last executing test programs: 1m28.430092082s ago: executing program 4 (id=30): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x15, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xff03}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003743cda4071041e0810b5010203010902d9fe010806802209041301002a76f06e676a4c654b6c3e57218d7002080a240101020b02010200240703010002000000000000001746cc00210800050122c5280088a2bbc631ee8ccea4231e060cc7"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2c19}}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x52, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800", 0x31424752}) r8 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r8, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000089f000/0x3000)=nil) 1m26.11153155s ago: executing program 4 (id=39): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x0, 0x1600000000000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1m25.95251692s ago: executing program 4 (id=40): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x20000010) r2 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x80000001, 0xfa80, 0x2000, 0x1fd, 0x1}) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) 1m24.892261263s ago: executing program 4 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x5506a, 0x0) 1m24.436139485s ago: executing program 4 (id=49): r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xa30000, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909e2, 0x2b, '\x00', @p_u8=&(0x7f0000000000)=0x6}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x1d, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x68}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, 0xfffffffffffffffe, &(0x7f00000001c0)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x4e, 0xd7, 0x10, 0x1de1, 0xc102, 0x8433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x11, 0x4a, 0xfe}}]}}]}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1m24.132139121s ago: executing program 4 (id=52): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000723000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000434000/0x3000)=nil) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x108, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) eventfd2(0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m23.579364033s ago: executing program 32 (id=52): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000723000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000434000/0x3000)=nil) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x108, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) eventfd2(0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 56.931753161s ago: executing program 3 (id=145): unshare(0x62040200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x85, &(0x7f0000000000), &(0x7f00000003c0)=0x4) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, "0040fe1e000004fb00"}) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="f7", 0x1}], 0x1a5, 0x0) r5 = eventfd2(0x3, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) r8 = signalfd4(r3, &(0x7f0000000300)={[0xfffffffffffffffa]}, 0x8, 0x80000) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f0000000180)="31d8dbd40d63fce1573933f8032a968bbcf676e69d21b44c1cd2da62fc024b23d0a5e8a0cb01c4740c8ff0ee8a677ef5af976076b3308dcbab7a97b4bc608e3a339ce5e6514c12993f40ee3deaf7caa4d15cd7688b1795e9d3e3e2446f2f964ec30ff63667a9e87e76fe4c4dc907cb3ad3b77509c58ccd80c7f725734c20d85f5977ec448019bc9ee66f12699bd23f8bc9306c6c645b7e3c9dc8c35b93c008bed02bdbf0c5c62d0f6ec43089562925f8345026bba63304e1f531b294b022febff523289e73c6ef0b4fc03909ea8db6", 0xcf, 0x231, 0x0, 0x3, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f00000004c0)="aa15849aa9e88021b64461f3c428caa3385a0595ca66abbf46f826109bde3c83add531e77233c914067fbd02a06745bf6866ed21cc6b8e33390dbe33be3b70462db233a98ab99141256a78c39717aff2339d25e76c7a2f0c76ddf88738c2b192573241fd661060017fa27a9b544a00ddd48d03c1934b8872a3ceea9d04a756a043d8044c571dcb8fb16d5dc0063b60f58f260fe3b3da33f05737e8c986d4f2ea08a5c84696f8a4bd203ac0fe681fa031bdf6192faf4a5dd2bf7ea7ac981fe63b153b0458242764f33ed79bafc4785bf0762430ffd9b569e0813ce233d5bf87253ffa3b7c7f45b596", 0xe8, 0xe, 0x0, 0x2, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x800, r0, &(0x7f0000000380)="24135488378754dd35ade39a9be473384422a1aa5b4594e472e62a8741a41cc3022e8d32dd92a3f431d51954266c6708972719c0cd1db6875e37cc0bb394648ac1b78118f99e26fa31c7f5d121554a3f487fbcab95a592555644de1b7db4956d10c43c15cdd1e1", 0x67, 0xfffffffffffffff9, 0x0, 0x0, r8}]) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0xa2a84196533518a1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r9, r0, 0x0) 56.150913589s ago: executing program 0 (id=150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000020b7080000000a00007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000020000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000008f249bb4659affe7d69d5827959dedc9d4cb3ec4c80cbbf9bc207a5e0ef5776f62277", @ANYRES32, @ANYBLOB="0000000064000000b705000008000000850000000c0000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x9ca, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r6, 0x53) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r5, 0x5, 0x4, r0, @void, @value=r5}, 0x20) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.344537418s ago: executing program 0 (id=152): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/35, 0x23, 0x1, 0x11}, @fd, @fda={0x66646185, 0x5, 0x0, 0x3e}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000e6bf808b0070600a8400102030109021b000100003000090427c6999b747f06090501030002090507"], 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/35, 0x23, 0x1, 0x11}, @fd, @fda={0x66646185, 0x5, 0x0, 0x3e}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000e6bf808b0070600a8400102030109021b000100003000090427c6999b747f06090501030002090507"], 0x0) (async) 54.39633122s ago: executing program 0 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) r2 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0190048000000000280012800b00010062726964676500001800028006000a00000000ed090014"], 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) read$FUSE(r3, &(0x7f0000000900)={0x2020}, 0x2020) 53.471554396s ago: executing program 3 (id=159): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000010d802, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff00c}, {0x6}]}, 0x10) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r8, 0x2f, 0x92, 0x5, 0x7f, 0x60, @dev={0xfe, 0x80, '\x00', 0x33}, @empty, 0x4081, 0x0, 0x40, 0x6}}) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fsopen(&(0x7f0000000080)='reiserfs\x00', 0x0) 53.193265861s ago: executing program 1 (id=160): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008a00000000000000000000800000000000e44246064141a796"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r1, &(0x7f0000000540), 0x0}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0x9, 0xb3, {0xb3, 0x6, "ba812fde2f91a9c15eaa6dd932676ee22f3b591da29f9550434f2608fb672a7a55ce1f451ec0f214b86b12f8088ff67b826297877add76aa62b48d0545706716de55ff4bbee3df28fc397f8358d11f68901ae9c0827edee6f14c0d0dff988694ce7136bd2687c5b967c61867a284ea106c1d4f63303715327b676a6ee6c38a7c3593a4b6fa6049cf6d76aa53d10066e50f4e2ea4e170dab62928790d7c08663408e5c057f589c3d91074de34d6e5262689"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0x16, 0x96, "ba04b37a61417e2e2a3228b9a00fe45f764da7c26815b1cc09c09416dd3caae82649f74251beb7c23208e4798cfebe7a32e8d35079b69feca2ed1a686fe36fcaff46a3ad966ee184d8c1bdccfc812d8b3842e82c4bd18bcc17fe23a52b8a3cb1da7a1a7770cf7a8de9fb03581aa0d8e6f1bb8d70e0d2ce0de0b14f3bfa96e9574e4585fbf5de0ccb050421d0db14d6b3711364d89d13"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x1ff, 0x0, 0x0, 0x3, 0x7, 0x77, 0xf, 0x80000001, 0x81, 0x7, 0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r2, 0x0, r2, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711071000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc7, &(0x7f0000000080)=""/199, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 53.116484515s ago: executing program 0 (id=161): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="0004040000e0372373140dae3a704e7d27a7374a131fce936d7681"], 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x400c021) listen(0xffffffffffffffff, 0x3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd1) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r9 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) iopl(0x7) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x0, 0x1, 0x0, 0xff, 0x0, 0x1045}}) r11 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x1000}) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r12}) close_range(r1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x555400, 0x300) 52.72102502s ago: executing program 0 (id=162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001e00438b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000000000001c001700000000000000000500"/104], 0x68}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r6, 0x3ab8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) unshare(0x2a020400) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000000)={0x9f, 0xf, 0x0, 0x9, "4ff16929eeefd5ad06861377209e6b8b41abc722cc4380ea68155bfc59e4ead2"}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, 0x1040}}, 0x20}}, 0x0) 52.698232537s ago: executing program 3 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40b80, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000240)=0xffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, &(0x7f0000000240)=""/237, 0xed) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801020021000000000000003b8100008500003f6d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) ioperm(0x0, 0x6, 0x6) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) fsopen(&(0x7f0000000fc0)='overlay\x00', 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010000000000ffdbdf2507000000", @ANYRES32=r9, @ANYBLOB="020500000a000200aaaaaaaaaa1c"], 0x28}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_plug\x00', r10, 0x0, 0x7}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x551300, 0x0) write$binfmt_misc(r11, &(0x7f00000004c0)="6c67ed691f3f05ed5bdcdbfa6743d3832fdcea8a0200000c000000bfa44c003ec6ce5ff6d570ceec00822e5fda64f4519ef7bf8b3e180389a8efcbf7d2d3edfe18ff03676d40f9a0cecf8c70284eb12488363ae3e32fa79bb173d381690298659c91ff2ae14fd4787e6b3ef563efa087539d00ac82846ae10000481cdab535686499fc1c7a27d2903a56266172fa492edb625a0d3d", 0x95) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xbc) splice(r10, 0x0, r0, 0x0, 0x9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0xe, 0xfff1}, {0xffff, 0x8}, {0xfffd}}}, 0x24}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="eaf91f0d13ca94781240f19da0e6ded6a8fcca730918fce685e7ac5ffe8e289e6e0c5dfeeec23c6736590c8bc9d07392c8bb9fabbd50e08189b48f61ef6a406b4e3c3dec5266f20e8286a66a1380b5abd6ec0ec69cec0d88a5e7aa62412385baed37c763", @ANYBLOB="00000000080000002c0012800b00010062726964676500001c00028005000700000000f50600060000000000080004"], 0x4c}}, 0x0) 52.5993149s ago: executing program 2 (id=164): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000005, 0x13, r0, 0x80a4a000) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) r2 = socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) chdir(&(0x7f0000000480)='./cgroup\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x208400, &(0x7f0000000140)="cf63540daa4918ecd82c57e82ce49427d78e320360275d7ddfa97629c5d5c8df5c03bb631a2bcb0d7dd925dc015baeb69b30b23c82ae82851fa3c2956b22569830963898aa85dc4675b97277a7e7119c65cf48d4d28d9c0113ccf47793552fe94d7b3eb00d479769f45c29770e65f1078366a2551588212ed350b1e2b220c3b3dc3e95873d54b32b4f1c81a4a527", 0x8e, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="757699c45b0f4cb8350582ec7f130751bfb6e15b89f32a7f132c556a855aa5d022d961358a08308426bb") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300021200000000000000000000000200080008000000a30000000000000005000600000000000a00000000000000fc02000000000000000000000000000000090000000000000000010000000000000009000000000005000500000000000a0000000000000000000000000000000000000001000000000000000000000001001400000000160000000000"], 0x90}, 0x1, 0x7}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev, 0x9}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x7ffffffd, @local, 0x3c}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x80000000, 0x90}, &(0x7f0000000100)=0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_proto_private(r1, 0x81e0, &(0x7f0000001080)) 52.267305086s ago: executing program 5 (id=165): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x22000) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f0000000040)={0x40f0f000, 0x7, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xf4af, 0x0, 0x0, [0x0, 0x2, 0x1]}) r2 = socket(0x2a, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x9, 0xcb, 0x200b, 0x9, 0x4, 0x7, 0x2, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.124634559s ago: executing program 2 (id=166): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mprotect(&(0x7f00007e0000/0x4000)=nil, 0x4000, 0x2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 52.036881493s ago: executing program 5 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x60600) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4, 0xd000, 0x2, r2, 0x1}) 51.745611111s ago: executing program 5 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x40d, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, [@IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x28}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000280)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000007c1c548cb3e767a312"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00'/12], 0x0, 0x0, 0x0, 0x0}) r3 = mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6\xe18D\x9e\xe3\x9f\xdb\x92\x17f\xa3[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8-\x01\xf9\xeb?T\xa7\x03\x01LsmD\xbc\r\xed\xc9K\x87-e!20Td\x113\x17\x18r\xd7$BU\xc6o\x82\xd1\x18+v\xeba\f\xd7\xeb\xba\f\xab\x87\'w\xc1\x1dg\x1f\x1f\xb5\vNH\xbe\xd1|\x06\xdb\x9c\x10\'_s\xb9\xbe\xf3\xceH\xe0\xae\xd3\xcbw$\xb3I\xde|\xd8\x98\a\x1e\xf6\x02\xb3\xa7\x87\xb48Em\\f@ \xac>\x95]_\x99\xeb\xafd\x95\xd1\xe1\xa7Xv\\a?\xb5\xc9+\\\xd8\xa5\x1b\xb9\xe0\x9b\x8b\xd2\x14\xbd\xcc\x82\xc2[ ?\xea$\x8a\x17\xb8u\xd0\xeb\xcea\xd3\'\xb2a0z\x8eZ\x15\xa2]\xa8-_2I\x8b\xb97\xb8\x87N\xba\x8e\xa8\f\xae\x836\xb4\x02\x8b\xce&\'\xe2\xc6\xc8\xbf\x96dV\xa0^J\xdc\xc0J\xb3\xc2<\xf9Ke\x94\xdf\x11\x10[\v?B\xbfQ\x8e\xed\xb0\xae4\x9e\x9c\xb9\xd6m\xc2[\xdc\x89', 0x6e93ebbbcc0884f2, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1, 0x3, 0x20b, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f0000000200)='@#\xc0[)\x00', 0x1, 0xc0, &(0x7f0000000240)={0x1, 0xd6, 0x9, 0x80000000}) close_range(r9, r3, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x73}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000001c0)={0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r11}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r11, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) close_range(r12, 0xffffffffffffffff, 0x0) 51.616339035s ago: executing program 3 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008402"]) 51.008505897s ago: executing program 3 (id=170): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x64, &(0x7f0000000040)={@local, @random="8988bb3c6837", @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2a, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}, {"c6c1ae704117c9e0c05e9be8eb756c64aa32246f0c51"}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x11) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f00000000c0)="10") preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xfffffec3}], 0x1, 0x0, 0x0, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) 50.970817846s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x80003, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r4, r5, 0x0, 0x2, 0x5, 0x200, {0x2, 0x7f, 0x180, 0x10, 0xfdfc, 0x2025, 0x8001, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x4, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) (async) close(r6) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005b9aed"], 0x5c}}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="05000000008563c0a8559d000f0000000000", @ANYRES32=r10, @ANYBLOB="44000e0080000000080211000000080211000000ffffffffffff00000000000000000000010001002d1a0200110400000000000000080002000c00000001000200000003080026006c090000080027000300000008000c006400000008000d0065790000"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000003080300000000000000000002000005050003000100007a3100000000050003031100000000c66b48030000"], 0x30}, 0x1, 0x0, 0x0, 0x6044050}, 0x400c000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x2c, 0x17, [0x1, 0x3, 0x2, 0x79c2, 0x3, 0x5, 0x9, 0x8, 0x9, 0x4]}]}, 0xc0}}, 0x800) 50.772751709s ago: executing program 2 (id=172): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x8010d, &(0x7f0000000140)={0x0, 0x7, 0x1, 0x0, 0x69}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000005940)=""/162, 0xa2}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f00000000c0)=""/16, 0x10}], 0x7, &(0x7f0000000780)=""/236, 0xec}, 0x400}, {{&(0x7f0000000880)=@xdp, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000a40)=""/207, 0xcf}, 0x10000}, {{&(0x7f0000000b40)=@tipc=@id, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/4112, 0x1010}, {&(0x7f0000001c00)=""/123, 0x7b}, {&(0x7f0000001c80)=""/15, 0xf}, {&(0x7f0000001cc0)=""/68, 0x44}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000001d80)=""/145, 0x91}, {&(0x7f0000001e40)=""/98, 0x62}, {&(0x7f0000001ec0)=""/77, 0x4d}], 0x9, &(0x7f0000005740)=""/231, 0xe7}, 0x9}], 0x3, 0x4062, &(0x7f0000005840)={0x77359400}) read$FUSE(r6, &(0x7f0000003700)={0x2020}, 0x2020) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) move_pages(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f00003ce000/0x3000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000058c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000005900)=r10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 50.608556866s ago: executing program 1 (id=173): r0 = socket$rds(0x15, 0x5, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0", 0x3a}], 0x1) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000063721c40b822484bf03f0102030109024c0001011000000904000000fffbff00052d06000105240000000d240f"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, 0x0) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) sendto$inet6(r4, &(0x7f00000001c0)="47d9a3daa1ef001650b63e4b2427df906b1283ecda6cc83661a433e51ed4741de536e8714d45e09fb55fe35b85198dc8525528662bb1c19b32f8f375ac66951e42395dfdcb63e801b164b70dcb34d7f5919d7eddbd0d04511279a7dbd024547a2419d5000c13d5ba0cd4", 0x6a, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffc, @loopback, 0xfffff5da}, 0x1c) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa7d1}}, './file0\x00'}) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = fsopen(&(0x7f0000000480)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, "00000000000000000000ffff00"}) (async) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) ioctl$TIOCMBIC(r8, 0x5417, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00'}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) 49.311160238s ago: executing program 2 (id=174): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = epoll_create(0x6) epoll_pwait2(r1, &(0x7f00000003c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60120008"], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @dev}}}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x5, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x20, 0xffffffcf, 0x200}}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xd, 0x2, 0x80000001, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = memfd_secret(0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r4, 0x25, 0xe, @val=@netfilter={0x1, 0x3, 0x10000}}, 0x20) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r10, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000001c0)={r10, 0x663}, 0x8) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfd}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) io_setup(0x4001, &(0x7f0000000040)=0x0) io_destroy(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}}, 0x0) 49.233307064s ago: executing program 1 (id=175): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1, {[@md5sig={0x13, 0x12, "c7fa719149ed4de461bbc10d85221b94"}]}}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 48.886851338s ago: executing program 0 (id=176): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000000c0)=0x2e49) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 48.098409912s ago: executing program 5 (id=177): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x1, 0x40, 0x7fffffff, 0x6, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0xf, [{@broadcast, 0x1}, {@remote, 0x3}]}, @end, @generic={0x94, 0x11, "dc29e214821559c12bd2c0237c634e"}, @lsrr={0x83, 0x7, 0xd9, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x1, [{@loopback, 0x7}, {@multicast1, 0x36}, {@multicast1, 0x8001}, {@multicast2, 0x1}, {@multicast2, 0x9}, {@private=0xa010101, 0x9}]}, @cipso={0x86, 0x34, 0x0, [{0x6, 0x10, "384e98e2388cdb8b73464193127b"}, {0x1, 0xd, "a52d1148c9cfaf7f766617"}, {0x7, 0x7, "35018805c8"}, {0x1, 0xa, "41c831bec0ebdb53"}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0020820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdr={0x48, 0x15, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x4, 0xfd, r0}, [@IFA_FLAGS={0x8, 0x8, 0x725}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8020}, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x1}}, 0xfd3d, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x0) 48.000776367s ago: executing program 1 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x60600) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4, 0xd000, 0x2, r2, 0x1}) 47.973870454s ago: executing program 2 (id=179): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8", 0x19}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xaa, 0xc37, 0x6}) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000009680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20, 0x10}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x2}, 0x18) sendmsg(r2, &(0x7f0000000980)={&(0x7f00000004c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, 0x0}, 0x80) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x248080, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83c9c000) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x3, "55d9c4013109fcee15daee7a7c00a0eae626e7a03f2e42f64c45679766af7286", 0x1}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip6_tables_targets\x00') ftruncate(r8, 0x7fffffff) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x14) 47.79934083s ago: executing program 5 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x15, 0x0, 0x4000, @void, @value}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 47.656434515s ago: executing program 1 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}]}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 47.328542861s ago: executing program 1 (id=182): unshare(0x22000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000085c0)={0x1c, 0x43, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x148}]}]}, 0x1c}}, 0x48844) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x0, 0x10, "467b727d89e87f94d14d056d359a6db6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040), 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x3, 0x91, {0x91, 0x2, "1583a73df94bb7343c1d8471d396637ec61e13459ce990da04229f9bcf825bea43810742363eafab03663e69b7af29680732b4077662370cd5d27938f48247054d0140663f4cc7c17fa03b0484337ccc77752018c60bb73d2fb4c3ca2dd8d36da4a9e7fb2defa99c26c7779bbf6d23026bf255b801b937334a291a740ce1faa64bf3a5c2a571cdfb43879bf80c37cd"}}, &(0x7f0000000140)={0x0, 0x3, 0xd, @string={0xd, 0x3, "d846c9bdce3d588a484cb1"}}, &(0x7f0000000400)={0x0, 0xf, 0x158, {0x5, 0xf, 0x158, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "e5505d24e62d4a6eae707a67824f2277"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x2, 0xf00, 0x7fff, [0xff]}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "3ab96c28f65f2a61e3e9d1e81c23d737"}, @generic={0xed, 0x10, 0x1, "b1eeee192567e9bbf18be1d97e8dd4677230eddd4ddb6b75517dc22317bb87fe1c46abd0f8d538890633047be1ad4dd2c41e3d939221b74d2052567278af47920aa60712fbc80f815c50e17fbfa6fdeb9763782cdb842f9e18e1942940b71be986d736a0dcae5229850bd21627cf42c6cb6b035387ada39bff1fcdd3f93868634d7d25854431d94da9addfe12e80eda888ea54bd1936a6588e5ae27e28591a35c775699cb9c5fcc51d57634690fe3b796a2bc5c5ce9ddf4a01be043c1b45705361f571f91a705b002f09f1fcda9640997f808cf37a2d4b72f943dae33fb48e4c4a534651a4ff133203f0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x7, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0x0, 0x91d, [0xff3f0f, 0xc000, 0xc0, 0xc06f, 0xc030, 0x3f]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x2, 0x7, "923658a7", "858322a0"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x3, 0x8, 0xdb, 0x4f, 0x3d}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x0, 0xf, 0x87, "f2b5773a06127859c3a93f48dc46b7ad72b251a3a52a4a7dfeded53d8b8c2442326548288ef9953be61a0c0049ef89c31f986dbce26f5b7bb1b70ba92134289c73eb6bdcbe7108866b2d9c7d7037d2ac2f79dae772f949fd9fbefbf7111a9bc62b8457485b33114bf4e6dca81d1bb77bd199efc76500f0daf35145f36f7b5e962a7046e4272bc8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf0ff]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8000}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000000800)={0x40, 0xb, 0x2, "f957"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="01a2a5796162"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "2d17"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x56}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xa}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x2a, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) 47.237561932s ago: executing program 5 (id=183): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0x7, 0x6, 0x7, 0x8}, 0x52, [0x86, 0x3e, 0xfff, 0x3, 0x8001, 0x85, 0x4, 0xffffffa9, 0x0, 0x80, 0x1, 0x10, 0x6, 0x101, 0x7, 0x9, 0x6ff8, 0x18, 0x10001, 0x6e72, 0x5f, 0x1, 0x7, 0x4, 0xb59, 0x0, 0x6, 0x3, 0x4, 0x10000, 0x7, 0xed1c, 0x4, 0x0, 0x6, 0x0, 0x6, 0x2, 0x9, 0x3, 0x8, 0x4, 0x400, 0xfffffff7, 0x7, 0xf, 0x1ff, 0x1, 0x618b6935, 0x4, 0x4, 0xff, 0xb, 0x3, 0x0, 0x9, 0x400001, 0x4, 0x7f, 0x1, 0xe3, 0x800, 0x2, 0xb], [0x3, 0xd, 0x8, 0x7fff, 0x5, 0x4, 0x6, 0xbddf, 0xffffffff, 0x6, 0xc48b, 0x1, 0x6, 0x4, 0xd, 0xae, 0x7, 0x9, 0x45b230d7, 0x1, 0x2, 0x33, 0xfffffffc, 0x7b6, 0x10, 0x1ff, 0x0, 0x1, 0x401, 0x6, 0x9, 0x10001, 0xda, 0x100, 0x229d, 0x5, 0x65, 0x6, 0x0, 0x269a1735, 0xc81, 0x1, 0x1, 0x101, 0x80000001, 0x2a8e, 0xa3b5, 0xffff, 0x8, 0x7, 0x5, 0x9d, 0x62a0b0e9, 0xa45, 0x20, 0x7, 0x4, 0x2, 0xfc66, 0xd, 0x8, 0x6, 0xa32d, 0xffff8000], [0x7, 0x6, 0x7, 0x1, 0x0, 0x1, 0x6, 0x0, 0x0, 0xa, 0x800, 0x800, 0x5205, 0x423, 0xffff, 0xfffffffa, 0x1, 0x7f, 0x3, 0x10006, 0xa, 0xfffffff9, 0x2075, 0x1000, 0x200, 0x1ff, 0x63e, 0x94c, 0x4ad9, 0x1, 0x30, 0x1, 0x3, 0x0, 0xa28, 0x0, 0x9, 0x55, 0x7a9d, 0xb63, 0x7, 0xcd4, 0x6, 0xeec, 0xfffffffd, 0x4, 0x0, 0x5, 0xfffffffc, 0x1, 0x7f, 0x40, 0x100, 0xa2c2, 0x5, 0x5, 0x2, 0x7, 0x8, 0x80, 0x4, 0x1, 0x1, 0x7f], [0x800, 0xb99, 0x5, 0x2, 0x10, 0xfff, 0x2, 0xfff, 0x3, 0x5, 0x6, 0xa, 0x7fffffff, 0xd951, 0x6, 0x5, 0x5, 0x0, 0x3, 0x8000, 0x1, 0x8, 0x2, 0x7, 0x0, 0x3, 0x9, 0x7, 0x10001, 0x1d, 0xd, 0x4, 0x9, 0x13e, 0x7, 0x7, 0x6, 0xc922, 0x8, 0x9, 0x49, 0x3, 0x6, 0x8, 0x59, 0x80000000, 0x4, 0x8001, 0xffffff81, 0x9, 0x3, 0x7fff, 0x2, 0x80000000, 0xfffffffe, 0xc47, 0x8, 0x7, 0x7, 0x7, 0x2, 0x1c0, 0x0, 0x3]}, 0x45c) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000002380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fallocate(r5, 0x20, 0x800, 0xe) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x23, 0x12, {0x12, 0x5, "54f306f6fbb470cf92a8dd50069eafd5"}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="000fd5000000d503afaf14f7558597d0cd9fc10ebffd3b64fde7e63b5c68a10138f0dbc801c0ac9aac101d2fbf4d7208156556aecdc7042fd4ac7f3926c7e24eb746c04d1cb6eb62959e51b5564511fcd310cd7a8edea02a23e4df570fe0be5618121cb1988eb63564bf23fba3317cf45f92563519b5dba2bc4ad38af5ab36c42f75dab0056c22955561d0e9cf738527b0bc7625f08e1228b257494ca7cd1332fdd965a358df5e9b4827538baea40de44f06005f2d30bac42832dc915e4e2a6d95ed9388d1bb1e734d59f07754a6a9cb158b01b717639ded7a9884242d49d51c0461f76ba45add"]}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0xb, 0xb3, "d45cc2804e871f367e8b40a4841e0d3123ec42a19966c0121f3a8e10528a04d4f11f601dc6ce6c5f2899b58ca3c0bd6f2fd02e4a6b2280c976637caa767524d57999e7517e81d3b4a61c37da73c980cb678d9d9df76e4727ba2dd30714a13ad5aa6e43818078633b8fc8f0b49caf0f90b8198367d8fd6d8d2f10509ebb26044d398862cf7386a7dfa65fbe431a6195cc0065d0ab41e17e73f84c6e9c0169572a32bed8e81be745992d6cc377f558ddce9e52a3"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000840)={0x20, 0x81, 0x3, "24adf8"}, &(0x7f0000000880)={0x20, 0x82, 0x3, 'noI'}, &(0x7f00000008c0)=ANY=[@ANYBLOB="000018daca00000000"], &(0x7f0000000900)=ANY=[@ANYBLOB="208401006b00fc"], &(0x7f0000000940)={0x20, 0x85, 0x3, "83e48d"}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00003ef000/0x4000)=nil, 0x4000, 0x0, 0x28011, r7, 0x0) 47.057144067s ago: executing program 3 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x40d, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, [@IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x28}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000280)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000007c1c548cb3e767a312"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00'/12], 0x0, 0x0, 0x0, 0x0}) r3 = mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6\xe18D\x9e\xe3\x9f\xdb\x92\x17f\xa3[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8-\x01\xf9\xeb?T\xa7\x03\x01LsmD\xbc\r\xed\xc9K\x87-e!20Td\x113\x17\x18r\xd7$BU\xc6o\x82\xd1\x18+v\xeba\f\xd7\xeb\xba\f\xab\x87\'w\xc1\x1dg\x1f\x1f\xb5\vNH\xbe\xd1|\x06\xdb\x9c\x10\'_s\xb9\xbe\xf3\xceH\xe0\xae\xd3\xcbw$\xb3I\xde|\xd8\x98\a\x1e\xf6\x02\xb3\xa7\x87\xb48Em\\f@ \xac>\x95]_\x99\xeb\xafd\x95\xd1\xe1\xa7Xv\\a?\xb5\xc9+\\\xd8\xa5\x1b\xb9\xe0\x9b\x8b\xd2\x14\xbd\xcc\x82\xc2[ ?\xea$\x8a\x17\xb8u\xd0\xeb\xcea\xd3\'\xb2a0z\x8eZ\x15\xa2]\xa8-_2I\x8b\xb97\xb8\x87N\xba\x8e\xa8\f\xae\x836\xb4\x02\x8b\xce&\'\xe2\xc6\xc8\xbf\x96dV\xa0^J\xdc\xc0J\xb3\xc2<\xf9Ke\x94\xdf\x11\x10[\v?B\xbfQ\x8e\xed\xb0\xae4\x9e\x9c\xb9\xd6m\xc2[\xdc\x89', 0x6e93ebbbcc0884f2, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1, 0x3, 0x20b, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f0000000200)='@#\xc0[)\x00', 0x1, 0xc0, &(0x7f0000000240)={0x1, 0xd6, 0x9, 0x80000000}) close_range(r9, r3, 0x0) r10 = msgget(0x1, 0x2b0) msgrcv(r10, 0x0, 0x0, 0x1, 0x2000) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x73}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000001c0)={0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r12}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r12, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 0s ago: executing program 33 (id=176): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000000c0)=0x2e49) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ngs: Mfr=1, Product=2, SerialNumber=3 [ 87.385086][ T9] usb 2-1: Product: syz [ 87.391813][ T9] usb 2-1: Manufacturer: syz [ 87.399905][ T9] usb 2-1: SerialNumber: syz [ 87.441480][ T9] usb 2-1: config 0 descriptor?? [ 87.473522][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.633648][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.975469][ T8] usb 3-1: device descriptor read/64, error -71 [ 88.083515][ T8] usb usb3-port1: attempt power cycle [ 88.158677][ T47] usb 4-1: USB disconnect, device number 2 [ 88.193163][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.299773][ T5967] syz.3.21 (5967): drop_caches: 0 [ 88.343222][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 88.351142][ T5881] usb 1-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 88.366220][ T5881] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.381863][ T5881] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 88.409556][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.421446][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.433250][ T5881] usb 1-1: Product: syz [ 88.437462][ T5881] usb 1-1: Manufacturer: syz [ 88.442214][ T5881] usb 1-1: SerialNumber: syz [ 88.450952][ T5881] usb 1-1: config 0 descriptor?? [ 88.463779][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.471498][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.503844][ T8] usb 3-1: device descriptor read/8, error -71 [ 88.633363][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 88.646138][ T9] usb 5-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 88.657149][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.675373][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 88.689001][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.697711][ T9] usb 5-1: Product: syz [ 88.701920][ T9] usb 5-1: Manufacturer: syz [ 88.713657][ T9] usb 5-1: SerialNumber: syz [ 88.730796][ T9] usb 5-1: config 0 descriptor?? [ 88.775940][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.814409][ T8] usb 3-1: device descriptor read/8, error -71 [ 88.936250][ T8] usb usb3-port1: unable to enumerate USB device [ 89.119068][ T5969] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 89.404564][ T5971] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 89.864355][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.133179][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 90.184621][ T8] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 90.195210][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.218752][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 90.239089][ T47] usb 2-1: USB disconnect, device number 2 [ 90.278761][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.299391][ T8] usb 4-1: Product: syz [ 90.313393][ T5882] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.322190][ T8] usb 4-1: Manufacturer: syz [ 90.335247][ T8] usb 4-1: SerialNumber: syz [ 90.367929][ T8] usb 4-1: config 0 descriptor?? [ 90.490473][ T5978] Zero length message leads to an empty skb [ 90.503217][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 90.537897][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.559896][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 90.591754][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.668016][ T5882] usb 3-1: config 0 descriptor?? [ 90.691172][ T5882] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 90.721211][ T5980] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 90.784051][ T5980] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25'. [ 90.806611][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 91.059594][ T5982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.344768][ T8] usb 1-1: USB disconnect, device number 3 [ 91.883132][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.968891][ T47] usb 5-1: USB disconnect, device number 2 [ 92.055511][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 92.068901][ T5882] usb 1-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 92.096063][ T5882] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.117718][ T5882] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 92.132776][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.154554][ T5882] usb 1-1: Product: syz [ 92.164580][ T5882] usb 1-1: Manufacturer: syz [ 92.173467][ T5882] usb 1-1: SerialNumber: syz [ 92.191016][ T5882] usb 1-1: config 0 descriptor?? [ 92.444501][ T5998] netlink: 4668 bytes leftover after parsing attributes in process `syz.4.30'. [ 92.455618][ T5998] netlink: 4668 bytes leftover after parsing attributes in process `syz.4.30'. [ 92.486633][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.506786][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 92.521936][ T5998] ipvlan2: entered promiscuous mode [ 92.543482][ T5998] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.567619][ T5998] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.793532][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.868733][ T6007] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 92.967134][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.010187][ T8] usb 3-1: USB disconnect, device number 6 [ 93.106809][ T5882] usb 5-1: config index 0 descriptor too short (expected 65241, got 18) [ 93.217191][ T5882] usb 5-1: config 8 has an invalid interface number: 19 but max is 0 [ 93.299809][ T5882] usb 5-1: config 8 has no interface number 0 [ 93.325964][ T5882] usb 5-1: config 8 interface 19 has no altsetting 0 [ 93.337987][ T119] usb 4-1: USB disconnect, device number 3 [ 93.350122][ T5882] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=b5.10 [ 93.366945][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.376543][ T5882] usb 5-1: Product: syz [ 93.380812][ T5882] usb 5-1: Manufacturer: syz [ 93.385738][ T5882] usb 5-1: SerialNumber: syz [ 93.990794][ T5882] spcp8x5 5-1:8.19: required endpoints missing [ 94.013747][ T5882] usb 5-1: USB disconnect, device number 3 [ 94.220776][ T6026] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 94.234897][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.242239][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.258030][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.265198][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.272577][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.279707][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.297094][ T6026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.311577][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 94.323673][ T6026] bridge_slave_1: left allmulticast mode [ 94.329376][ T6026] bridge_slave_1: left promiscuous mode [ 94.339413][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.349204][ T6026] bridge_slave_0: left allmulticast mode [ 94.355975][ T6026] bridge_slave_0: left promiscuous mode [ 94.361761][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.384014][ T6026] bond0: (slave bridge0): Releasing backup interface [ 94.393182][ T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.433296][ T119] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.553152][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 94.559602][ T47] usb 2-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 94.571286][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.582001][ T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 94.591307][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.599451][ T47] usb 2-1: Product: syz [ 94.607638][ T47] usb 2-1: Manufacturer: syz [ 94.612290][ T47] usb 2-1: SerialNumber: syz [ 94.619551][ T47] usb 2-1: config 0 descriptor?? [ 94.627097][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 94.646560][ T119] usb 3-1: config 5 has an invalid interface number: 206 but max is 0 [ 94.663142][ T119] usb 3-1: config 5 has no interface number 0 [ 94.672041][ T119] usb 3-1: config 5 interface 206 has no altsetting 0 [ 94.695207][ T119] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 94.720259][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.729554][ T119] usb 3-1: Product: syz [ 94.734216][ T119] usb 3-1: Manufacturer: syz [ 94.739293][ T119] usb 3-1: SerialNumber: syz [ 94.964650][ T119] usb_ehset_test 3-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 94.977901][ T119] usb 3-1: USB disconnect, device number 7 [ 95.273533][ T5882] usb 1-1: USB disconnect, device number 4 [ 96.045402][ T6049] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 96.151861][ T6049] ======================================================= [ 96.151861][ T6049] WARNING: The mand mount option has been deprecated and [ 96.151861][ T6049] and is ignored by this kernel. Remove the mand [ 96.151861][ T6049] option from the mount to silence this warning. [ 96.151861][ T6049] ======================================================= [ 96.186755][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.700953][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 96.716434][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 96.757028][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 96.786224][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.820104][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 96.999357][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.099478][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.210895][ T8] usb 2-1: USB disconnect, device number 3 [ 97.231599][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.350235][ T6082] mmap: syz.3.56 (6082) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.580565][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 97.589739][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 97.600135][ T6091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.59'. [ 97.609757][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.59'. [ 98.064501][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.077020][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.087286][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.097461][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.119376][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.127018][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.556320][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.565404][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.813731][ T5882] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.003364][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 99.015058][ T5882] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 99.023722][ T5882] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 99.050162][ T5882] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 99.081929][ T5882] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 99.137525][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 99.164593][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 99.184885][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 49177, setting to 1024 [ 99.196241][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 99.214929][ T5882] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 99.224476][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.232327][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.271826][ T5882] usb 3-1: Product: syz [ 99.288567][ T5882] usb 3-1: Manufacturer: syz [ 99.313274][ T5882] usb 3-1: SerialNumber: syz [ 99.370925][ T5882] usb 3-1: config 0 descriptor?? [ 99.383142][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 99.395392][ T47] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 99.406315][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.415969][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.425382][ T5882] hub 3-1:0.0: bad descriptor, ignoring hub [ 99.436685][ T47] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 99.453462][ T5882] hub 3-1:0.0: probe with driver hub failed with error -5 [ 99.464541][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.479519][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.510425][ T47] usb 4-1: Product: syz [ 99.523076][ T47] usb 4-1: Manufacturer: syz [ 99.527742][ T47] usb 4-1: SerialNumber: syz [ 99.546734][ T47] usb 4-1: config 0 descriptor?? [ 99.561933][ T11] bond0 (unregistering): Released all slaves [ 99.582970][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 99.703354][ T5882] usb 3-1: USB disconnect, device number 8 [ 99.733822][ T5916] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 99.924743][ T5916] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 99.937134][ T5916] usb 1-1: config 0 has no interface number 0 [ 99.944522][ T5916] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 99.963513][ T5916] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 100.007760][ T5916] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 100.031787][ T5916] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 100.046799][ T5916] usb 1-1: Product: syz [ 100.067840][ T5916] usb 1-1: Manufacturer: syz [ 100.080313][ T5916] usb 1-1: SerialNumber: syz [ 100.092303][ T5916] usb 1-1: config 0 descriptor?? [ 100.101594][ T6107] chnl_net:caif_netlink_parms(): no params data found [ 100.113715][ T5916] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 100.122473][ T5916] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 100.130499][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.135854][ T5916] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 100.148708][ T5916] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 100.159344][ T5916] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 100.170709][ T5916] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 100.180123][ T5916] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 100.190351][ T5916] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 100.200104][ T5916] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 100.208081][ T5143] Bluetooth: hci4: command tx timeout [ 100.214558][ T5916] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 100.316783][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 100.332926][ T5881] usb 1-1: USB disconnect, device number 5 [ 100.354739][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.378979][ T5881] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 100.389696][ T6132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.415577][ T47] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.434380][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.456305][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.467835][ T5881] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 100.483143][ T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.503333][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.511385][ T47] usb 2-1: Product: syz [ 100.516604][ T47] usb 2-1: Manufacturer: syz [ 100.521259][ T47] usb 2-1: SerialNumber: syz [ 100.528097][ T5881] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 100.544301][ T5881] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 100.559137][ T5881] keyspan 1-1:0.107: device disconnected [ 100.628120][ T11] hsr_slave_0: left promiscuous mode [ 100.656142][ T11] hsr_slave_1: left promiscuous mode [ 100.693547][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.709628][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.719576][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.733737][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.764683][ T11] veth1_macvtap: left promiscuous mode [ 100.770879][ T11] veth0_macvtap: left promiscuous mode [ 100.780446][ T11] veth1_vlan: left promiscuous mode [ 100.807876][ T11] veth0_vlan: left promiscuous mode [ 100.817601][ T29] audit: type=1326 audit(1733981689.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc4557ff19 code=0x0 [ 100.913752][ T1205] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.073613][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 101.172316][ T1205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.210277][ T1205] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.256934][ T1205] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.353823][ T1205] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.357534][ T1205] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.357561][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.357577][ T1205] usb 3-1: Product: syz [ 101.357611][ T1205] usb 3-1: Manufacturer: syz [ 101.357623][ T1205] usb 3-1: SerialNumber: syz [ 101.702591][ T29] audit: type=1326 audit(1733981690.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x0 [ 101.833227][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.992453][ T5881] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 102.001453][ T5881] usb 1-1: config 0 has no interface number 0 [ 102.011830][ T5881] usb 1-1: too many endpoints for config 0 interface 141 altsetting 32: 250, using maximum allowed: 30 [ 102.042483][ T5881] usb 1-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 102.061873][ T5881] usb 1-1: config 0 interface 141 has no altsetting 0 [ 102.072177][ T5881] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 102.094136][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.102560][ T5881] usb 1-1: Product: syz [ 102.107148][ T5881] usb 1-1: Manufacturer: syz [ 102.111826][ T5881] usb 1-1: SerialNumber: syz [ 102.122573][ T5881] usb 1-1: config 0 descriptor?? [ 102.238666][ T11] team0 (unregistering): Port device team_slave_1 removed [ 102.286625][ T5143] Bluetooth: hci4: command tx timeout [ 102.297883][ T11] team0 (unregistering): Port device team_slave_0 removed [ 102.876478][ T9] usb 4-1: USB disconnect, device number 4 [ 102.963886][ T47] usb 2-1: 0:2 : does not exist [ 102.989478][ T5881] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 103.048922][ T5881] gspca_sunplus: reg_r err -71 [ 103.085724][ T47] usb 2-1: USB disconnect, device number 4 [ 103.113868][ T5881] usb 1-1: USB disconnect, device number 6 [ 103.316624][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.325067][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.334253][ T6107] bridge_slave_0: entered allmulticast mode [ 103.345557][ T6107] bridge_slave_0: entered promiscuous mode [ 103.398688][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.413447][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.428673][ T6107] bridge_slave_1: entered allmulticast mode [ 103.437887][ T6107] bridge_slave_1: entered promiscuous mode [ 103.505586][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.565443][ T6107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.595000][ T6107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.913960][ T6107] team0: Port device team_slave_0 added [ 104.015199][ T6107] team0: Port device team_slave_1 added [ 104.083120][ T119] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.118560][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.130080][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.183183][ T6107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.214139][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.221162][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.275872][ T119] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 104.280016][ T6107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.286425][ T119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.314243][ T119] usb 2-1: config 0 descriptor?? [ 104.373054][ T5143] Bluetooth: hci4: command tx timeout [ 104.536130][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.566947][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.666469][ T6195] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 104.707699][ T6107] hsr_slave_0: entered promiscuous mode [ 104.723612][ T6107] hsr_slave_1: entered promiscuous mode [ 105.255326][ T1205] usb 3-1: 0:2 : does not exist [ 105.361670][ T1205] usb 3-1: USB disconnect, device number 9 [ 105.663221][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.716103][ T6231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.84'. [ 105.726589][ T5143] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 105.726636][ T5143] Bluetooth: hci0: Malformed Event: 0x2f [ 105.761318][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 105.813148][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 105.819918][ T47] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 105.833114][ T1205] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.840948][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.847642][ T6107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.867662][ T47] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 105.878839][ T6107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.890105][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.902264][ T6107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.918097][ T47] usb 4-1: Product: syz [ 105.920133][ T6107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.932496][ T47] usb 4-1: Manufacturer: syz [ 105.944177][ T47] usb 4-1: SerialNumber: syz [ 105.972894][ T47] usb 4-1: config 0 descriptor?? [ 106.014428][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 106.022093][ T1205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.031253][ T1205] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 106.040881][ T1205] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.059398][ T1205] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.084634][ T1205] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.094201][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.107030][ T1205] usb 3-1: Product: syz [ 106.116058][ T1205] usb 3-1: Manufacturer: syz [ 106.127995][ T1205] usb 3-1: SerialNumber: syz [ 106.163092][ T6107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.220974][ T6107] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.253226][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.260429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.311744][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.319024][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.428100][ T29] audit: type=1326 audit(1733981695.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x0 [ 106.449851][ T5143] Bluetooth: hci4: command tx timeout [ 106.592414][ T6107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.612201][ T6244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.863243][ T6107] veth0_vlan: entered promiscuous mode [ 106.918809][ T6107] veth1_vlan: entered promiscuous mode [ 107.064501][ T6107] veth0_macvtap: entered promiscuous mode [ 107.075340][ T6107] veth1_macvtap: entered promiscuous mode [ 107.096077][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.106860][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.116926][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.128390][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.138483][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.149534][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.163324][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.174161][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.186317][ T6107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.197592][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.208841][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.218989][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.229953][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.240060][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.250964][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.261034][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.271809][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.284060][ T6107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.294670][ T6107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.304043][ T6107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.313346][ T6107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.322222][ T6107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.447008][ T119] usb 2-1: Cannot read MAC address [ 107.452596][ T119] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 107.483832][ T119] usb 2-1: USB disconnect, device number 5 [ 108.018347][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.038835][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.163334][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.181626][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.781151][ T1205] usb 3-1: 0:2 : does not exist [ 108.913329][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.984697][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 108.991638][ T1205] usb 3-1: USB disconnect, device number 10 [ 109.109125][ T5881] usb 4-1: USB disconnect, device number 5 [ 109.193093][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 109.363211][ T1205] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.446543][ T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.455439][ T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.464547][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.473647][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.483393][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.493138][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.506507][ T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.513257][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 109.515920][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.541212][ T8] usb 6-1: config 0 descriptor?? [ 109.557345][ T1205] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.579379][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.637334][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.667955][ T1205] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 109.710579][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.719229][ T5881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.739824][ T1205] usb 3-1: config 0 descriptor?? [ 109.758511][ T6281] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 109.778750][ T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.811885][ T1205] hub 3-1:0.0: USB hub found [ 109.886195][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 109.899493][ T5881] usb 4-1: config 1 interface 0 altsetting 212 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.917856][ T5881] usb 4-1: config 1 interface 0 altsetting 212 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.938526][ T5881] usb 4-1: config 1 interface 0 altsetting 212 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.958148][ T5881] usb 4-1: config 1 interface 0 altsetting 212 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.987755][ T5881] usb 4-1: config 1 interface 0 has no altsetting 0 [ 110.008121][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.023288][ T119] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.028721][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.056033][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.099518][ T5881] usb 4-1: Product: syz [ 110.120055][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.132920][ T5881] usb 4-1: Manufacturer: ꜧ⴦ヱ漄유溎樂蓒넞ì°èªŽî”µïˆ—抨짾蚶柨íœæ´‹î‰ã›³ç«ƒïœãµ¢à¬ìŸ£çƒˆà¹ºè½é°¾î‹›å–±ê¾ëº’á»´ [ 110.182160][ T47] usb 6-1: USB disconnect, device number 2 [ 110.194990][ T119] usb 1-1: Using ep0 maxpacket: 8 [ 110.200302][ T47] usblp0: removed [ 110.208480][ T6267] No such timeout policy "syz0" [ 110.211390][ T119] usb 1-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 110.214507][ T1205] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 110.237204][ T5881] usb 4-1: SerialNumber: syz [ 110.254112][ T6290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.262571][ T119] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.275532][ T6290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.338561][ T119] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 110.361401][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.404704][ T1205] usbhid 3-1:0.0: can't add hid device: -71 [ 110.410885][ T1205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.431155][ T119] usb 1-1: Product: syz [ 110.436319][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.460031][ T1205] usb 3-1: USB disconnect, device number 11 [ 110.463139][ T119] usb 1-1: Manufacturer: syz [ 110.481512][ T119] usb 1-1: SerialNumber: syz [ 110.506562][ T119] usb 1-1: config 0 descriptor?? [ 110.671854][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.215177][ T5916] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.327405][ T6333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.419114][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.463818][ T5916] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.500297][ T5916] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.528839][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.584128][ T5916] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 111.593540][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.615602][ T5916] usb 2-1: config 0 descriptor?? [ 111.637372][ T8] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=fc.b9 [ 111.707772][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.717367][ T8] usb 3-1: Product: syz [ 111.721801][ T8] usb 3-1: Manufacturer: syz [ 111.731555][ T8] usb 3-1: SerialNumber: syz [ 111.748386][ T8] usb 3-1: config 0 descriptor?? [ 111.771175][ T8] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected [ 111.816867][ T8] earthmate ttyUSB0: required endpoint is missing [ 112.016021][ T8] usb 3-1: USB disconnect, device number 12 [ 112.034915][ T8] cypress_m8 3-1:0.0: device disconnected [ 112.165658][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 112.315074][ T5916] lenovo 0003:17EF:6009.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 112.315286][ T5881] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 112.566884][ T5881] usb 4-1: USB disconnect, device number 6 [ 112.582001][ T8] usb 2-1: USB disconnect, device number 6 [ 112.896948][ T6355] netlink: 'syz.3.100': attribute type 6 has an invalid length. [ 112.912265][ T6355] netlink: 176 bytes leftover after parsing attributes in process `syz.3.100'. [ 113.103006][ T29] audit: type=1326 audit(1733981701.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.175941][ T29] audit: type=1326 audit(1733981701.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.183160][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.255393][ T29] audit: type=1326 audit(1733981701.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.304052][ T29] audit: type=1326 audit(1733981701.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.335018][ T29] audit: type=1326 audit(1733981701.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.374573][ T29] audit: type=1326 audit(1733981701.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.401859][ T29] audit: type=1326 audit(1733981701.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.463496][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 113.514570][ T29] audit: type=1326 audit(1733981701.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.535416][ T5881] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 113.552935][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.564248][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.609730][ T29] audit: type=1326 audit(1733981701.840:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 113.640280][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.650526][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.668047][ T5881] usb 4-1: Product: syz [ 113.672289][ T5881] usb 4-1: Manufacturer: syz [ 113.703844][ T5881] usb 4-1: SerialNumber: syz [ 113.744570][ T29] audit: type=1326 audit(1733981701.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 114.126419][ T6381] xt_bpf: check failed: parse error [ 114.156957][ T1205] usb 1-1: USB disconnect, device number 7 [ 114.313663][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.507044][ T47] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 114.518115][ T47] usb 6-1: config 0 has no interface number 0 [ 114.526445][ T47] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 114.559045][ T5881] usb 4-1: 0:2 : does not exist [ 114.566187][ T47] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 114.591693][ T5881] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 114.603863][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.642702][ T5881] usb 4-1: USB disconnect, device number 7 [ 114.668193][ T47] usb 6-1: config 0 descriptor?? [ 114.902178][ T6378] sctp: [Deprecated]: syz.5.105 (pid 6378) Use of int in max_burst socket option. [ 114.902178][ T6378] Use struct sctp_assoc_value instead [ 114.919669][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.027032][ T5881] usb 6-1: USB disconnect, device number 3 [ 115.093256][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.183652][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.288586][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 115.298808][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.310956][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 724, setting to 64 [ 115.312253][ T6411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.328116][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.340018][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.350326][ T9] usb 1-1: Product: syz [ 115.355032][ T9] usb 1-1: Manufacturer: syz [ 115.360007][ T9] usb 1-1: SerialNumber: syz [ 115.360453][ T6411] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 115.367462][ T5916] usb 3-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 115.397676][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.413181][ T5916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.422857][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.431512][ T5916] usb 3-1: Product: syz [ 115.436557][ T5916] usb 3-1: Manufacturer: syz [ 115.441238][ T5916] usb 3-1: SerialNumber: syz [ 115.446295][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 115.603577][ T8] usb 2-1: device descriptor read/64, error -71 [ 115.693715][ T5916] usb 3-1: 0:2 : does not exist [ 115.746516][ T5916] usb 3-1: USB disconnect, device number 13 [ 115.803766][ T9] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 115.820157][ T9] cdc_ncm 1-1:1.0: bind() failure [ 115.841248][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 115.850485][ T9] cdc_ncm 1-1:1.1: bind() failure [ 115.855716][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 115.946405][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.036713][ T8] usb 2-1: device descriptor read/64, error -71 [ 116.174370][ T8] usb usb2-port1: attempt power cycle [ 116.216540][ T6431] bridge0: port 3(vlan2) entered blocking state [ 116.223335][ T6431] bridge0: port 3(vlan2) entered disabled state [ 116.230062][ T6431] vlan2: entered allmulticast mode [ 116.236144][ T6431] bond0: entered allmulticast mode [ 116.241619][ T6431] bond_slave_0: entered allmulticast mode [ 116.248058][ T6431] bond_slave_1: entered allmulticast mode [ 116.257020][ T6431] vlan2: entered promiscuous mode [ 116.262390][ T6431] bond0: entered promiscuous mode [ 116.268164][ T6431] bond_slave_0: entered promiscuous mode [ 116.274559][ T6431] bond_slave_1: entered promiscuous mode [ 116.281555][ T6431] bridge0: port 3(vlan2) entered blocking state [ 116.288425][ T6431] bridge0: port 3(vlan2) entered forwarding state [ 116.533694][ T8] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 116.568588][ T8] usb 2-1: device descriptor read/8, error -71 [ 116.673344][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 116.707443][ T119] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.813288][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 116.833184][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 116.840047][ T5881] usb 6-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 116.850852][ T5881] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.860413][ T8] usb 2-1: device descriptor read/8, error -71 [ 116.862613][ T5881] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 116.876295][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.884477][ T5881] usb 6-1: Product: syz [ 116.889648][ T5881] usb 6-1: Manufacturer: syz [ 116.894290][ T119] usb 4-1: Using ep0 maxpacket: 32 [ 116.897854][ T119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.907318][ T5881] usb 6-1: SerialNumber: syz [ 116.911276][ T5881] usb 6-1: config 0 descriptor?? [ 116.920664][ T119] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.935944][ T119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.948212][ T119] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.959416][ T119] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.968897][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.977460][ T8] usb usb2-port1: unable to enumerate USB device [ 116.984150][ T119] usb 4-1: Product: syz [ 116.989022][ T119] usb 4-1: Manufacturer: syz [ 116.993941][ T119] usb 4-1: SerialNumber: syz [ 117.323597][ T119] usb 4-1: 0:2 : does not exist [ 117.354977][ T119] usb 4-1: USB disconnect, device number 8 [ 117.569474][ T6446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.624187][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.870554][ T47] usb 1-1: USB disconnect, device number 8 [ 117.903611][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.108203][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 118.168894][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.222904][ T5881] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 118.312186][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.383382][ T119] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.408756][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.449106][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.543428][ T119] usb 1-1: Using ep0 maxpacket: 16 [ 118.552460][ T119] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 118.568235][ T119] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.584003][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.593681][ T119] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 118.594967][ T5881] usb 3-1: Product: syz [ 118.607428][ T5881] usb 3-1: Manufacturer: syz [ 118.610686][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.612051][ T5881] usb 3-1: SerialNumber: syz [ 118.639813][ T119] usb 1-1: Product: syz [ 118.647748][ T119] usb 1-1: Manufacturer: syz [ 118.653320][ T119] usb 1-1: SerialNumber: syz [ 118.673658][ T119] usb 1-1: config 0 descriptor?? [ 118.743306][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.823625][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.903279][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 118.911575][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 118.970363][ T5916] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 119.003197][ T5881] usb 3-1: 0:2 : does not exist [ 119.010407][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 119.010427][ T29] audit: type=1326 audit(1733981707.680:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x0 [ 119.025084][ T5881] usb 3-1: USB disconnect, device number 14 [ 119.039261][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 119.068487][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.092638][ T8] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 119.128731][ T5916] usb 2-1: Product: syz [ 119.132939][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.145433][ T5916] usb 2-1: Manufacturer: syz [ 119.150646][ T5916] usb 2-1: SerialNumber: syz [ 119.155425][ T5885] usb 1-1: USB disconnect, device number 9 [ 119.168047][ T5916] usb 2-1: config 0 descriptor?? [ 119.181305][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 119.191712][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.206562][ T5916] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 119.218539][ T8] usb 4-1: Product: syz [ 119.225446][ T5916] usb 2-1: Detected FT232R [ 119.225617][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.232085][ T8] usb 4-1: Manufacturer: syz [ 119.258750][ T8] usb 4-1: SerialNumber: syz [ 119.284571][ T8] usb 4-1: config 0 descriptor?? [ 119.390659][ T6462] netlink: 'syz.0.128': attribute type 11 has an invalid length. [ 119.401508][ T5916] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 119.440448][ T5916] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 119.455853][ T5916] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.470491][ T5916] usb 2-1: USB disconnect, device number 11 [ 119.486829][ T5916] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.529799][ T5916] ftdi_sio 2-1:0.0: device disconnected [ 119.531805][ T6467] xt_bpf: check failed: parse error [ 119.653838][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 119.826678][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.855869][ T8] usb 1-1: config 0 has no interface number 0 [ 119.903548][ T8] usb 1-1: New USB device found, idVendor=19d2, idProduct=1401, bcdDevice=3d.7d [ 119.932978][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.941245][ T8] usb 1-1: Product: syz [ 119.945657][ T8] usb 1-1: Manufacturer: syz [ 119.950296][ T8] usb 1-1: SerialNumber: syz [ 119.961599][ T8] usb 1-1: config 0 descriptor?? [ 119.969641][ T8] option 1-1:0.1: GSM modem (1-port) converter detected [ 120.078000][ T5916] usb 6-1: USB disconnect, device number 4 [ 120.204937][ T5885] usb 1-1: USB disconnect, device number 10 [ 120.214667][ T5885] option 1-1:0.1: device disconnected [ 120.277545][ T6487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.451385][ T6489] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 120.493241][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 120.658530][ T6483] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 120.669135][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.687534][ T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.730353][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.746429][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.755977][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.764563][ T8] usb 3-1: Product: syz [ 120.768961][ T8] usb 3-1: Manufacturer: syz [ 120.774665][ T8] usb 3-1: SerialNumber: syz [ 121.201199][ T8] usb 3-1: 0:2 : does not exist [ 121.225306][ T6502] loop6: detected capacity change from 0 to 524287999 [ 121.234195][ T6499] bridge0: entered promiscuous mode [ 121.250654][ T6499] bridge0: entered allmulticast mode [ 121.390081][ C1] I/O error, dev loop6, sector 2490920 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 121.411145][ C1] I/O error, dev loop6, sector 2491048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.412239][ T8] usb 3-1: USB disconnect, device number 15 [ 121.421205][ C1] Buffer I/O error on dev loop6, logical block 311381, async page read [ 121.438806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.448076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.524088][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.539245][ T6499] Invalid logical block size (5) [ 121.573824][ C1] I/O error, dev loop6, sector 2491048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.583573][ C1] Buffer I/O error on dev loop6, logical block 311381, async page read [ 121.591892][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.601068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.612835][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.622087][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.631296][ C1] I/O error, dev loop6, sector 2491048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.641004][ C1] Buffer I/O error on dev loop6, logical block 311381, async page read [ 121.649377][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.658534][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.674928][ C1] I/O error, dev loop6, sector 2491048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.684710][ C1] Buffer I/O error on dev loop6, logical block 311381, async page read [ 121.693115][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.702300][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.723610][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.742050][ T6502] ldm_validate_partition_table(): Disk read failed. [ 121.773200][ T5885] usb 1-1: device descriptor read/64, error -71 [ 121.853196][ T6502] Dev loop6: unable to read RDB block 0 [ 121.987725][ T6502] loop6: unable to read partition table [ 122.014089][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 122.023848][ T6502] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 122.263488][ T5885] usb 1-1: device descriptor read/64, error -71 [ 122.281212][ T1205] usb 4-1: USB disconnect, device number 9 [ 122.374340][ T5885] usb usb1-port1: attempt power cycle [ 122.443290][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.605472][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 122.634580][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.660547][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.661960][ T6534] usb usb8: usbfs: process 6534 (syz.5.140) did not claim interface 0 before use [ 122.678733][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 122.691063][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.746157][ T5916] usb 3-1: config 0 descriptor?? [ 122.763537][ T5885] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 122.801932][ T5885] usb 1-1: device descriptor read/8, error -71 [ 122.913359][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 122.954196][ T1205] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 123.043547][ T5885] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 123.074788][ T5885] usb 1-1: device descriptor read/8, error -71 [ 123.105407][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 123.119190][ T1205] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 123.133087][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.137681][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 123.141128][ T1205] usb 6-1: Product: syz [ 123.141151][ T1205] usb 6-1: Manufacturer: syz [ 123.141170][ T1205] usb 6-1: SerialNumber: syz [ 123.179537][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.190251][ T5885] usb usb1-port1: unable to enumerate USB device [ 123.195508][ T9] usb 4-1: Product: syz [ 123.202389][ T9] usb 4-1: Manufacturer: syz [ 123.209643][ T1205] usb 6-1: config 0 descriptor?? [ 123.213041][ T9] usb 4-1: SerialNumber: syz [ 123.225982][ T1205] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 123.232146][ T6536] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 123.323318][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.401349][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 123.408828][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.444714][ T5916] usb 3-1: USB disconnect, device number 16 [ 123.503371][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 123.511050][ T8] usb 2-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 123.521777][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.537856][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 123.547275][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.555471][ T8] usb 2-1: Product: syz [ 123.560015][ T8] usb 2-1: Manufacturer: syz [ 123.565055][ T8] usb 2-1: SerialNumber: syz [ 123.572266][ T8] usb 2-1: config 0 descriptor?? [ 123.741783][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.785007][ T9] usb 4-1: USB disconnect, device number 10 [ 123.805781][ T9] usblp0: removed [ 123.818459][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.144'. [ 124.138472][ T6568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.309091][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.333214][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.458047][ T6575] netlink: 'syz.0.149': attribute type 5 has an invalid length. [ 124.485449][ T6575] netlink: 'syz.0.149': attribute type 3 has an invalid length. [ 124.501813][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 124.503267][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 124.518931][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.562405][ T5916] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.571382][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.581772][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.595806][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.608861][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.617344][ T5916] usb 4-1: Product: syz [ 124.621559][ T5916] usb 4-1: Manufacturer: syz [ 124.626289][ T5916] usb 4-1: SerialNumber: syz [ 124.934737][ T29] audit: type=1326 audit(1733981713.630:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.3.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93cc37ff19 code=0x0 [ 124.971534][ T6578] process 'syz.0.150' launched './file0' with NULL argv: empty string added [ 125.451895][ T6583] sctp: [Deprecated]: syz.0.152 (pid 6583) Use of int in maxseg socket option. [ 125.451895][ T6583] Use struct sctp_assoc_value instead [ 125.723711][ T47] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.751044][ T1205] usb 6-1: USB disconnect, device number 5 [ 125.883306][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 125.894264][ T47] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 125.921760][ T47] usb 1-1: config 0 has no interface number 0 [ 125.933517][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 125.948863][ T47] usb 1-1: too many endpoints for config 0 interface 39 altsetting 198: 153, using maximum allowed: 30 [ 125.969742][ T47] usb 1-1: config 0 interface 39 altsetting 198 has 1 endpoint descriptor, different from the interface descriptor's value: 153 [ 125.987345][ T47] usb 1-1: config 0 interface 39 has no altsetting 0 [ 126.002188][ T47] usb 1-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 126.016168][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.034925][ T47] usb 1-1: Product: syz [ 126.048519][ T47] usb 1-1: Manufacturer: syz [ 126.061757][ T47] usb 1-1: SerialNumber: syz [ 126.075079][ T6594] bridge0: port 4(veth0_to_bridge) entered blocking state [ 126.080191][ T47] usb 1-1: config 0 descriptor?? [ 126.096219][ T6594] bridge0: port 4(veth0_to_bridge) entered disabled state [ 126.105881][ T8] usb 3-1: config 0 has an invalid interface number: 192 but max is 1 [ 126.116267][ T6594] veth0_to_bridge: entered allmulticast mode [ 126.122633][ T8] usb 3-1: config 0 has an invalid interface number: 95 but max is 1 [ 126.143859][ T8] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 126.153906][ T6594] veth0_to_bridge: entered promiscuous mode [ 126.160325][ T8] usb 3-1: config 0 has no interface number 0 [ 126.167157][ T6594] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.181217][ T8] usb 3-1: config 0 has no interface number 1 [ 126.192610][ T8] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 126.214984][ T6594] bridge0: port 4(veth0_to_bridge) entered blocking state [ 126.222319][ T6594] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 126.234192][ T8] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 126.252544][ T8] usb 3-1: config 0 interface 192 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 126.280598][ T8] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0x3 has invalid maxpacket 503, setting to 64 [ 126.299384][ T6605] sctp: [Deprecated]: syz.0.152 (pid 6605) Use of int in maxseg socket option. [ 126.299384][ T6605] Use struct sctp_assoc_value instead [ 126.321233][ T8] usb 3-1: config 0 interface 192 altsetting 8 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 126.340787][ T8] usb 3-1: config 0 interface 192 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 126.373824][ T8] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 126.408509][ T8] usb 3-1: config 0 interface 192 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 126.419307][ T47] HFC-S_USB 1-1:0.39: probe with driver HFC-S_USB failed with error -5 [ 126.448034][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 126.488085][ T47] usb 1-1: USB disconnect, device number 15 [ 126.504642][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 126.553382][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 126.605196][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 126.649244][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 126.698222][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 126.714626][ T6612] syz.5.157: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.734339][ T8] usb 3-1: config 0 interface 95 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 126.758457][ T8] usb 3-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 126.780009][ T6612] CPU: 0 UID: 0 PID: 6612 Comm: syz.5.157 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 126.790674][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.800805][ T6612] Call Trace: [ 126.804095][ T6612] [ 126.807055][ T6612] dump_stack_lvl+0x241/0x360 [ 126.811755][ T6612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.816973][ T6612] ? __pfx__printk+0x10/0x10 [ 126.821575][ T6612] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 126.828002][ T6612] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 126.834522][ T6612] warn_alloc+0x278/0x410 [ 126.838857][ T6612] ? __pfx_warn_alloc+0x10/0x10 [ 126.843714][ T6612] ? kvm_set_memslot+0x4af/0x1280 [ 126.848744][ T6612] ? __get_vm_area_node+0x1c8/0x2d0 [ 126.853957][ T6612] ? __get_vm_area_node+0x25c/0x2d0 [ 126.859180][ T6612] __vmalloc_node_range_noprof+0x62f/0x1380 [ 126.865098][ T6612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.871443][ T6612] ? kvm_set_memslot+0x4af/0x1280 [ 126.876474][ T6612] __vmalloc_noprof+0x79/0x90 [ 126.881153][ T6612] ? kvm_set_memslot+0x4af/0x1280 [ 126.886196][ T6612] kvm_set_memslot+0x4af/0x1280 [ 126.891075][ T6612] __kvm_set_memory_region+0x931/0xb40 [ 126.896564][ T6612] kvm_vm_ioctl_set_memory_region+0x6d/0xa0 [ 126.902479][ T6612] kvm_vm_ioctl+0xa42/0xd30 [ 126.907001][ T6612] ? mark_lock+0x9a/0x360 [ 126.911350][ T6612] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 126.916404][ T6612] ? tomoyo_path_number_perm+0x206/0x860 [ 126.922075][ T6612] ? tomoyo_path_number_perm+0x6f9/0x860 [ 126.927730][ T6612] ? __lock_acquire+0x1397/0x2100 [ 126.932775][ T6612] ? tomoyo_path_number_perm+0x206/0x860 [ 126.938463][ T6612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.944514][ T6612] ? __fget_files+0x2a/0x410 [ 126.949144][ T6612] ? __fget_files+0x2a/0x410 [ 126.953765][ T6612] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 126.958816][ T6612] __se_sys_ioctl+0xf5/0x170 [ 126.963440][ T6612] do_syscall_64+0xf3/0x230 [ 126.967987][ T6612] ? clear_bhb_loop+0x35/0x90 [ 126.972702][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.978628][ T6612] RIP: 0033:0x7fd6b957ff19 [ 126.983083][ T6612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.002722][ T6612] RSP: 002b:00007fd6ba45d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.011249][ T6612] RAX: ffffffffffffffda RBX: 00007fd6b9745fa0 RCX: 00007fd6b957ff19 [ 127.019234][ T6612] RDX: 0000000020000080 RSI: 000000004020ae46 RDI: 000000000000000b [ 127.027216][ T6612] RBP: 00007fd6b95f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 127.035196][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.043195][ T6612] R13: 0000000000000000 R14: 00007fd6b9745fa0 R15: 00007fd6b986fa38 [ 127.051188][ T6612] [ 127.055095][ T8] usb 3-1: config 0 interface 192 has no altsetting 0 [ 127.061897][ T8] usb 3-1: config 0 interface 95 has no altsetting 0 [ 127.135428][ T8] usb 3-1: New USB device found, idVendor=14b2, idProduct=3c12, bcdDevice=6e.e7 [ 127.144711][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.153144][ T8] usb 3-1: Product: syz [ 127.157400][ T8] usb 3-1: Manufacturer: syz [ 127.162077][ T1205] usb 2-1: USB disconnect, device number 12 [ 127.162079][ T8] usb 3-1: SerialNumber: syz [ 127.173125][ T6612] Mem-Info: [ 127.188811][ T8] usb 3-1: config 0 descriptor?? [ 127.194493][ T6612] active_anon:5602 inactive_anon:0 isolated_anon:0 [ 127.194493][ T6612] active_file:4118 inactive_file:38227 isolated_file:0 [ 127.194493][ T6612] unevictable:768 dirty:118 writeback:0 [ 127.194493][ T6612] slab_reclaimable:10114 slab_unreclaimable:98724 [ 127.194493][ T6612] mapped:29333 shmem:1417 pagetables:953 [ 127.194493][ T6612] sec_pagetables:0 bounce:0 [ 127.194493][ T6612] kernel_misc_reclaimable:0 [ 127.194493][ T6612] free:1335762 free_pcp:1540 free_cma:0 [ 127.214327][ T6587] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 127.253202][ T6612] Node 0 active_anon:22408kB inactive_anon:0kB active_file:16472kB inactive_file:152832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117332kB dirty:472kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11416kB pagetables:3812kB sec_pagetables:0kB all_unreclaimable? no [ 127.343909][ T6612] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.373847][ T6622] loop2: detected capacity change from 0 to 7 [ 127.405194][ T6622] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 127.410636][ T6622] loop2: partition table partially beyond EOD, truncated [ 127.419164][ T6622] loop2: p1 size 6333 extends beyond EOD, truncated [ 127.443152][ T6612] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.472942][ T6612] lowmem_reserve[]: 0 2465 2466 0 0 [ 127.488534][ T6612] Node 0 DMA32 free:1429940kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:22668kB inactive_anon:0kB active_file:16472kB inactive_file:152004kB unevictable:1536kB writepending:472kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:3384kB local_pcp:920kB free_cma:0kB [ 127.569084][ T6612] lowmem_reserve[]: 0 0 0 0 0 [ 127.576074][ T6612] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 127.630620][ T6612] lowmem_reserve[]: 0 0 0 0 0 [ 127.638129][ T6612] Node 1 Normal free:3903532kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 127.669024][ T5916] usb 4-1: 0:2 : does not exist [ 127.699111][ T6612] lowmem_reserve[]: 0 0 0 0 0 [ 127.709840][ T6612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.733660][ T6612] Node 0 DMA32: 2*4kB (E) 41*8kB (ME) 175*16kB (UME) 227*32kB (UME) 82*64kB (UME) 31*128kB (UME) 31*256kB (UM) 9*512kB (M) 9*1024kB (UM) 3*2048kB (M) 338*4096kB (UM) = 1431968kB [ 127.744943][ T8] usb 3-1: USB disconnect, device number 17 [ 127.803097][ T6612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.821298][ T5916] usb 4-1: USB disconnect, device number 11 [ 127.837481][ T6612] Node 1 Normal: 207*4kB (UM) 58*8kB (UME) 42*16kB (UME) 212*32kB (UME) 94*64kB (UME) 23*128kB (UME) 15*256kB (UME) 12*512kB (UME) 7*1024kB (UM) 5*2048kB (UE) 942*4096kB (M) = 3903532kB [ 127.909497][ T6612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.922930][ T6612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.962608][ T1205] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.993510][ T6612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.027452][ T6612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.075801][ T6612] 43766 total pagecache pages [ 128.100411][ T6612] 0 pages in swap cache [ 128.111629][ T6612] Free swap = 124508kB [ 128.132006][ T6612] Total swap = 124996kB [ 128.173397][ T6612] 2097051 pages RAM [ 128.179320][ T6612] 0 pages HighMem/MovableOnly [ 128.185814][ T1205] usb 2-1: Using ep0 maxpacket: 32 [ 128.214732][ T1205] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 128.240138][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.247759][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.256238][ T6612] 427005 pages reserved [ 128.278256][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.163'. [ 128.296108][ T6612] 0 pages cma reserved [ 128.313988][ T1205] usb 2-1: config 0 descriptor?? [ 128.337260][ T1205] gspca_main: sunplus-2.14.0 probing 041e:400b [ 129.463158][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 129.573247][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.613124][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 129.627269][ T5916] usb 6-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 129.648635][ T5916] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.702135][ T5916] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 129.711762][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.741186][ T5916] usb 6-1: Product: syz [ 129.745738][ T5916] usb 6-1: Manufacturer: syz [ 129.750441][ T5916] usb 6-1: SerialNumber: syz [ 129.760621][ T5916] usb 6-1: config 0 descriptor?? [ 129.769815][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.781156][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.791041][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 129.800265][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.821953][ T8] usb 1-1: config 0 descriptor?? [ 129.853536][ T1205] gspca_sunplus: reg_w_riv err -110 [ 129.858882][ T1205] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 129.940421][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 130.063173][ T5868] usb 2-1: USB disconnect, device number 13 [ 130.241269][ T8] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 130.253270][ T8] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 130.304892][ T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input5 [ 130.416810][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.425695][ T8] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 130.507623][ T6710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.563416][ T5868] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 130.578773][ T6710] netlink: 43 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.708300][ T6710] netlink: 'syz.2.172': attribute type 6 has an invalid length. [ 130.753893][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.774623][ T6710] netlink: 'syz.2.172': attribute type 5 has an invalid length. [ 130.782552][ T6710] netlink: 43 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.808301][ T5868] usb 2-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 130.822669][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.830905][ T5868] usb 2-1: Product: syz [ 130.835265][ T5868] usb 2-1: Manufacturer: syz [ 130.839934][ T5868] usb 2-1: SerialNumber: syz [ 131.547731][ T5868] qmi_wwan 2-1:1.0: skipping garbage [ 131.553311][ T5868] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 131.587873][ T5881] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 131.603375][ T5868] usb 2-1: USB disconnect, device number 14 [ 131.643737][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.801365][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.864756][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.987381][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.057773][ T29] audit: type=1326 audit(1733981720.730:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.088007][ T9] usb 4-1: config 0 descriptor?? [ 132.141969][ T29] audit: type=1326 audit(1733981720.830:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.201500][ T6732] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 132.201500][ T6732] program syz.0.176 not setting count and/or reply_len properly [ 132.226510][ T29] audit: type=1326 audit(1733981720.830:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.279779][ T29] audit: type=1326 audit(1733981720.830:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.302166][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.382545][ T29] audit: type=1326 audit(1733981720.830:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.415492][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 132.421781][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.435616][ T29] audit: type=1326 audit(1733981720.870:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.468420][ T9] usb 4-1: USB disconnect, device number 12 [ 132.486953][ T29] audit: type=1326 audit(1733981720.870:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.521182][ T29] audit: type=1326 audit(1733981720.870:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.552341][ T29] audit: type=1326 audit(1733981720.880:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0cca77e9cf code=0x7ffc0000 [ 132.599262][ T29] audit: type=1326 audit(1733981720.880:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca77ff19 code=0x7ffc0000 [ 132.654424][ T5885] usb 6-1: USB disconnect, device number 6 [ 132.702560][ T5881] usb 1-1: device descriptor read/64, error -71 [ 132.903363][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.013216][ T5881] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 133.022129][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.028925][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.057999][ T6751] capability: warning: `syz.2.179' uses deprecated v2 capabilities in a way that may be insecure [ 133.071267][ T6751] warning: `syz.2.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.199352][ T5881] usb 1-1: device firmware changed [ 133.219408][ T1205] usb 1-1: USB disconnect, device number 16 [ 133.323197][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 133.338309][ T9] usb 4-1: config index 0 descriptor too short (expected 36, got 27) [ 133.348578][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.392868][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 133.413092][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.441274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.449493][ T1205] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.475618][ T9] usb 4-1: config 0 descriptor?? [ 133.498313][ T9] ldusb 4-1:0.0: Interrupt in endpoint not found [ 133.528676][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 133.613311][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 133.625943][ T1205] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.639266][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.653766][ T1205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.668039][ T5868] usb 4-1: USB disconnect, device number 13 [ 133.684371][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.696590][ T1205] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.740737][ T5881] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 133.750346][ T1205] usb 1-1: config 1 interface 0 has no altsetting 1 [ 133.763209][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 133.774421][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.784114][ T5881] usb 3-1: Product: syz [ 133.790248][ T1205] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 133.802885][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.821827][ T5881] usb 3-1: Manufacturer: syz [ 133.843129][ T5881] usb 3-1: SerialNumber: syz [ 133.848056][ T1205] usb 1-1: Product: syz [ 133.852267][ T1205] usb 1-1: Manufacturer: syz [ 133.872914][ T5881] usb 3-1: config 0 descriptor?? [ 133.883275][ T1205] usb 1-1: SerialNumber: syz [ 133.908259][ T1205] smsusb:smsusb_probe: board id=8, interface number 0 [ 133.934587][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 133.945520][ T47] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 133.963385][ T47] usb 2-1: config 0 has no interface number 0 [ 133.973345][ T47] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 133.989267][ T47] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 133.993214][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.008928][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.029199][ T47] usb 2-1: Product: syz [ 134.039336][ T47] usb 2-1: Manufacturer: syz [ 134.049614][ T47] usb 2-1: SerialNumber: syz [ 134.070863][ T47] usb 2-1: config 0 descriptor?? [ 134.110077][ T1205] smsusb:smsusb_probe: Device initialized with return code -19 [ 134.153198][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.183223][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 134.193671][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.225018][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.257379][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.284238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.288895][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.297042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.318770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.324671][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.331468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.356355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.361379][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 134.369114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.386495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.392312][ T5868] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 134.400297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.421646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.423598][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.434267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.472119][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.484505][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.493538][ T9] usb 6-1: Manufacturer: syz [ 134.500327][ T5868] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 134.509926][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.518927][ T5868] usb 4-1: Product: syz [ 134.523460][ T5868] usb 4-1: Manufacturer: syz [ 134.528101][ T5868] usb 4-1: SerialNumber: syz [ 134.544479][ T9] usb 6-1: config 0 descriptor?? [ 134.552653][ T5868] usb 4-1: config 0 descriptor?? [ 134.913398][ T9] rc_core: IR keymap rc-hauppauge not found [ 134.919432][ T9] Registered IR keymap rc-empty [ 135.229111][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.528215][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.675093][ T6793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.908221][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 138.362720][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 139.293579][ C0] net_ratelimit: 12446 callbacks suppressed [ 139.293605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 139.294323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.300146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.313471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.324249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.337254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.347994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 139.361247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.371879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.385281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.662824][ T47] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 142.323485][ T47] usb 2-1: USB disconnect, device number 15 [ 142.503732][ C0] sched: DL replenish lagged too much [ 144.303240][ C0] net_ratelimit: 10450 callbacks suppressed [ 144.303266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 144.303347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.309694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.323294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.333891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.346975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.357833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 144.371159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.381530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.395008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.313303][ C0] net_ratelimit: 10355 callbacks suppressed [ 149.313326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.314691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.319908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 149.333890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.343752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.357478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.368196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.381496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.391975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 149.405400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.323298][ C0] net_ratelimit: 10879 callbacks suppressed [ 154.323323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.324543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.329873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 154.343643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.353828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.367470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.378011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.391272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.401736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 154.415212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.333438][ C0] net_ratelimit: 10792 callbacks suppressed [ 159.333464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.333964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.340092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 159.353455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.363901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.377271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.387994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.401085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.411720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 159.425100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.343124][ C0] net_ratelimit: 10891 callbacks suppressed [ 164.343150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.343171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.349850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.363017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.373694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 164.387001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.397418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.411109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.423422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.435912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.353414][ C0] net_ratelimit: 11951 callbacks suppressed [ 169.353440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.354385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.360105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 169.372845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.383868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.396669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.407986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 169.420959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.431694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.444632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.363127][ C0] net_ratelimit: 10892 callbacks suppressed [ 174.363152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.363172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.369843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 174.383730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.393499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.406280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.417627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.431744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.441323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.454069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.373023][ C0] net_ratelimit: 11194 callbacks suppressed [ 179.373051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.373512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.379748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 179.393583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.403396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.416130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.427444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.441262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.451184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.463921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.383561][ C0] net_ratelimit: 11261 callbacks suppressed [ 184.383613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.384003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.390243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.407142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.414182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 184.426765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.437905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.452022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.462118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 184.474645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.393242][ C1] net_ratelimit: 11443 callbacks suppressed [ 189.393268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.393274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 189.393776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.401748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.411834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.424452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.435646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.449518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.459605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 189.472152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.403028][ C0] net_ratelimit: 11539 callbacks suppressed [ 194.403053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.403584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.409599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.423572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.433598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 194.457316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.469394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.483400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.493509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 194.506468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.413288][ C0] net_ratelimit: 11596 callbacks suppressed [ 199.413314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 199.414888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.419716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.432547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.443902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.457639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.467600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.480239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.491550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 199.505554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.005066][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.024090][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.423316][ C0] net_ratelimit: 10971 callbacks suppressed [ 204.423341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.424258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.429988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 204.444379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.453650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.466724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.477838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.495652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.501529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.514423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.739212][ T5882] usb 1-1: USB disconnect, device number 17 [ 209.433023][ C0] net_ratelimit: 10780 callbacks suppressed [ 209.433049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.434146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.439836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 209.452505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.463577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.477698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.487657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.500237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.511430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.525529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.443158][ C1] net_ratelimit: 10988 callbacks suppressed [ 214.443184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.443270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 214.451799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.461564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.474413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.485807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 214.499619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.509414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.522261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.533619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.453062][ C0] net_ratelimit: 11534 callbacks suppressed [ 219.453087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.454214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.459639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.472316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.483616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 219.505080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.507392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.520166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.531543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 219.545337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.463341][ C0] net_ratelimit: 11514 callbacks suppressed [ 224.463366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 224.464109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.469906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.482693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.494046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.514981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.517764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.530411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.541725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 224.555657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.473608][ C0] net_ratelimit: 11529 callbacks suppressed [ 229.473635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 229.473793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.480140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.492920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.504327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.518023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.527977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.540627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.551883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 229.565809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.483786][ C0] net_ratelimit: 11971 callbacks suppressed [ 234.483812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.483963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.490364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 234.503119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.514207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.527010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.538362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 234.554609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.562057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 234.575302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.493027][ C0] net_ratelimit: 11622 callbacks suppressed [ 239.493052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 239.494700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.499480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.512257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.523728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 239.545209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.547430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 239.560685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.571228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.584387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.503422][ C0] net_ratelimit: 11676 callbacks suppressed [ 244.503446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.504879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.509979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 244.523311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.533884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.546699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.558046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 244.571743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.581789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 244.595088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.513212][ C0] net_ratelimit: 11730 callbacks suppressed [ 249.513238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.514657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.519917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.534076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.543929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 249.556560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.567745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.581708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.591847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 249.604902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.523086][ C0] net_ratelimit: 11607 callbacks suppressed [ 254.523113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.524870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.529753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 254.542771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.553574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 254.566201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.577301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.591277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.601411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.614488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.533166][ C0] net_ratelimit: 11610 callbacks suppressed [ 259.533192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.534442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.539764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 259.553600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.563595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.578882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.587758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 259.600188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.611551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 259.625460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.543419][ C0] net_ratelimit: 11716 callbacks suppressed [ 264.543447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 264.544586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.549887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.563753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.574082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.586575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.597661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.611613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.621952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.634935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.553056][ C0] net_ratelimit: 11684 callbacks suppressed [ 269.553080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.553844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.559712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.573116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.583687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 269.596491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.607514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.621476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.631674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 269.644813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.162954][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.169966][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6746/1:b..l [ 273.178313][ C0] rcu: (detected by 0, t=10503 jiffies, g=17077, q=1312 ncpus=2) [ 273.186200][ C0] task:syz.2.179 state:R running task stack:23840 pid:6746 tgid:6746 ppid:5845 flags:0x00004004 [ 273.199083][ C0] Call Trace: [ 273.202402][ C0] [ 273.205374][ C0] __schedule+0x1850/0x4c30 [ 273.209962][ C0] ? __pfx___schedule+0x10/0x10 [ 273.214870][ C0] ? mark_lock+0x9a/0x360 [ 273.219271][ C0] ? preempt_schedule+0xe1/0xf0 [ 273.224163][ C0] preempt_schedule_common+0x84/0xd0 [ 273.229507][ C0] preempt_schedule+0xe1/0xf0 [ 273.234238][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 273.239653][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.245593][ C0] preempt_schedule_thunk+0x1a/0x30 [ 273.250847][ C0] _raw_spin_unlock+0x3e/0x50 [ 273.255581][ C0] unmap_page_range+0x36c3/0x4040 [ 273.260641][ C0] ? __lock_acquire+0x1397/0x2100 [ 273.265732][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 273.271163][ C0] ? mas_next_slot+0xdc6/0xea0 [ 273.275977][ C0] ? uprobe_munmap+0x183/0x460 [ 273.280779][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 273.285839][ C0] unmap_vmas+0x3cc/0x5f0 [ 273.290223][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 273.295135][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 273.300637][ C0] exit_mmap+0x275/0xc20 [ 273.304922][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 273.309779][ C0] ? __pfx_exit_aio+0x10/0x10 [ 273.314513][ C0] ? uprobe_clear_state+0x271/0x290 [ 273.319758][ C0] ? mm_update_next_owner+0xa4/0x810 [ 273.325085][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 273.330332][ C0] __mmput+0x115/0x3c0 [ 273.334460][ C0] exit_mm+0x220/0x310 [ 273.338567][ C0] ? __pfx_exit_mm+0x10/0x10 [ 273.343175][ C0] ? taskstats_exit+0x326/0xa60 [ 273.348076][ C0] do_exit+0x9b2/0x28e0 [ 273.352293][ C0] ? __pfx_do_exit+0x10/0x10 [ 273.356920][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.362301][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.368325][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.374710][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 273.379865][ C0] do_group_exit+0x207/0x2c0 [ 273.384484][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.389729][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 273.394982][ C0] get_signal+0x16b2/0x1750 [ 273.399535][ C0] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 273.405811][ C0] ? __pfx_get_signal+0x10/0x10 [ 273.410745][ C0] arch_do_signal_or_restart+0x96/0x860 [ 273.416374][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.422569][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.428603][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 273.434472][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 273.440064][ C0] do_syscall_64+0x100/0x230 [ 273.444685][ C0] ? clear_bhb_loop+0x35/0x90 [ 273.449413][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.455354][ C0] RIP: 0033:0x7f0cca77ff53 [ 273.459794][ C0] RSP: 002b:00007f0ccaa6f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 273.468234][ C0] RAX: 00007f0ccb4b5000 RBX: 00007f0cc8df76c0 RCX: 00007f0cca77ff53 [ 273.476253][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 273.484265][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 273.492285][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007f0ccaa6fb30 [ 273.500333][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 273.508361][ C0] [ 273.511415][ C0] rcu: rcu_preempt kthread starved for 6094 jiffies! g17077 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 273.522592][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 273.532584][ C0] rcu: RCU grace-period kthread stack dump: [ 273.538495][ C0] task:rcu_preempt state:R running task stack:25648 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 273.550276][ C0] Call Trace: [ 273.553589][ C0] [ 273.556541][ C0] __schedule+0x1850/0x4c30 [ 273.561068][ C0] ? __pfx___schedule+0x10/0x10 [ 273.565941][ C0] ? __pfx_lock_release+0x10/0x10 [ 273.571015][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.577373][ C0] ? schedule+0x90/0x320 [ 273.581621][ C0] schedule+0x14b/0x320 [ 273.585801][ C0] schedule_timeout+0x15a/0x290 [ 273.590691][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 273.596123][ C0] ? __pfx_process_timeout+0x10/0x10 [ 273.601466][ C0] ? prepare_to_swait_event+0x330/0x350 [ 273.607070][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 273.611952][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 273.617179][ C0] ? rcu_gp_init+0x1256/0x1630 [ 273.621990][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 273.626966][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 273.633164][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 273.638490][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.644436][ C0] ? finish_swait+0xd4/0x1e0 [ 273.649053][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 273.653701][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.658939][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.664878][ C0] ? __kthread_parkme+0x169/0x1d0 [ 273.669956][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.675175][ C0] kthread+0x2f0/0x390 [ 273.679288][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 273.684546][ C0] ? __pfx_kthread+0x10/0x10 [ 273.689177][ C0] ret_from_fork+0x4b/0x80 [ 273.693612][ C0] ? __pfx_kthread+0x10/0x10 [ 273.698245][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.703085][ C0] [ 273.706142][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 273.712503][ C0] Sending NMI from CPU 0 to CPUs 1: [ 273.717748][ C1] NMI backtrace for cpu 1 [ 273.717765][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 273.717786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.717797][ C1] RIP: 0010:memset_orig+0x82/0xb0 [ 273.717829][ C1] Code: 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca <88> 07 48 8d 7f 01 75 f6 4c 89 d0 c3 cc cc cc cc 48 83 fa 07 76 e3 [ 273.717845][ C1] RSP: 0018:ffffc90000a17c30 EFLAGS: 00000206 [ 273.717862][ C1] RAX: 0000000000000000 RBX: ffff888152a57900 RCX: 0000000000000000 [ 273.717874][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: ffffed102a54af30 [ 273.717886][ C1] RBP: ffff88801decd640 R08: 00000000ffffffff R09: 0000000000000000 [ 273.717898][ C1] R10: ffffed102a54af20 R11: ffffed102a54aec1 R12: 00000000000000b8 [ 273.717911][ C1] R13: ffffffff898f8d66 R14: 00000000000000b8 R15: dffffc0000000000 [ 273.717925][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 273.717940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.717952][ C1] CR2: 00007ffebef40ff8 CR3: 00000000343ce000 CR4: 00000000003526f0 [ 273.717969][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.717979][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.717991][ C1] Call Trace: [ 273.717997][ C1] [ 273.718005][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 273.718031][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 273.718054][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 273.718073][ C1] ? nmi_handle+0x2a/0x5a0 [ 273.718102][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 273.718119][ C1] ? nmi_handle+0x14f/0x5a0 [ 273.718139][ C1] ? nmi_handle+0x2a/0x5a0 [ 273.718161][ C1] ? memset_orig+0x82/0xb0 [ 273.718188][ C1] ? default_do_nmi+0x63/0x160 [ 273.718207][ C1] ? exc_nmi+0x123/0x1f0 [ 273.718224][ C1] ? end_repeat_nmi+0xf/0x53 [ 273.718250][ C1] ? skb_ext_add+0x1d6/0x910 [ 273.718274][ C1] ? memset_orig+0x82/0xb0 [ 273.718300][ C1] ? memset_orig+0x82/0xb0 [ 273.718325][ C1] ? memset_orig+0x82/0xb0 [ 273.718351][ C1] [ 273.718356][ C1] [ 273.718362][ C1] kasan_unpoison+0x46/0x70 [ 273.718380][ C1] __kasan_slab_alloc+0x52/0x80 [ 273.718400][ C1] ? skb_ext_add+0x171/0x910 [ 273.718418][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 273.718445][ C1] skb_ext_add+0x1d6/0x910 [ 273.718468][ C1] br_nf_forward_ip+0xd8/0x7b0 [ 273.718491][ C1] ? common_startup_64+0x13e/0x147 [ 273.718517][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 273.718538][ C1] nf_hook_slow+0xc3/0x220 [ 273.718564][ C1] NF_HOOK+0x2a7/0x460 [ 273.718585][ C1] ? NF_HOOK+0x9f/0x460 [ 273.718604][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 273.718622][ C1] ? __asan_memcpy+0x40/0x70 [ 273.718639][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 273.718664][ C1] __br_forward+0x489/0x660 [ 273.718683][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 273.718706][ C1] ? __pfx___br_forward+0x10/0x10 [ 273.718725][ C1] ? br_flood+0x3ed/0x660 [ 273.718749][ C1] br_handle_frame_finish+0x18ba/0x1fe0 [ 273.718779][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 273.718801][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 273.718828][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 273.718854][ C1] ? ip6t_do_table+0x205/0x18a0 [ 273.718880][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.718909][ C1] ? ip6t_do_table+0x205/0x18a0 [ 273.718937][ C1] ? nf_hook_slow+0x175/0x220 [ 273.718961][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 273.718985][ C1] br_nf_hook_thresh+0x472/0x590 [ 273.719010][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 273.719043][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 273.719069][ C1] ? skb_push+0x97/0x100 [ 273.719092][ C1] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 273.719117][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 273.719145][ C1] br_nf_pre_routing_ipv6+0x379/0x770 [ 273.719170][ C1] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 273.719193][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 273.719219][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 273.719243][ C1] ? br_nf_pre_routing+0x70e/0x1470 [ 273.719264][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 273.719287][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 273.719310][ C1] br_handle_frame+0x9fd/0x1530 [ 273.719332][ C1] ? cpu_startup_entry+0x42/0x60 [ 273.719352][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 273.719374][ C1] ? packet_rcv+0x159/0x14b0 [ 273.719400][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 273.719423][ C1] ? packet_rcv+0x16f/0x14b0 [ 273.719450][ C1] ? __pfx_packet_rcv+0x10/0x10 [ 273.719475][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 273.719497][ C1] __netif_receive_skb_core+0x14eb/0x4690 [ 273.719520][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 273.719543][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 273.719570][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 273.719592][ C1] ? ip6_mc_input+0xa1f/0xc30 [ 273.719615][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 273.719641][ C1] ? mark_lock+0x9a/0x360 [ 273.719665][ C1] ? __lock_acquire+0x1397/0x2100 [ 273.719696][ C1] __netif_receive_skb+0x12f/0x650 [ 273.719719][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 273.719739][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 273.719761][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.719781][ C1] ? __pfx_lock_release+0x10/0x10 [ 273.719801][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 273.719827][ C1] process_backlog+0x662/0x15b0 [ 273.719854][ C1] ? process_backlog+0x33b/0x15b0 [ 273.719881][ C1] ? __pfx_process_backlog+0x10/0x10 [ 273.719904][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.719926][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.719948][ C1] __napi_poll+0xcb/0x490 [ 273.719971][ C1] net_rx_action+0x89b/0x1240 [ 273.720005][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 273.720036][ C1] ? __run_timer_base+0x178/0x8e0 [ 273.720055][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 273.720088][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 273.720109][ C1] handle_softirqs+0x2d4/0x9b0 [ 273.720139][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 273.720166][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 273.720194][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 273.720217][ C1] __irq_exit_rcu+0xf7/0x220 [ 273.720242][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 273.720272][ C1] irq_exit_rcu+0x9/0x30 [ 273.720298][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.720320][ C1] [ 273.720325][ C1] [ 273.720332][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.720358][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 273.720374][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 2a a1 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 273.720389][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 273.720404][ C1] RAX: ffff88801d2f0000 RBX: ffff8881442aa064 RCX: 00000000000d9681 [ 273.720417][ C1] RDX: 0000000000000001 RSI: ffff8881442aa000 RDI: ffff8881442aa064 [ 273.720430][ C1] RBP: 000000000003a9f8 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 273.720443][ C1] R10: dffffc0000000000 R11: ffffffff8bc83c00 R12: ffff888021740000 [ 273.720456][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f1204a0 [ 273.720470][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 273.720501][ C1] acpi_idle_enter+0xe4/0x140 [ 273.720529][ C1] cpuidle_enter_state+0x109/0x470 [ 273.720553][ C1] ? __pfx_menu_select+0x10/0x10 [ 273.720580][ C1] cpuidle_enter+0x5d/0xa0 [ 273.720601][ C1] do_idle+0x372/0x5c0 [ 273.720630][ C1] ? __pfx_do_idle+0x10/0x10 [ 273.720665][ C1] cpu_startup_entry+0x42/0x60 [ 273.720681][ C1] start_secondary+0x102/0x110 [ 273.720708][ C1] common_startup_64+0x13e/0x147 [ 273.720738][ C1] [ 274.563370][ C0] net_ratelimit: 9022 callbacks suppressed [ 274.563395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 274.564876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.569709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.582702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.593914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.614819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.617510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.631326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.641608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.654474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.895639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.914038][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.573436][ C0] net_ratelimit: 11067 callbacks suppressed [ 279.573470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.575012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.580023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.593546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.604233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.616921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.628035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.641939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.651953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:ff:9a:68:df:05, vlan:0) [ 279.665338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)