: Port device team_slave_1 removed [ 1659.450930][ T1870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.460140][ T1870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.470511][ T1870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.478511][ T1870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.488792][ T1870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1659.849882][ T1810] hsr_slave_0: entered promiscuous mode [ 1659.860369][ T1810] hsr_slave_1: entered promiscuous mode [ 1659.871152][ T1810] debugfs: 'hsr0' already exists in 'hsr' [ 1659.890956][ T1810] Cannot create hsr debugfs directory [ 1659.953303][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.970171][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.992865][ T611] bridge_slave_1: left allmulticast mode [ 1659.996091][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.006650][T27061] Bluetooth: hci1: command 0x0c1a tx timeout [ 1660.009659][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.021499][ T611] bridge_slave_1: left promiscuous mode [ 1660.028177][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.043737][ T611] bridge_slave_0: left allmulticast mode [ 1660.043932][ T30] audit: type=1326 audit(1779498665.098:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1880 comm="syz.9.9708" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83899ce59 code=0x0 [ 1660.049785][ T611] bridge_slave_0: left promiscuous mode [ 1660.079644][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.250652][ T1888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.261732][ T1888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.472904][ T611] team0: Port device bond1 removed [ 1660.479643][ T611] bond1 (unregistering): Released all slaves [ 1660.499187][ T611] bond2 (unregistering): Released all slaves [ 1660.516156][ T611] bond0 (unregistering): Released all slaves [ 1660.554096][ T611] bond3 (unregistering): (slave veth3): Releasing active interface [ 1660.571973][ T611] bond3 (unregistering): Released all slaves [ 1660.602001][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.625394][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.731263][T27061] Bluetooth: hci5: command tx timeout [ 1660.993834][ T1898] bridge0: port 5(macvlan2) entered blocking state [ 1661.000739][ T1898] bridge0: port 5(macvlan2) entered disabled state [ 1661.010741][ T1898] macvlan2: entered allmulticast mode [ 1661.021786][ T1898] bridge0: entered allmulticast mode [ 1661.051889][ T1898] macvlan2: left allmulticast mode [ 1661.059390][ T1898] bridge0: left allmulticast mode [ 1661.109592][ T611] tipc: Disabling bearer [ 1661.141916][ T611] tipc: Left network mode [ 1661.305222][ T611] IPVS: stopping backup sync thread 24919 ... [ 1661.334289][ T1911] loop9: detected capacity change from 0 to 7 [ 1661.348148][ C1] blk_print_req_error: 10 callbacks suppressed [ 1661.348168][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.364074][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.395569][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.404821][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.413427][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.422646][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.433290][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.443692][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.465374][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.495346][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.504685][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.513998][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.523208][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.532470][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.541684][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.553435][ T1911] ldm_validate_partition_table(): Disk read failed. [ 1661.573438][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.582729][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.592751][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.601968][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.610306][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1661.620306][ T1911] Dev loop9: unable to read RDB block 0 [ 1661.642341][ T1911] loop9: unable to read partition table [ 1661.668501][ T1911] loop9: partition table beyond EOD, truncated [ 1661.690046][T29974] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1661.692890][ T1911] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1661.847480][T29974] usb 7-1: Using ep0 maxpacket: 16 [ 1661.858895][T29974] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1661.869200][T29974] usb 7-1: config 0 has no interface number 0 [ 1661.890136][T29974] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1661.915457][T29974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.943483][T29974] usb 7-1: Product: syz [ 1661.954995][ T1925] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9716'. [ 1661.965721][T29974] usb 7-1: Manufacturer: syz [ 1661.991248][T29974] usb 7-1: SerialNumber: syz [ 1662.018635][T29974] usb 7-1: config 0 descriptor?? [ 1662.049513][T29974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1662.088993][T27061] Bluetooth: hci1: command 0x0c1a tx timeout [ 1662.132618][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1662.334506][ T611] hsr_slave_0: left promiscuous mode [ 1662.341598][ T611] hsr_slave_1: left promiscuous mode [ 1662.352924][ T611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.807958][T27061] Bluetooth: hci5: command tx timeout [ 1663.014284][ T1937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.058131][ T1937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.145811][ T611] team0 (unregistering): Port device team_slave_1 removed [ 1663.198099][ T611] team0 (unregistering): Port device team_slave_0 removed [ 1663.447879][T29974] gspca_spca1528: reg_w err -71 [ 1663.453900][T29974] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1663.481896][T29974] usb 7-1: USB disconnect, device number 39 [ 1664.275530][ T1810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1664.318443][T11690] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1664.356050][ T1810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1664.390077][ T1810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1664.481348][ T1810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1664.509536][T11690] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.523537][T11690] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1664.533448][T11690] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1664.551684][T11690] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1664.561990][T11690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.570862][T11690] usb 7-1: Product: syz [ 1664.575167][T11690] usb 7-1: Manufacturer: syz [ 1664.606769][T11690] usb 7-1: SerialNumber: syz [ 1664.648554][ T1810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1664.699183][ T1810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1664.721402][ T611] IPVS: stop unused estimator thread 0... [ 1664.733005][ T1810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1664.841166][T11690] usb 7-1: 0:2 : does not exist [ 1664.886988][T27061] Bluetooth: hci5: command tx timeout [ 1664.947334][ T1810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.031251][T11690] usb 7-1: USB disconnect, device number 40 [ 1665.258781][ T1810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.324139][ T1810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.353335][ T614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.360518][ T614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.444457][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.451698][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.564155][ T1977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9726'. [ 1665.578890][ T1810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1665.838784][ T30] audit: type=1326 audit(1779498670.898:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1984 comm="syz.9.9729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83899ce59 code=0x0 [ 1665.843265][ T1810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.957903][ T809] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1666.011104][ T1988] FAULT_INJECTION: forcing a failure. [ 1666.011104][ T1988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.020250][ T1810] veth0_vlan: entered promiscuous mode [ 1666.024491][ T1988] CPU: 0 UID: 0 PID: 1988 Comm: syz.4.9730 Tainted: G L syzkaller #0 PREEMPT(full) [ 1666.024518][ T1988] Tainted: [L]=SOFTLOCKUP [ 1666.024525][ T1988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1666.024537][ T1988] Call Trace: [ 1666.024544][ T1988] [ 1666.024553][ T1988] dump_stack_lvl+0xe8/0x150 [ 1666.024578][ T1988] should_fail_ex+0x412/0x560 [ 1666.024608][ T1988] _copy_from_iter+0x1d3/0x1670 [ 1666.024634][ T1988] ? rcu_is_watching+0x15/0xb0 [ 1666.024662][ T1988] ? __pfx__copy_from_iter+0x10/0x10 [ 1666.024692][ T1988] ? netlink_sendmsg+0x650/0xb40 [ 1666.024716][ T1988] ? skb_put+0x11b/0x210 [ 1666.024743][ T1988] netlink_sendmsg+0x6c0/0xb40 [ 1666.024776][ T1988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1666.024805][ T1988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1666.024830][ T1988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1666.024856][ T1988] ____sys_sendmsg+0x972/0x9f0 [ 1666.024882][ T1988] ? __might_fault+0xaf/0x130 [ 1666.024911][ T1988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1666.024944][ T1988] ? import_iovec+0x73/0xa0 [ 1666.024973][ T1988] ___sys_sendmsg+0x2a5/0x360 [ 1666.024998][ T1988] ? __lock_acquire+0x6b5/0x2cf0 [ 1666.025022][ T1988] ? __pfx____sys_sendmsg+0x10/0x10 [ 1666.025077][ T1988] ? __fget_files+0x2a/0x420 [ 1666.025098][ T1988] ? __fget_files+0x3a0/0x420 [ 1666.025128][ T1988] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1666.025156][ T1988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1666.025190][ T1988] ? __pfx_ksys_write+0x10/0x10 [ 1666.025223][ T1988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.025243][ T1988] do_syscall_64+0x15f/0xf80 [ 1666.025260][ T1988] ? trace_irq_disable+0x3b/0x140 [ 1666.025286][ T1988] ? clear_bhb_loop+0x40/0x90 [ 1666.025308][ T1988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.025326][ T1988] RIP: 0033:0x7f3d5579ce59 [ 1666.025344][ T1988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.025359][ T1988] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1666.025379][ T1988] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1666.025393][ T1988] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1666.025405][ T1988] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.025416][ T1988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.025427][ T1988] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1666.025455][ T1988] [ 1666.304587][ T1810] veth1_vlan: entered promiscuous mode [ 1666.368589][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.369080][ T1810] veth0_macvtap: entered promiscuous mode [ 1666.381346][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.396141][ T1810] veth1_macvtap: entered promiscuous mode [ 1666.399334][ T809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1666.423186][ T809] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.425204][ T1810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.433128][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.457480][ T1810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.468313][ T809] usb 7-1: config 0 descriptor?? [ 1666.474352][ T616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.483902][ T616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.498803][ T616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.509259][ T616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.701307][ T1980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.735212][ T1980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.751156][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.775919][ T612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.777237][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.800973][ T612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.836840][ T1999] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9734'. [ 1666.872593][ T614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.890605][ T614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.912299][ T1999] macvtap1: entered allmulticast mode [ 1666.922329][ T1999] dummy0: entered allmulticast mode [ 1666.928274][ T1999] dummy0: entered promiscuous mode [ 1666.934740][ T1999] team0: Device macvtap1 failed to register rx_handler [ 1666.942787][ T1999] dummy0: left allmulticast mode [ 1666.985703][T11690] dummy0: left promiscuous mode [ 1667.178375][ T809] usbhid 7-1:0.0: can't add hid device: -71 [ 1667.185111][ T809] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1667.199702][ T809] usb 7-1: USB disconnect, device number 41 [ 1667.400649][ T2007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1667.720308][ T2013] IPv6: Can't replace route, no match found [ 1668.035477][ T2028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.058840][ T2028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.097555][ T2029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9741'. [ 1668.174230][ T2031] No such timeout policy "syz1" [ 1668.191492][ T2031] netlink: 'syz.4.9741': attribute type 8 has an invalid length. [ 1668.311469][T27061] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1668.548987][ T2044] netlink: 'syz.9.9747': attribute type 61 has an invalid length. [ 1668.866623][T10200] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1668.889883][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.896280][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.077061][T10200] usb 2-1: Using ep0 maxpacket: 16 [ 1669.094695][T10200] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1669.129440][T10200] usb 2-1: config 0 has no interface number 0 [ 1669.160151][T10200] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1669.195863][T10200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.230998][T10200] usb 2-1: Product: syz [ 1669.247922][T10200] usb 2-1: Manufacturer: syz [ 1669.269275][T10200] usb 2-1: SerialNumber: syz [ 1669.276493][ T809] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1669.310182][T10200] usb 2-1: config 0 descriptor?? [ 1669.334810][T10200] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1669.453357][ T809] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1669.492021][ T809] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1669.525086][ T809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1669.559291][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.595563][ T809] usb 7-1: Product: syz [ 1669.631723][ T809] usb 7-1: Manufacturer: ఄ [ 1669.657270][ T809] usb 7-1: SerialNumber: syz [ 1669.685967][ T2050] raw-gadget.11 gadget.6: fail, usb_ep_enable returned -22 [ 1670.173892][ T809] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1670.224865][ T809] usb 7-1: USB disconnect, device number 42 [ 1670.267151][ T809] usblp0: removed [ 1670.563790][ T2069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.593513][ T2069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.784557][T10200] gspca_spca1528: reg_w err -71 [ 1670.791556][T10200] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1670.826049][T10200] usb 2-1: USB disconnect, device number 80 [ 1670.900138][T27061] Bluetooth: hci6: unexpected event for opcode 0x007f [ 1671.134791][ T2079] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1671.183790][ T2077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.199294][ T2077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.363047][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.379365][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.646537][T10200] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1671.807285][T27061] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1671.817281][T10200] usb 2-1: Using ep0 maxpacket: 16 [ 1671.831809][T10200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.867323][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1671.901504][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1671.949433][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1672.004674][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1672.024069][T10200] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.037848][T10200] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1672.049092][T10200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.087587][T10200] usb 2-1: config 0 descriptor?? [ 1672.238212][ T2120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9773'. [ 1672.416918][T10200] rc_core: IR keymap rc-hauppauge not found [ 1672.454476][T10200] Registered IR keymap rc-empty [ 1672.532433][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1672.616701][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1672.679527][T10200] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1672.723096][ T2092] syzkaller1: entered promiscuous mode [ 1672.731710][ T2092] syzkaller1: entered allmulticast mode [ 1672.739752][T10200] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input246 [ 1672.762686][ T2118] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 1672.795926][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1672.865410][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1672.918309][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1672.968640][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.006833][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.049816][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.123934][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.169017][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.198862][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.246542][T10200] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1673.299886][T10200] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1673.318335][T10200] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1673.341899][T10200] usb 2-1: USB disconnect, device number 81 [ 1673.349055][ T2130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.371060][ T2130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.935483][ T2139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1673.994531][ T2142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.046237][ T2142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.124908][ T2145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9780'. [ 1674.346886][ T2147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.385553][ T2147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.387915][ T2135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.439390][ T2135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.053463][ T2174] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9787'. [ 1675.197803][T10200] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1675.408790][T10200] usb 2-1: Using ep0 maxpacket: 32 [ 1675.436456][T10200] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1675.449530][T10200] usb 2-1: config 0 has no interface number 0 [ 1675.455904][T10200] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1675.478613][T10200] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1675.507061][T10200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.528711][T10200] usb 2-1: Product: syz [ 1675.540346][T10200] usb 2-1: Manufacturer: syz [ 1675.550515][T10200] usb 2-1: SerialNumber: syz [ 1675.561435][T10200] usb 2-1: config 0 descriptor?? [ 1675.931287][ T2183] syz_tun: left allmulticast mode [ 1675.951093][ T2183] syz_tun: left promiscuous mode [ 1675.997305][ T2183] bridge0: port 4(syz_tun) entered disabled state [ 1676.066909][ T2183] bond0: (slave team0): Releasing backup interface [ 1676.139016][ T2183] bridge_slave_0: left allmulticast mode [ 1676.150559][ T2183] bridge_slave_0: left promiscuous mode [ 1676.165500][ T2183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.202276][ T2183] bridge_slave_1: left allmulticast mode [ 1676.214680][ T2183] bridge_slave_1: left promiscuous mode [ 1676.232238][ T2183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.269047][ T2183] bond0: (slave bond_slave_0): Releasing backup interface [ 1676.291726][ T2183] bond0: (slave bond_slave_1): Releasing backup interface [ 1676.322720][ T2183] team0: Port device team_slave_0 removed [ 1676.343377][ T2183] team0: Port device team_slave_1 removed [ 1676.351319][ T2183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.370733][ T2183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.396919][ T2183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1676.753724][T27061] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1676.819478][T10200] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1676.841943][T10200] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1676.869619][T10200] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1676.887011][T11133] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1676.911099][T10200] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1676.956142][ T2194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.962908][T10200] usb 2-1: USB disconnect, device number 82 [ 1676.969275][ T2194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.996314][ T2194] netlink: 'syz.9.9793': attribute type 29 has an invalid length. [ 1677.009875][ T2194] netlink: 'syz.9.9793': attribute type 29 has an invalid length. [ 1677.032052][ T2194] netlink: 'syz.9.9793': attribute type 32 has an invalid length. [ 1677.041357][ T2194] netlink: 500 bytes leftover after parsing attributes in process `syz.9.9793'. [ 1677.066462][T11133] usb 7-1: Using ep0 maxpacket: 16 [ 1677.076813][T11133] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1677.086665][T11133] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.126644][ T2194] netlink: 'syz.9.9793': attribute type 32 has an invalid length. [ 1677.136122][T11133] usb 7-1: config 0 descriptor?? [ 1677.158633][T11133] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1677.565411][ T2204] netlink: 'syz.4.9796': attribute type 1 has an invalid length. [ 1677.942728][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.955749][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.136716][T29969] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1678.286441][T29969] usb 2-1: Using ep0 maxpacket: 16 [ 1678.293379][T29969] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1678.302036][T29969] usb 2-1: config 0 has no interface number 0 [ 1678.311006][T29969] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1678.320144][T29969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.330971][T29969] usb 2-1: Product: syz [ 1678.335175][T29969] usb 2-1: Manufacturer: syz [ 1678.339915][T29969] usb 2-1: SerialNumber: syz [ 1678.350149][T29969] usb 2-1: config 0 descriptor?? [ 1678.357855][T29969] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1678.482388][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9802'. [ 1678.503762][ T2225] ip6erspan0: entered allmulticast mode [ 1678.591101][ T809] usb 7-1: USB disconnect, device number 43 [ 1678.650343][T27061] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1678.712487][ T2230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9804'. [ 1678.970600][ T2243] FAULT_INJECTION: forcing a failure. [ 1678.970600][ T2243] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.994980][ T2243] CPU: 1 UID: 0 PID: 2243 Comm: syz.4.9808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.995014][ T2243] Tainted: [L]=SOFTLOCKUP [ 1678.995021][ T2243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1678.995033][ T2243] Call Trace: [ 1678.995041][ T2243] [ 1678.995054][ T2243] dump_stack_lvl+0xe8/0x150 [ 1678.995081][ T2243] should_fail_ex+0x412/0x560 [ 1678.995111][ T2243] should_failslab+0xa8/0x100 [ 1678.995140][ T2243] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1678.995166][ T2243] ? __alloc_skb+0x186/0x7d0 [ 1678.995190][ T2243] ? __alloc_skb+0x1d0/0x7d0 [ 1678.995211][ T2243] ? __local_bh_enable_ip+0xd0/0x130 [ 1678.995235][ T2243] __alloc_skb+0x1d0/0x7d0 [ 1678.995263][ T2243] netlink_sendmsg+0x5d4/0xb40 [ 1678.995299][ T2243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.995329][ T2243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1678.995355][ T2243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1678.995382][ T2243] ____sys_sendmsg+0x972/0x9f0 [ 1678.995416][ T2243] ? __might_fault+0xaf/0x130 [ 1678.995445][ T2243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.995478][ T2243] ? import_iovec+0x73/0xa0 [ 1678.995508][ T2243] ___sys_sendmsg+0x2a5/0x360 [ 1678.995533][ T2243] ? __lock_acquire+0x6b5/0x2cf0 [ 1678.995558][ T2243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.995615][ T2243] ? __fget_files+0x2a/0x420 [ 1678.995637][ T2243] ? __fget_files+0x3a0/0x420 [ 1678.995667][ T2243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1678.995696][ T2243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.995731][ T2243] ? __pfx_ksys_write+0x10/0x10 [ 1678.995765][ T2243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.995786][ T2243] do_syscall_64+0x15f/0xf80 [ 1678.995803][ T2243] ? trace_irq_disable+0x3b/0x140 [ 1678.995830][ T2243] ? clear_bhb_loop+0x40/0x90 [ 1678.995853][ T2243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.995872][ T2243] RIP: 0033:0x7f3d5579ce59 [ 1678.995891][ T2243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.995906][ T2243] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.995926][ T2243] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1678.995939][ T2243] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 1678.995951][ T2243] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.995963][ T2243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.995974][ T2243] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1678.996003][ T2243] [ 1679.647367][T29969] gspca_spca1528: reg_w err -71 [ 1679.658626][T29969] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1679.701731][ T2264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.716677][T29969] usb 2-1: USB disconnect, device number 83 [ 1679.758996][ T2264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.805405][ T2266] FAULT_INJECTION: forcing a failure. [ 1679.805405][ T2266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.821465][ T2266] CPU: 1 UID: 0 PID: 2266 Comm: syz.4.9815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1679.821498][ T2266] Tainted: [L]=SOFTLOCKUP [ 1679.821505][ T2266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1679.821516][ T2266] Call Trace: [ 1679.821525][ T2266] [ 1679.821534][ T2266] dump_stack_lvl+0xe8/0x150 [ 1679.821562][ T2266] should_fail_ex+0x412/0x560 [ 1679.821599][ T2266] _copy_from_iter+0x1d3/0x1670 [ 1679.821628][ T2266] ? rcu_is_watching+0x15/0xb0 [ 1679.821654][ T2266] ? __pfx__copy_from_iter+0x10/0x10 [ 1679.821685][ T2266] ? netlink_sendmsg+0x650/0xb40 [ 1679.821711][ T2266] ? skb_put+0x11b/0x210 [ 1679.821740][ T2266] netlink_sendmsg+0x6c0/0xb40 [ 1679.821776][ T2266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1679.821806][ T2266] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1679.821833][ T2266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1679.821860][ T2266] ____sys_sendmsg+0x972/0x9f0 [ 1679.821887][ T2266] ? __might_fault+0xaf/0x130 [ 1679.821917][ T2266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1679.821953][ T2266] ? import_iovec+0x73/0xa0 [ 1679.821982][ T2266] ___sys_sendmsg+0x2a5/0x360 [ 1679.822008][ T2266] ? __lock_acquire+0x6b5/0x2cf0 [ 1679.822033][ T2266] ? __pfx____sys_sendmsg+0x10/0x10 [ 1679.822088][ T2266] ? __fget_files+0x2a/0x420 [ 1679.822110][ T2266] ? __fget_files+0x3a0/0x420 [ 1679.822140][ T2266] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1679.822170][ T2266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1679.822206][ T2266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.822233][ T2266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.822254][ T2266] do_syscall_64+0x15f/0xf80 [ 1679.822274][ T2266] ? clear_bhb_loop+0x40/0x90 [ 1679.822297][ T2266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.822315][ T2266] RIP: 0033:0x7f3d5579ce59 [ 1679.822333][ T2266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.822349][ T2266] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.822369][ T2266] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1679.822383][ T2266] RDX: 0000000004000804 RSI: 0000200000000200 RDI: 0000000000000004 [ 1679.822396][ T2266] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.822412][ T2266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.822423][ T2266] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1679.822452][ T2266] [ 1680.397462][ T2273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.408457][ T2273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.431674][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9817'. [ 1680.453541][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9817'. [ 1680.481941][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.512637][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.728485][ T2276] syzkaller1: entered promiscuous mode [ 1680.740538][ T2276] syzkaller1: entered allmulticast mode [ 1680.948890][ T2286] FAULT_INJECTION: forcing a failure. [ 1680.948890][ T2286] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.961956][ T2286] CPU: 0 UID: 0 PID: 2286 Comm: syz.1.9821 Tainted: G L syzkaller #0 PREEMPT(full) [ 1680.961983][ T2286] Tainted: [L]=SOFTLOCKUP [ 1680.961990][ T2286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1680.962001][ T2286] Call Trace: [ 1680.962008][ T2286] [ 1680.962015][ T2286] dump_stack_lvl+0xe8/0x150 [ 1680.962041][ T2286] should_fail_ex+0x412/0x560 [ 1680.962067][ T2286] should_failslab+0xa8/0x100 [ 1680.962093][ T2286] __kmalloc_noprof+0xe8/0x760 [ 1680.962117][ T2286] ? copy_splice_read+0x16f/0xaa0 [ 1680.962141][ T2286] copy_splice_read+0x16f/0xaa0 [ 1680.962170][ T2286] ? __pfx_copy_splice_read+0x10/0x10 [ 1680.962184][ T2286] ? trace_kmalloc+0x2a/0xf0 [ 1680.962197][ T2286] ? look_up_lock_class+0x57/0x110 [ 1680.962214][ T2286] ? register_lock_class+0x31/0x2e0 [ 1680.962226][ T2286] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1680.962244][ T2286] ? alloc_pipe_info+0x373/0x4d0 [ 1680.962259][ T2286] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1680.962273][ T2286] splice_direct_to_actor+0x4a0/0xc70 [ 1680.962291][ T2286] ? __pfx_direct_splice_actor+0x10/0x10 [ 1680.962316][ T2286] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1680.962333][ T2286] do_splice_direct+0x195/0x290 [ 1680.962348][ T2286] ? __pfx_do_splice_direct+0x10/0x10 [ 1680.962361][ T2286] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1680.962376][ T2286] ? bpf_lsm_file_permission+0x9/0x20 [ 1680.962391][ T2286] ? security_file_permission+0x75/0x260 [ 1680.962404][ T2286] ? rw_verify_area+0x255/0x4d0 [ 1680.962421][ T2286] do_sendfile+0x535/0x7d0 [ 1680.962432][ T2286] ? __pfx_vfs_write+0x10/0x10 [ 1680.962448][ T2286] ? __pfx_do_sendfile+0x10/0x10 [ 1680.962459][ T2286] ? __fget_files+0x3a0/0x420 [ 1680.962477][ T2286] __se_sys_sendfile64+0x144/0x1a0 [ 1680.962489][ T2286] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1680.962504][ T2286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.962515][ T2286] do_syscall_64+0x15f/0xf80 [ 1680.962524][ T2286] ? trace_irq_disable+0x3b/0x140 [ 1680.962540][ T2286] ? clear_bhb_loop+0x40/0x90 [ 1680.962555][ T2286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.962565][ T2286] RIP: 0033:0x7f246a59ce59 [ 1680.962577][ T2286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.962586][ T2286] RSP: 002b:00007f246b4c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1680.962598][ T2286] RAX: ffffffffffffffda RBX: 00007f246a815fa0 RCX: 00007f246a59ce59 [ 1680.962605][ T2286] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 1680.962612][ T2286] RBP: 00007f246b4c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.962618][ T2286] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 1680.962625][ T2286] R13: 00007f246a816038 R14: 00007f246a815fa0 R15: 00007f246a93fa48 [ 1680.962640][ T2286] [ 1681.600211][ T2295] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1682.232247][ T2308] openvswitch: netlink: Message has 1 unknown bytes. [ 1682.278588][ T2308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1682.489527][T29969] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1682.642158][T27061] Bluetooth: hci6: unexpected event for opcode 0x007f [ 1682.659696][T29969] usb 7-1: Using ep0 maxpacket: 16 [ 1682.668576][T29969] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1682.677798][T29969] usb 7-1: config 0 has no interface number 0 [ 1682.697614][T29969] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1682.709716][T29969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.720318][T29969] usb 7-1: Product: syz [ 1682.725343][T29969] usb 7-1: Manufacturer: syz [ 1682.736058][T29969] usb 7-1: SerialNumber: syz [ 1682.755483][T29969] usb 7-1: config 0 descriptor?? [ 1682.775502][T29969] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1682.810546][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.821830][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.017354][ T2326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.050770][ T2326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.358605][ T2331] IPv6: Can't replace route, no match found [ 1683.482809][ T2334] FAULT_INJECTION: forcing a failure. [ 1683.482809][ T2334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.522219][ T2334] CPU: 0 UID: 0 PID: 2334 Comm: syz.1.9836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1683.522251][ T2334] Tainted: [L]=SOFTLOCKUP [ 1683.522259][ T2334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1683.522269][ T2334] Call Trace: [ 1683.522277][ T2334] [ 1683.522287][ T2334] dump_stack_lvl+0xe8/0x150 [ 1683.522318][ T2334] should_fail_ex+0x412/0x560 [ 1683.522349][ T2334] _copy_from_user+0x2d/0xb0 [ 1683.522384][ T2334] scsi_ioctl+0x4d1/0x2130 [ 1683.522411][ T2334] ? __pfx_scsi_ioctl+0x10/0x10 [ 1683.522460][ T2334] ? kasan_quarantine_put+0xbb/0x1f0 [ 1683.522504][ T2334] ? scsi_block_when_processing_errors+0x44f/0x540 [ 1683.522531][ T2334] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 1683.522570][ T2334] sg_ioctl+0x112f/0x2220 [ 1683.522602][ T2334] ? lockdep_hardirqs_on+0x7a/0x110 [ 1683.522631][ T2334] ? __pfx_sg_ioctl+0x10/0x10 [ 1683.522665][ T2334] ? __pfx_sg_ioctl+0x10/0x10 [ 1683.522691][ T2334] ? __pfx_sg_ioctl+0x10/0x10 [ 1683.522718][ T2334] ? __se_sys_ioctl+0xea/0x170 [ 1683.522745][ T2334] ? __pfx_sg_ioctl+0x10/0x10 [ 1683.522770][ T2334] __se_sys_ioctl+0xfc/0x170 [ 1683.522796][ T2334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.522817][ T2334] do_syscall_64+0x15f/0xf80 [ 1683.522835][ T2334] ? trace_irq_disable+0x3b/0x140 [ 1683.522862][ T2334] ? clear_bhb_loop+0x40/0x90 [ 1683.522891][ T2334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.522911][ T2334] RIP: 0033:0x7f246a59ce59 [ 1683.522930][ T2334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.522947][ T2334] RSP: 002b:00007f246b4c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1683.522967][ T2334] RAX: ffffffffffffffda RBX: 00007f246a815fa0 RCX: 00007f246a59ce59 [ 1683.522980][ T2334] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 1683.522991][ T2334] RBP: 00007f246b4c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.523003][ T2334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.523015][ T2334] R13: 00007f246a816038 R14: 00007f246a815fa0 R15: 00007f246a93fa48 [ 1683.523044][ T2334] [ 1684.031682][ T2337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.046209][ T2337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.217121][T29969] gspca_spca1528: reg_w err -71 [ 1684.236001][T29969] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1684.277150][T29975] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1684.297647][T29969] usb 7-1: USB disconnect, device number 44 [ 1684.456496][T29975] usb 2-1: Using ep0 maxpacket: 16 [ 1684.472002][T29975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.500845][T29975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1684.525065][T29975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1684.551693][T29975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1684.600594][T29975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1684.663713][T29975] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1684.706142][T29975] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1684.731650][T29975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.852729][ T2349] fuse: Bad value for 'fd' [ 1684.900456][T29975] usb 2-1: config 0 descriptor?? [ 1684.970760][ T2349] syzkaller1: entered promiscuous mode [ 1685.027575][ T2349] syzkaller1: entered allmulticast mode [ 1685.226486][T29975] rc_core: IR keymap rc-hauppauge not found [ 1685.252025][T29975] Registered IR keymap rc-empty [ 1685.295482][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.352387][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.417935][T29975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1685.508611][T29975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input247 [ 1685.624387][ T2357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.656179][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.683059][ T2357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.717075][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.819779][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.964016][ T2341] syzkaller1: entered promiscuous mode [ 1685.975807][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1685.989488][ T2341] syzkaller1: entered allmulticast mode [ 1686.016886][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.088043][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.126687][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.149555][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.181318][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.208130][T29975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1686.251417][T29975] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1686.263005][T29975] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1686.285713][T29975] usb 2-1: USB disconnect, device number 84 [ 1686.486797][T10200] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1686.658609][T10200] usb 7-1: Using ep0 maxpacket: 16 [ 1686.666703][T10200] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1686.678642][T10200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.699082][T10200] usb 7-1: config 0 descriptor?? [ 1686.718284][T10200] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1687.142487][ T2385] IPv6: Can't replace route, no match found [ 1687.148822][T29975] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1687.306529][T29975] usb 2-1: Using ep0 maxpacket: 16 [ 1687.314449][T29975] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.325671][T29975] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1687.341373][T29975] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1687.353512][T10200] gspca_sonixj: reg_w1 err -71 [ 1687.359939][T29975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.375751][T10200] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1687.389763][T29975] usb 2-1: Product: syz [ 1687.405363][T29975] usb 2-1: Manufacturer: syz [ 1687.410229][T10200] usb 7-1: USB disconnect, device number 45 [ 1687.422704][T29975] usb 2-1: SerialNumber: syz [ 1687.662872][ T2381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.677228][ T2381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.694961][T29975] usb 2-1: USB disconnect, device number 85 [ 1687.765921][ T2388] syzkaller0: entered promiscuous mode [ 1687.771521][ T2388] syzkaller0: entered allmulticast mode [ 1687.943902][ T2390] FAULT_INJECTION: forcing a failure. [ 1687.943902][ T2390] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.960416][ T2390] CPU: 1 UID: 0 PID: 2390 Comm: syz.4.9851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.960447][ T2390] Tainted: [L]=SOFTLOCKUP [ 1687.960455][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1687.960467][ T2390] Call Trace: [ 1687.960475][ T2390] [ 1687.960483][ T2390] dump_stack_lvl+0xe8/0x150 [ 1687.960510][ T2390] should_fail_ex+0x412/0x560 [ 1687.960540][ T2390] should_failslab+0xa8/0x100 [ 1687.960570][ T2390] __kmalloc_cache_noprof+0x88/0x660 [ 1687.960605][ T2390] ? vhost_task_create+0x123/0x380 [ 1687.960634][ T2390] vhost_task_create+0x123/0x380 [ 1687.960659][ T2390] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1687.960682][ T2390] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1687.960703][ T2390] ? __pfx_vhost_task_create+0x10/0x10 [ 1687.960732][ T2390] ? __pfx_vhost_task_fn+0x10/0x10 [ 1687.960756][ T2390] ? __lock_acquire+0x6b5/0x2cf0 [ 1687.960775][ T2390] ? kasan_save_track+0x4f/0x80 [ 1687.960794][ T2390] ? kasan_save_track+0x3e/0x80 [ 1687.960811][ T2390] ? kasan_save_free_info+0x46/0x50 [ 1687.960826][ T2390] ? __kasan_slab_free+0x5c/0x80 [ 1687.960844][ T2390] ? kfree+0x1c5/0x640 [ 1687.960862][ T2390] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1687.960886][ T2390] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1687.960920][ T2390] ? __mutex_trylock_common+0x158/0x260 [ 1687.960940][ T2390] ? look_up_lock_class+0x57/0x110 [ 1687.960963][ T2390] ? register_lock_class+0x31/0x2e0 [ 1687.960979][ T2390] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1687.961002][ T2390] ? __lock_acquire+0x6b5/0x2cf0 [ 1687.961020][ T2390] ? __mutex_lock+0x319/0x1550 [ 1687.961040][ T2390] ? kasan_quarantine_put+0xbb/0x1f0 [ 1687.961068][ T2390] ? do_raw_write_lock+0x11d/0x260 [ 1687.961101][ T2390] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1687.961126][ T2390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1687.961144][ T2390] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1687.961174][ T2390] ? __fget_files+0x2a/0x420 [ 1687.961194][ T2390] ? __fget_files+0x2a/0x420 [ 1687.961210][ T2390] ? __fget_files+0x3a0/0x420 [ 1687.961227][ T2390] ? __fget_files+0x2a/0x420 [ 1687.961246][ T2390] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1687.961268][ T2390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1687.961287][ T2390] __se_sys_ioctl+0xfc/0x170 [ 1687.961308][ T2390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.961325][ T2390] do_syscall_64+0x15f/0xf80 [ 1687.961338][ T2390] ? trace_irq_disable+0x3b/0x140 [ 1687.961361][ T2390] ? clear_bhb_loop+0x40/0x90 [ 1687.961379][ T2390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.961394][ T2390] RIP: 0033:0x7f3d5579ce59 [ 1687.961409][ T2390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.961424][ T2390] RSP: 002b:00007f3d565be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.961442][ T2390] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59 [ 1687.961459][ T2390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1687.961469][ T2390] RBP: 00007f3d565be090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.961478][ T2390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.961487][ T2390] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007f3d55b3fa48 [ 1687.961512][ T2390] [ 1688.368066][ T2394] syzkaller0: entered promiscuous mode [ 1688.373726][ T2394] syzkaller0: entered allmulticast mode [ 1688.438690][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.450530][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.709881][ T2405] 9p: p9: multiple sources not supported [ 1688.723213][ T2408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.747418][ T2408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.770729][ T2405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.781839][ T2405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.818765][ T2405] bridge0: entered allmulticast mode [ 1688.861845][ T2405] netlink: 'syz.9.9856': attribute type 3 has an invalid length. [ 1688.883081][ T2410] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1689.424112][ T2430] syzkaller1: entered promiscuous mode [ 1689.435536][ T2430] syzkaller1: entered allmulticast mode [ 1689.755968][ T2442] IPv6: Can't replace route, no match found [ 1690.029510][T27061] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1690.182528][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.211969][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.014088][ T2473] netlink: 'syz.1.9871': attribute type 4 has an invalid length. [ 1691.056538][T29975] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1691.223272][T29975] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1691.259128][T29975] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1691.297260][T29975] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1691.307340][T29975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.315554][T29975] usb 7-1: Product: syz [ 1691.336838][T29975] usb 7-1: Manufacturer: ఄ [ 1691.357331][T29975] usb 7-1: SerialNumber: syz [ 1691.390642][ T2468] raw-gadget.6 gadget.6: fail, usb_ep_enable returned -22 [ 1691.731379][ T2487] IPv6: Can't replace route, no match found [ 1691.843563][T29975] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1691.893475][T29975] usb 7-1: USB disconnect, device number 46 [ 1691.932781][T29975] usblp0: removed [ 1691.974618][ T2492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.015161][ T2492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.836603][T29975] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1693.017636][T29975] usb 7-1: Using ep0 maxpacket: 16 [ 1693.038653][T29975] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.067804][T29975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1693.079806][T29975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1693.096123][T29975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1693.115687][T29975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1693.129434][T29975] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1693.144714][T29975] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1693.154409][T29975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.171219][T29975] usb 7-1: config 0 descriptor?? [ 1693.223627][ T2522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1693.351220][ T2526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.391565][ T2526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.406502][T29975] rc_core: IR keymap rc-hauppauge not found [ 1693.428669][T29975] Registered IR keymap rc-empty [ 1693.445703][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.489685][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.528800][T29975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1693.580004][T29975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input248 [ 1693.623480][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.688933][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.731679][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.776802][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.807026][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.836848][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.859697][ T2536] IPv6: Can't replace route, no match found [ 1693.877165][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.891453][ T2501] syzkaller1: entered promiscuous mode [ 1693.914913][ T2501] syzkaller1: entered allmulticast mode [ 1693.916591][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1693.946964][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1694.007181][T10200] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1694.036569][T29975] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1694.071149][T29975] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1694.090589][T29975] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1694.100366][ T2539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.113441][ T2539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.135558][T29975] usb 7-1: USB disconnect, device number 47 [ 1694.176902][T10200] usb 2-1: Using ep0 maxpacket: 16 [ 1694.184749][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.216757][T10200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.241243][T10200] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1694.275925][T10200] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1694.296582][T10200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.322359][T10200] usb 2-1: config 0 descriptor?? [ 1694.341475][T10200] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 1694.358866][T10200] usbhid 2-1:0.0: can't add hid device: -22 [ 1694.373274][T10200] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1694.598697][ T2550] netlink: 'syz.9.9890': attribute type 13 has an invalid length. [ 1694.612662][ T2550] netlink: 'syz.9.9890': attribute type 17 has an invalid length. [ 1694.695166][ T2551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9887'. [ 1694.713612][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.720886][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.724160][ T2551] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1694.728511][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.743675][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.942742][ T2567] FAULT_INJECTION: forcing a failure. [ 1694.942742][ T2567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.960782][ T2567] CPU: 0 UID: 0 PID: 2567 Comm: syz.7.9892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1694.960812][ T2567] Tainted: [L]=SOFTLOCKUP [ 1694.960818][ T2567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1694.960829][ T2567] Call Trace: [ 1694.960836][ T2567] [ 1694.960843][ T2567] dump_stack_lvl+0xe8/0x150 [ 1694.960869][ T2567] should_fail_ex+0x412/0x560 [ 1694.960894][ T2567] _copy_to_user+0x31/0xb0 [ 1694.960920][ T2567] simple_read_from_buffer+0xe1/0x170 [ 1694.960943][ T2567] proc_fail_nth_read+0x1bb/0x230 [ 1694.960970][ T2567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1694.960996][ T2567] ? rw_verify_area+0x2a6/0x4d0 [ 1694.961020][ T2567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1694.961045][ T2567] vfs_read+0x20c/0xa70 [ 1694.961073][ T2567] ? __pfx___mutex_lock+0x10/0x10 [ 1694.961093][ T2567] ? __pfx_vfs_read+0x10/0x10 [ 1694.961119][ T2567] ? __fget_files+0x2a/0x420 [ 1694.961144][ T2567] ? __fget_files+0x3a0/0x420 [ 1694.961176][ T2567] ? __fget_files+0x2a/0x420 [ 1694.961206][ T2567] ksys_read+0x150/0x270 [ 1694.961228][ T2567] ? __fget_files+0x2a/0x420 [ 1694.961249][ T2567] ? __pfx_ksys_read+0x10/0x10 [ 1694.961271][ T2567] ? fput+0xa0/0xd0 [ 1694.961296][ T2567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.961316][ T2567] do_syscall_64+0x15f/0xf80 [ 1694.961333][ T2567] ? trace_irq_disable+0x3b/0x140 [ 1694.961358][ T2567] ? clear_bhb_loop+0x40/0x90 [ 1694.961382][ T2567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.961399][ T2567] RIP: 0033:0x7f941775d68e [ 1694.961416][ T2567] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1694.961432][ T2567] RSP: 002b:00007f94186abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1694.961452][ T2567] RAX: ffffffffffffffda RBX: 00007f94186ac6c0 RCX: 00007f941775d68e [ 1694.961466][ T2567] RDX: 000000000000000f RSI: 00007f94186ac0a0 RDI: 0000000000000004 [ 1694.961478][ T2567] RBP: 00007f94186ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.961489][ T2567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.961499][ T2567] R13: 00007f9417a16218 R14: 00007f9417a16180 R15: 00007f9417b3fa48 [ 1694.961527][ T2567] [ 1695.222684][ T2550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1695.234833][ T2550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1695.317405][T29971] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1695.488563][T29971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.501722][T29971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 1695.535440][T29971] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1695.576592][T29971] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1695.601884][T29971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.630528][T29971] usb 7-1: config 0 descriptor?? [ 1695.650198][ T2565] raw-gadget.6 gadget.6: fail, usb_ep_enable returned -22 [ 1696.094727][T29971] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1696.222207][ T2586] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1696.239142][ T2586] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1696.259985][ T2586] veth0_to_bridge: entered allmulticast mode [ 1696.285146][ T2586] veth0_to_bridge: entered promiscuous mode [ 1696.301861][ T2586] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1696.339259][ T2586] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1696.346588][ T2586] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1696.676237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.688942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.701878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.714220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.726692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.739354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.751913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.764812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.777478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.726500][ C0] net_ratelimit: 15617 callbacks suppressed [ 1699.726514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.744865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1699.757216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.769484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.781687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1699.793882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.806113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.818400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1699.830602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.842895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.736599][ C0] net_ratelimit: 27091 callbacks suppressed [ 1704.736614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.754773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.766975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1704.779195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.791557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.803768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1704.816044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.828305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.840509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1704.852853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.725449][ C0] plantronics 0003:047F:FFFF.0081: usb_submit_urb(ctrl) failed: -1 [ 1708.314782][ T2565] plantronics 0003:047F:FFFF.0081: timeout initializing reports [ 1709.041135][T29971] usb 7-1: reset high-speed USB device number 48 using dummy_hcd [ 1709.746521][ C0] net_ratelimit: 26328 callbacks suppressed [ 1709.746543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1709.746550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.746890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.752866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.765109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.776852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.788750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.800894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1709.812841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.824722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.442307][T29971] usb 7-1: device descriptor read/64, error -32 [ 1712.076758][T29971] usb 7-1: reset high-speed USB device number 48 using dummy_hcd [ 1712.299610][T29971] usb 7-1: device descriptor read/64, error -32 [ 1712.916609][T29971] usb 7-1: reset high-speed USB device number 48 using dummy_hcd [ 1714.756557][ C0] net_ratelimit: 26482 callbacks suppressed [ 1714.756578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1714.756626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.763100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.774959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.787039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.798955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.810817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.822722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.834761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.846892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.375361][ C1] sched: DL replenish lagged too much [ 1719.766488][ C1] net_ratelimit: 26315 callbacks suppressed [ 1719.766508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.766677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.772871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.784751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.796687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.808722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1719.820680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.832519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.844381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.856486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.776545][ C1] net_ratelimit: 26757 callbacks suppressed [ 1724.776567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.776635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.782832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.794947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.806757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.818714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.830879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.842768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.854723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.866889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1729.786497][ C0] net_ratelimit: 26147 callbacks suppressed [ 1729.786517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.786661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.792863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.804850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.816698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.828740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.840804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.853032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.864673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.876620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.730711][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.747657][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.796523][ C1] net_ratelimit: 26120 callbacks suppressed [ 1734.796545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.796592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.802843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.814833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.826760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.838767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.850839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.862695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1734.874656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.886507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.806453][ C0] net_ratelimit: 26400 callbacks suppressed [ 1739.806469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.806474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.806779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.812746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.824827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.836785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.848610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.860634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.872583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1739.884688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.816402][ C0] net_ratelimit: 26260 callbacks suppressed [ 1744.816424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.816697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.822680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.834833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.846705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.859031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.870569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.882606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.894567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.906642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.826518][ C1] net_ratelimit: 26678 callbacks suppressed [ 1749.826539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.826730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.832751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.844775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.856869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.868827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1749.880761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.892650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.904636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.916747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.836411][ C1] net_ratelimit: 26559 callbacks suppressed [ 1754.836421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.836433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.836830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.842791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.855133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.866513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.878484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.890515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1754.902512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.914375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.846467][ C1] net_ratelimit: 26849 callbacks suppressed [ 1759.846487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.846647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.852754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.864853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.876933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.888741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.900760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.916879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.924587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.936673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.856620][ C0] net_ratelimit: 26479 callbacks suppressed [ 1764.856643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.856708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.862956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.874942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.886936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.898882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.911270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.922963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.934794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.946936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.866407][ C1] net_ratelimit: 26492 callbacks suppressed [ 1769.866429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.866574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.872687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.884713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.896892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.908707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.920910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.932745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1769.944691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.956664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.876443][ C0] net_ratelimit: 27077 callbacks suppressed [ 1774.876465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.876717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.882775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.894699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.906832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.918600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.930667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.942624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.954602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.966735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.886504][ C0] net_ratelimit: 27049 callbacks suppressed [ 1779.886525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.886749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.892860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.904952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.916918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.928700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.940742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.952635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.964765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.976610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.896583][ C1] net_ratelimit: 27169 callbacks suppressed [ 1784.896604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.896644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1784.902911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.914885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.926838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.938688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.950593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.962556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.974684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.986785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.198574][T27061] Bluetooth: hci5: command 0x0406 tx timeout [ 1789.906518][ C1] net_ratelimit: 27967 callbacks suppressed [ 1789.906541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.906604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.912910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.924709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.936756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.948794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.960571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.972599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.984593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.996482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1791.898136][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.915545][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.916551][ C1] net_ratelimit: 28017 callbacks suppressed [ 1794.916574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.916578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.916911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1794.922794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.934884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.946807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.958873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.970767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.982518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.994497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.926457][ C1] net_ratelimit: 27974 callbacks suppressed [ 1799.926478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.926488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.926819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1799.932818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.944681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.956649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.968605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.986597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.992367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1800.004342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1801.447054][T29971] usb 7-1: device not accepting address 48, error -71 [ 1801.646387][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1801.653373][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2602/1:b..l [ 1801.661941][ C0] rcu: (detected by 0, t=10503 jiffies, g=302505, q=2060 ncpus=2) [ 1801.669846][ C0] task:syz.4.9900 state:R running task stack:25672 pid:2602 tgid:2590 ppid:32164 task_flags:0x400040 flags:0x00080002 [ 1801.684899][ C0] Call Trace: [ 1801.688198][ C0] [ 1801.691120][ C0] __schedule+0x1821/0x5740 [ 1801.695653][ C0] ? __pfx___schedule+0x10/0x10 [ 1801.700532][ C0] ? __kernel_text_address+0xd/0x30 [ 1801.705757][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1801.710785][ C0] irqentry_exit+0x14f/0x760 [ 1801.715420][ C0] ? trace_irq_disable+0x3b/0x140 [ 1801.720471][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1801.726468][ C0] RIP: 0010:unwind_next_frame+0x4a5/0x2550 [ 1801.732290][ C0] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 c2 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 d5 19 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 75 16 00 00 83 f8 01 4c 8b 7c 24 50 48 bd 00 00 00 [ 1801.751886][ C0] RSP: 0018:ffffc900059df478 EFLAGS: 00000246 [ 1801.757952][ C0] RAX: 0000000000000002 RBX: ffffffff904ee198 RCX: ffffffff904ee19c [ 1801.765937][ C0] RDX: ffffffff90cd7476 RSI: ffffffff90cd7476 RDI: ffffffff8c28b600 [ 1801.773920][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e95cca0 [ 1801.781899][ C0] R10: ffffc900059df598 R11: ffffffff81b0f020 R12: ffffffff90cd747a [ 1801.789953][ C0] R13: ffffffff90cd747b R14: ffffc900059df548 R15: ffffffff904ee198 [ 1801.797942][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1801.804126][ C0] ? unwind_next_frame+0xd5/0x2550 [ 1801.809260][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1801.814386][ C0] ? bpf_check+0xde0/0x49f0 [ 1801.818890][ C0] ? bpf_check+0xde0/0x49f0 [ 1801.823431][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1801.829605][ C0] arch_stack_walk+0x11b/0x150 [ 1801.834364][ C0] ? bpf_check+0xde0/0x49f0 [ 1801.838868][ C0] stack_trace_save+0xa9/0x100 [ 1801.843650][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1801.849037][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1801.853979][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1801.858938][ C0] kasan_save_track+0x3e/0x80 [ 1801.863631][ C0] ? kasan_save_track+0x3e/0x80 [ 1801.868473][ C0] ? kasan_save_free_info+0x46/0x50 [ 1801.873686][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1801.878634][ C0] ? kfree+0x1c5/0x640 [ 1801.882700][ C0] ? bpf_check+0xde0/0x49f0 [ 1801.887275][ C0] kasan_save_free_info+0x46/0x50 [ 1801.892413][ C0] __kasan_slab_free+0x5c/0x80 [ 1801.897183][ C0] kfree+0x1c5/0x640 [ 1801.901096][ C0] ? bpf_check+0xde0/0x49f0 [ 1801.905622][ C0] bpf_check+0xde0/0x49f0 [ 1801.909971][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 1801.915342][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 1801.921152][ C0] ? __pfx_bpf_check+0x10/0x10 [ 1801.925942][ C0] ? __asan_memset+0x22/0x50 [ 1801.930730][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1801.935923][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 1801.941491][ C0] bpf_prog_load+0x1406/0x1a10 [ 1801.946267][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 1801.951372][ C0] ? __might_fault+0xaf/0x130 [ 1801.956081][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 1801.960413][ C0] ? security_bpf+0x7e/0x2d0 [ 1801.965006][ C0] __sys_bpf+0x618/0x950 [ 1801.969280][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1801.974054][ C0] ? __fget_files+0x2a/0x420 [ 1801.978661][ C0] ? rcu_is_watching+0x15/0xb0 [ 1801.983446][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.989529][ C0] __x64_sys_bpf+0x7c/0x90 [ 1801.994477][ C0] do_syscall_64+0x15f/0xf80 [ 1801.999073][ C0] ? trace_irq_disable+0x3b/0x140 [ 1802.004125][ C0] ? clear_bhb_loop+0x40/0x90 [ 1802.008816][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.014710][ C0] RIP: 0033:0x7f3d5579ce59 [ 1802.019135][ C0] RSP: 002b:00007f3d5657c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1802.027564][ C0] RAX: ffffffffffffffda RBX: 00007f3d55a16180 RCX: 00007f3d5579ce59 [ 1802.035549][ C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1802.043537][ C0] RBP: 00007f3d55832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1802.051528][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1802.059510][ C0] R13: 00007f3d55a16218 R14: 00007f3d55a16180 R15: 00007f3d55b3fa48 [ 1802.067502][ C0] [ 1802.070509][ C0] rcu: rcu_preempt kthread starved for 201 jiffies! g302505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1802.081604][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1802.091584][ C0] rcu: RCU grace-period kthread stack dump: [ 1802.097463][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1802.110977][ C0] Call Trace: [ 1802.114263][ C0] [ 1802.117199][ C0] __schedule+0x1821/0x5740 [ 1802.121690][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1802.126643][ C0] ? __pfx___schedule+0x10/0x10 [ 1802.131532][ C0] ? schedule+0x90/0x360 [ 1802.135791][ C0] schedule+0x164/0x360 [ 1802.140032][ C0] schedule_timeout+0x158/0x2c0 [ 1802.144920][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1802.150304][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1802.155586][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1802.161390][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1802.166971][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1802.171849][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1802.177059][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 1802.181846][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1802.188015][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1802.193325][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1802.199156][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1802.203748][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1802.208958][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1802.214784][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1802.219718][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1802.224767][ C0] kthread+0x389/0x470 [ 1802.228851][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1802.234042][ C0] ? __pfx_kthread+0x10/0x10 [ 1802.238661][ C0] ret_from_fork+0x514/0xb70 [ 1802.243264][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1802.248377][ C0] ? __switch_to+0xc79/0x1410 [ 1802.253164][ C0] ? __pfx_kthread+0x10/0x10 [ 1802.257774][ C0] ret_from_fork_asm+0x1a/0x30 [ 1802.262536][ C0] [ 1802.265535][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1802.271861][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1802.277093][ C1] NMI backtrace for cpu 1 [ 1802.277112][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.277135][ C1] Tainted: [L]=SOFTLOCKUP [ 1802.277141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1802.277153][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1802.277183][ C1] Code: 6b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 11 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1802.277197][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1802.277212][ C1] RAX: 0000000001f084f1 RBX: ffffffff819a958a RCX: 0000000080000001 [ 1802.277225][ C1] RDX: 0000000000000001 RSI: ffffffff8dface34 RDI: ffffffff8c28b660 [ 1802.277237][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1802.277250][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1802.277262][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1802.277274][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1802.277288][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1802.277300][ C1] CR2: 0000200000134030 CR3: 0000000068930000 CR4: 00000000003526f0 [ 1802.277315][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000c [ 1802.277325][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1802.277336][ C1] Call Trace: [ 1802.277343][ C1] [ 1802.277349][ C1] default_idle+0x9/0x20 [ 1802.277367][ C1] default_idle_call+0x72/0xb0 [ 1802.277385][ C1] do_idle+0x36a/0x5f0 [ 1802.277408][ C1] ? __pfx_do_idle+0x10/0x10 [ 1802.277431][ C1] cpu_startup_entry+0x43/0x60 [ 1802.277450][ C1] start_secondary+0x101/0x110 [ 1802.277467][ C1] common_startup_64+0x13e/0x147 [ 1802.277496][ C1] [ 1804.936534][ C0] net_ratelimit: 24877 callbacks suppressed [ 1804.936535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.936555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.942761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.955006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.967013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.979196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.996519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1805.003226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1805.015096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1805.027110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.946526][ C1] net_ratelimit: 25914 callbacks suppressed [ 1809.946538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.946546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.946938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.953823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.964933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.976836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.988770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1810.000831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1810.012797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1810.024764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)