last executing test programs: 4m13.160835747s ago: executing program 1 (id=136): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x84, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x84, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) 4m13.053880441s ago: executing program 1 (id=137): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x24, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x57789000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) (async) ioctl$RTC_UIE_ON(r0, 0x7003) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x24, 0x26, 0x0, 0x1c, 0x3, 0x400004f, 0x100010, 0x2c, 0xffffffffffffffff}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x57789000) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 4m13.02121669s ago: executing program 1 (id=138): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000094bbac173cc9526"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1409, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x9, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x1, 0x8002, 0x8000, 0x9, 0x0}, &(0x7f0000000340)=0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40090}], 0x1, 0x4004041) recvmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/138, 0x8a}], 0x1}, 0x5f}], 0x1, 0x10100, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)={r4, 0x0, 0x32, "25a998bac1b426dff184cf3449bbc0c8962fe70c12bdd1225635a9a02bee7f8f70a09749c76251ba363a8458771ac5ddd888"}, 0x3a) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 4m12.092038273s ago: executing program 1 (id=139): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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") r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @random="83f047e9529c"}, 0x10) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x9}, 0x80, 0x1, 0xe, 0x5, 0xf, 'syz1\x00', "6c30b0d1336b6d522d70bed38c27f228c96c455ab3150f78e327439abc84f92b", "a9c7318065e1763d883262e3ee99a64288194f727ecec478b6af202622503e95", [{0xf, 0xffff, {0x0, 0x704}}, {0x7, 0x3ff, {0x0, 0x67d}}, {0x5, 0x9, {0x0, 0x8}}, {0x3, 0x7, {0x3, 0x9}}, {0x454, 0xa019, {0x3, 0x2}}, {0x0, 0x37, {0x1, 0xc9}}, {0xc, 0x3a5, {0x1, 0xe0}}, {0xffa3, 0x49a, {0x0, 0x4}}, {0xf, 0x7fff, {0x2, 0x4}}, {0xf543, 0x7fff, {0x2, 0x97}}, {0xb3, 0x9, {0x3, 0x2}}, {0x2, 0x97, {0x2, 0x101}}, {0x8, 0x1, {0x2, 0x28e}}, {0x4, 0x2, {0x2, 0x10}}, {0xff01, 0x6, {0x1, 0xe}}, {0x7, 0x6, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x9dc2}}, {0x5, 0xb9b, {0x0, 0x6}}, {0x1, 0x7f, {0x1, 0x1}}, {0x5ae5, 0x8, {0x1, 0x4}}, {0x9, 0xf, {0x1, 0xbfd}}, {0xe4, 0xb3e1, {0x3, 0x6}}, {0x8, 0x1000, {0x3, 0x10000}}, {0xff4b, 0x6, {0x0, 0x1}}, {0x4, 0x8, {0x0, 0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x0, 0xcec, {0x0, 0xa}}, {0x3, 0x3310, {0x1, 0x2}}, {0xfff7, 0x1d7, {0x2, 0x7f}}, {0x6, 0x6, {0x3, 0x8}}, {0x5, 0x7ff, {0x3, 0x1000}}, {0x30, 0x7, {0x1, 0x802e}}, {0x9, 0x3, {0x1, 0x7}}, {0x4, 0xe, {0x0, 0x1}}, {0x401, 0x2, {0x1, 0x2}}, {0x8, 0x7ff, {0x0, 0xd4}}, {0x7, 0x100}, {0x5, 0x3, {0x3, 0x6}}, {0x2, 0x4066, {0x1, 0x1}}, {0x4, 0x7, {0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4f8103ea824f7e36}, 0x8880) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') dup2(r2, r0) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000100)) 4m11.914073086s ago: executing program 1 (id=141): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0xebae) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x7c8) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x9) ioprio_set$pid(0x1, 0x0, 0x2007) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xeb03c0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) sendfile(r2, r2, 0x0, 0x7ffff000) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) r6 = socket$packet(0x11, 0x3, 0x300) dup(r6) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) fanotify_mark(r1, 0x42, 0x8001000, r4, &(0x7f0000000380)='./file0\x00') ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000476b1c3a0000000000ff7ac91b0050b64cc9aeb41d7c0b6787637c8cb10e446d1e90d5e8de37708f30ba37fc2fb71c8ac70ba22f596397a0154ddc5d42ef43031ba8dd67163fe550"]) keyctl$session_to_parent(0x12) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)) eventfd2(0x8001, 0x0) 4m11.742405644s ago: executing program 1 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x191880000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4212, r3, 0x202, &(0x7f00000000c0)={0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 4m11.599518579s ago: executing program 32 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x191880000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4212, r3, 0x202, &(0x7f00000000c0)={0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 4m1.653562063s ago: executing program 4 (id=208): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x4, 0xb, 0x80000000, 0xfffffffa}) 4m1.542226582s ago: executing program 4 (id=209): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x5422, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="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", 0xfd, r0) 4m1.476688714s ago: executing program 4 (id=210): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24844}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 4m1.178026648s ago: executing program 4 (id=212): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x608801, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000340401022d0001000000000000000009644c13910c5c969309ffe9c4"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0xc) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '^'}, {0x20, ')%&^!\\{'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '#\x1e/\x06\x00\x00\x00#}\xe9~P\x93\xaa\xea\xee\x1d\x94x|\xb9\x03\xe0\xe2X+Kka`EI`\x1e*\x8fkbRJ\x02\xb7\x9fW\xa4QR3\x95y\xd6g\xbc]\xb5**\xba\xa4\x8d\xe6E\xa8eH\xf9\xce\xbe\xb4\xb8hl.\x1f\xc0E}\t\xf0w\xd9I\x83AD\xf7\xce#\xee\xfd\xf8\xce\x1d\"$\xe5\xdb\x05\x95+9\x1aY\xe9\xbds\x81n\xe8%R\x8e\xd6\xb5\x83\xcek\x1e\xe8.\xa8p3\x8b\x84\xc9\x8be\xc2\xd7(\xea\xe6T\x9f\xe8w\x02%*\xd6LR\xda'}, {0x20, '!'}, {0x20, 'tmpfs\x00'}, {0x20, '<)\\-%\xe0!$'}]}, 0xc8) mmap(&(0x7f0000a65000/0x3000)=nil, 0x3000, 0x2, 0x10010, r0, 0x2000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x11, r9) madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 4m1.034423237s ago: executing program 4 (id=213): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffe) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000400)="36decb65660ff7f6663e660f23faea03001b009a62a9e000f46766c7442400002000006766c7442402050000006766c744240600000000670f01142466b8010000000f01d9ba4000ecbaf80c66b860a7028f66efbafc0c66b80d00000066ef", 0x5f}], 0x1, 0x79, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r7 = dup(r6) ftruncate(r4, 0x3) write$cgroup_int(r7, &(0x7f00000000c0)=0x100000001, 0x12) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setuid(0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r7) r8 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r9, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000100)=0x4, 0x4) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000180)=""/5) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRES8=r8, @ANYRES64=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8, @ANYRESOCT=r11, @ANYRES32=0x0, @ANYRESDEC=r12]) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r13}) 3m58.631062643s ago: executing program 4 (id=226): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xd9b}, &(0x7f0000000080)=0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 3m58.429008872s ago: executing program 33 (id=226): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xd9b}, &(0x7f0000000080)=0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 41.327886511s ago: executing program 3 (id=1348): creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) close(r1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='(\'@\x96\x00']}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x40000000) (async) setns(r4, 0x40000000) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"0180bced01eb0100000000000000000700000000000000c900", r7, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100003786612058044a7006a80000000109061200010b1800000904410500c9caa00e"], 0x0) close_range(r2, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 37.970480034s ago: executing program 3 (id=1369): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x4}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4350}, 0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$sock(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ab69790722daf8bd2354144af5b0daaa36078ff3e31700a4ef9d0030c25cb3c430861f40cd9749ed25c54348bf9f3f42f2a38b9b9f12b5eaa7bd35d7f3f310fde252a5441ac3f9fe956ebe35d9ec363183117b2894e3ab265feed718bea257983e42ca32ea4f9daa09558d79d32c1d9143c24a4d5ffa72dae45260855008a7a86b00dd088637d10fdbeca33239ba2d95e9548e2514e9c139100ae641892c5dd186dc263c40ab04d78f0ef016b8ee5b86e391657fe8fe", 0xb6}, {&(0x7f0000000140)="10aade332adc0877def0b7138b6f1a6451768a035a8f83c29cbf877c04a699ae4d6ef18c", 0x24}, {&(0x7f0000000180)="c4c6d3a954de9ac5fb2f", 0xa}, {&(0x7f00000001c0)="cb76a259d37e6bb3796ab062a92c0f63bc40", 0x12}, {&(0x7f0000000200)="d389b4b388f2c65d75bf82a63c4e4be0a79bd7f8cd99e52b6940c02773274c97ac3dd6", 0x23}, {&(0x7f0000000240)="20525c6b78a840eef1968d669ea8c63a28501741c92bdde68e465487ba2654f56c617cad3be94789936ce8b0132da6a8e00ffd4cf1e4b2dfde69f5cfdcdd7df5ed782c374410394cf30caf5f8e0c3821ab0acfedb78ba9ccb8758d9a80aa25", 0x5f}, {&(0x7f00000002c0)="ff1c3350bdb4c58ae0dc8ea713ab924fb692e601e8bfb250b13551f45575b89288a801fd8cb6c7d10e90bbd16654cd561894441af2868c76bd44d947078fe8fa408931e167d6de9a7f9dfa62dae60aa8d8e252a2d7931bee13bfa5e2adaefeaffa12b1e1e7e766a8fe1d0853dafa650e6ebf39be5f257b02ece26acf1c5bcb8001f1fbe957d187", 0x87}], 0x7, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x1, 0x0, 0x3}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000004c0)="6227f5a83524bc6dbf613abf92d241bcd3c8054ffa08069b139ff2f30c740a8a0bebcafdf55af3fccc8ee8e76e5dd8e6dd816d93eda9ef93f7d469d2124d7df6d8fa5ee6ee538f8df6ce9b7044102cac3595cc43b55ef20f444ea0076bcffa9f88a6a81a5184907e1c326cd02d784618fd1ab46390aa474a5995caf99204f9df587b70aa5acfecc162ab3648d6c31c3f4b21ece248809192d98ad2d6bba305d5cb72b5d2aeda119d8037c0e7aa1428a9671cbeb9e4f1843e0eb26ec48ce43fc90d2b6908552527ad954543b7e182d4e04cf6406b755f341bd7f1", 0xda}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, &(0x7f0000001600)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x198}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001680)="745e31a030ab27cd1988999d3f242e941b4552f94d673218544d3b0d4852cdbf9ccdea1f529ac56aed96a3a9a37c34c23e8a120c8ef50baeffebb76a99d264c902be4c6b050cf0e4097deef2eba33a6fe5736f4b9183e9d1bae975dd4ed0aa02f11c2927210baf040e9584b0bb8b94d7f9612a83d8e3e320e317772a55f042b659d79a2d04d0ee3f8e473ead95b623d7c08a87201641e7dd428e418d", 0x9c}], 0x1, &(0x7f0000001780)=[@mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}}], 0x3, 0x8841) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f00000018c0)=0x1800) syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f0000001900)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x8, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "742276e7c295"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x400, 0x101}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xcb, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xeb, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0x6, 0x2}}}}}}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x100, 0x81, 0x6, 0xbb, 0x20, 0x77}, 0x20, &(0x7f00000019c0)={0x5, 0xf, 0x20, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0xc4, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8, 0x5}, @ptm_cap={0x3}]}, 0x4, [{0xeb, &(0x7f0000001a00)=@string={0xeb, 0x3, "53df667637b67214165f4af77bc9e74530c7494915ef2c872f1b6cb40a997a324a7582a7a8d2a9fdd8b8de96456c57de5585555f9455818604c7ce4fca00e347f7010b29bf24a18a91a7e3208c6b21124d1ddcbfd276573d8127bc914d39d97677ff0a225e29875478f2e61832bf6d6a84e60e4be78d934327d52c5a5a1f49aea86c9945f5d64ccbb19e9615088195bd18a10c1c9bab2a74ce37b8a3e21f7f1739214cbab7245cd0c3d4d09ab5dc0c1ebf6fbb97fb8db8580ad4a89122f4b06681fc04c16d4f457c76582903e7449542a7bcbdbd3b9dc457c64a8f67293e53fd24196883681e9194aa"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x1020}}, {0x3c, &(0x7f0000001b40)=@string={0x3c, 0x3, "d9d3e7c9c057359ceef75e731fe86eef58932039573a26180bba38db5f05c0ad5d81c43ed3177a7b03510a433d741091d971ce4dc1bd7f985288"}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x1004}}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d00)={'ip_vti0\x00', &(0x7f0000001c40)={'sit0\x00', 0x0, 0x8000, 0x80, 0x0, 0x9, {{0x21, 0x4, 0x1, 0x6, 0x84, 0x68, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x4, [{@multicast2, 0xc0}, {@private=0xa010100, 0x9}]}, @timestamp_prespec={0x44, 0x24, 0xa9, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x1}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@initdev={0xac, 0x1e, 0x9, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffff9}, {@rand_addr=0x64010101, 0x520}, {@local, 0x437}, {@remote, 0x9}, {@remote, 0xc}]}, @generic={0x44, 0x4, "1742"}, @end, @lsrr={0x83, 0x7, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) connect$packet(r1, &(0x7f0000001d40)={0x11, 0x1b, r3, 0x1, 0xe, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000001d80)="4e4066016e8bc8f3487326387b74fcc25c635aa50fddf7977aa77a8189e0a98fe00bce5d388489e5fbd871a28ed970d866ca4bb1dce22b830858192e34fe88b430444daa65e297249fb6c4e204004ee25d93bf4b2f99aa5207508eabf856229bb0433247c8762d63c5091f4c511b7b86d9bf7cac4f13cd792cb377408a2806f3e771a8838e3b6978de98317f94adafa479705f90315aa12b9f5a2edbe5dab5a06aba0599526559d7ab4e9b3b638b752a72c2818183cb0459a8b71a52e67f6027e14ce945811eea79a998808d083750b95272a831ebec1d1af8096f5c202dc861eddcdb4a14affbea33433265a7", 0xed, 0x4000844, &(0x7f0000001e80)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_proto_private(r4, 0x89e6, &(0x7f0000001ec0)="7550224bd3ff61b6c6da426570589895f1919adec28138652559037f06428551433dbf56413eb7069451da0a9330fa9f6b0e35bc871c8390ff02e1cfd5b8fa30cce6a3b60b67b3b1c628") getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000001f40), &(0x7f0000001f80)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6d}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c801}, 0x10) syz_usb_connect(0x5, 0x185, &(0x7f0000002100)={{0x12, 0x1, 0x200, 0x61, 0xe5, 0x88, 0x8, 0x2040, 0x826d, 0x81c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x173, 0x2, 0x3, 0xf7, 0x60, 0x8, [{{0x9, 0x4, 0xd7, 0x2, 0x0, 0xb7, 0x75, 0x5b, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x0, 0xc2}, {0x6, 0x24, 0x1a, 0x0, 0x31}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x218e, 0x3, 0xe, 0x0, 0x2}, @dmm={0x7, 0x24, 0x14, 0xffff, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0xfe, 0x4}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}]}]}}, {{0x9, 0x4, 0x53, 0x6, 0x4, 0x3d, 0x20, 0x63, 0x3, [], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x80, 0x2, [@generic={0xd3, 0x6, "92c74ef3ee5d0600b559e2d0005a837fa1728e5a032912da9635236cd1bdfda23a47a819781b34e8289b7b3d5bb05091f5d2580e3dfd4ac9a912b7767a8f418cc2c0116c7868c4e6c68d6a2c8565833fc1754aaa9a5daaf89211e1a448531a954cd2305e5bf27c933cc772e6f7f8ded3ebbedd6b2630937a03bf3ec8fea5e09306fbb2ade3ca791b87247d59c41b19bbee8b83d7a0a09df034d01dce9c713680f20969525171c3978544546583ddee550d0921ef86f1fcfbbcfe1997aeed8faf63535573296c9faea637e1516c0ae5ea4e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x9, 0x67, 0x7}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x9, 0xfa, 0xff}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf57}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}]}}]}}]}}, &(0x7f00000023c0)={0xa, &(0x7f00000022c0)={0xa, 0x6, 0x250, 0x5c, 0xb, 0x3, 0x40, 0x7}, 0xc, &(0x7f0000002300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x9004}]}, 0x2, [{0x4, &(0x7f0000002340)=@lang_id={0x4, 0x3, 0x4001}}, {0x14, &(0x7f0000002380)=@string={0x14, 0x3, "33df6e19b50e23df6eb23858e6530ef0daed"}}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000002400)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'nq\x00', 0x10, 0x2, 0x5b}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4e22, 0x0, 0x6, 0xa, 0x4}}, 0x44) syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r5) r8 = syz_genetlink_get_family_id$team(&(0x7f0000002500), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000025c0)={'syztnl1\x00', &(0x7f0000002540)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x6, 0x8, 0x9, @loopback, @remote, 0x40, 0x20, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'syztnl2\x00', &(0x7f0000002600)={'syztnl2\x00', r3, 0x2f, 0x84, 0x8, 0x86a, 0x22, @remote, @remote, 0x40, 0x40, 0x8, 0xa}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000029c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002980)={&(0x7f00000026c0)={0x2c0, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff8, 0x3, 0x40, 0x100}, {0x5, 0x6, 0x6}, {0x401d, 0x8, 0x86}, {0x0, 0x67, 0x4}, {0x401, 0x31, 0x0, 0x3}, {0xf, 0x5, 0x9, 0x80000000}, {0x4, 0x9, 0x9, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x40004) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x6) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r11, &(0x7f0000002a00)=""/231, 0xe7) r12 = syz_usb_connect$cdc_ncm(0x6, 0x170, &(0x7f0000002b00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15e, 0x2, 0x1, 0x8, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '1'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x7ff, 0x80}, {0x6, 0x24, 0x1a, 0xe}, [@mdlm_detail={0xf1, 0x24, 0x13, 0x4, "583be0e1dfa3ec174d26c9692a920c7dfc7229eaee92c9b38aa97fe6b151057bf8212e8ccd8bf36b25b4189fd875f2e5cb6c3ff76077dd554ca3fe64075938d21f5f5d90beec7629de04c851632649fa61dba1b7833dd8bcb1b029e2fc37aa1b1ed61b6e1a64822ba68142eb7faab51c19f975b22cade782d5daacac773df5b673b1dc8471308f60cc88d23c45b7a129afa8b4c8c83b196dbce3cf8f948f56f0f3c7475a2304f4df339d9fb1cd81c925f8cb63014aeb14baa29bd1e0bb204246a6ddbd99b8c12c08ad7943cbd75d6af335f41b33676cda66eb6ec8dc00b4566eb7cec0c67e7b5470cf1cd1a189"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x9, 0x3a}, @mbim_extended={0x8, 0x24, 0x1c, 0xc814, 0x8, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xb0, 0x0, 0x83}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x0, 0xfd}}}}}}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002c80)={0xa, 0x6, 0x200, 0x9, 0x7, 0x8, 0x20, 0x54}, 0x31, &(0x7f0000002cc0)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xb}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf, 0xffff, [0xffc03f, 0x3f00, 0x3f3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xd, 0x28, 0x7}]}, 0x6, [{0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x40d}}, {0x61, &(0x7f0000002d40)=@string={0x61, 0x3, "cb45f3094999a758a540a78b0365d9c19de8d9495255515a35e9c0bdc1b4540d241efe62ffa286ef11b7b5a3c4d40203ba89d5c8eaa664800fa0a948556aeaa1fe2270a834e92da6c79c887f709cba31ca8c96f4cbe2cc63bb18eb36d13dec"}}, {0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x408}}, {0x70, &(0x7f0000002e80)=@string={0x70, 0x3, "0ab8e4bc661fbc1ff8656b11bb81cc2aaf39efc6039fd1796d14333625846905082a12211a16d542bffb6ac39e1518f3992628b7fdec7232104e1cf3a58f762d4d14976e033da5fdddcb366e7cce3899df2151f399ac2698e0492c7ad3345dd2ea75eb7c7d74d28131085a10af2a"}}]}) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000003000)={0x14, &(0x7f0000002f80)={0x0, 0xb, 0x36, {0x36, 0xb, "35d81adc3020941b1210f4d3fda6d1da25c8b7a0b0dc21a7d3c189f205f0e82c86b659adace56a8713c582ed31e12372795f15e1"}}, &(0x7f0000002fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003240)={0x44, &(0x7f0000003040)={0x0, 0x15, 0x6, "f9644d6d6a63"}, &(0x7f0000003080)={0x0, 0xa, 0x1}, &(0x7f00000030c0)={0x0, 0x8, 0x1}, &(0x7f0000003100)={0x20, 0x80, 0x1c, {0x100, 0x1, 0x101, 0x5, 0xff, 0xfff2, 0x4, 0x1000000, 0x101, 0x3, 0x3, 0x80}}, &(0x7f0000003140)={0x20, 0x85, 0x4}, &(0x7f0000003180)={0x20, 0x83, 0x2}, &(0x7f00000031c0)={0x20, 0x87, 0x2, 0x39}, &(0x7f0000003200)={0x20, 0x89, 0x2}}) 35.922161958s ago: executing program 3 (id=1382): syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001082f10000904df0003080662ff09050c02200006060309050710003e8fad6702af03"], 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="34c756b930dbeb", 0x7}], 0x1, 0xfffffffe, 0x4, 0x1) 34.608322057s ago: executing program 3 (id=1387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x8863}, @val={0x1, 0x0, 0x0, 0xfffe, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x5, 0x80, 0x2, 0x1}}}, 0x36) (async) unshare(0x22020600) (async) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x311b80, 0x0) (async) personality(0x5400004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r7, 0x7dfff000) 34.142198999s ago: executing program 0 (id=1388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r1, 0xb, 0x2, 0x0, 0x0) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) setpgid(r2, r3) fadvise64(r0, 0x92, 0x5, 0x2) (async) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 33.806735216s ago: executing program 5 (id=1389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8ee4a000) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = getpid() kcmp(r12, r12, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a40)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000a00)=0xe8) r15 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$unix(r7, &(0x7f0000000b80)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0x20, 0x20000080}}, {{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000380)="33bb405d3a8375abeaecc01b66ef389e8c5e7864cebbfac30e2293422630c553e6f7dbcec740f3029866df0e448431f9748f4b7c4682d80ed4cd17d1b8761ba3f28649e089efe0a8cb3bcf553ddd1bd95984ad72513bbc252c2260069b9c1d10a263f19df418c7076f098f2ca58672869f1d00b283ce1ca5b99a6af5a0cf8d101617df1b04a83a592efb57e10b899b8388bc854a5912330f2dfd5ea702b09e0229a3ea", 0xa3}, {&(0x7f0000000440)="6dcf3ca4160824c2600b222f72471ae93fcc5cb4a4262dddfd449f38e456a71afeec1476686eaf6d724be2a062e03cba59c3ef010e10300a6d76c3c46015767e35484c972e07e298b464609de773ef18409009f7935a1c5a94c04bb1a2d9a7e60cca892f2cd24e92e0f4de15213d968007f176b06dd1d162520ace9a4f670f31f09caaad11206b4c834ffde52175b41562f8884d1037afe9bab3ea2f34476ef69ddf375bf65df6d9", 0xa8}, {&(0x7f0000000540)="6161fdc794a328806d92c1ebb5b9809e0027bfeb203c5d11d62cc61115ea9ed75c255092910ae0e902398c08e7c8cb0de83f064fbda7148f664a476d2174e03cc2705fd78463101df789a715eb5d658d0bcce41f049bd2d08c6c6cbe0e2c8c", 0x5f}], 0x3, 0x0, 0x0, 0x24008010}}, {{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000031c0)="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", 0x1000}, {&(0x7f0000000680)="e7589bb1a22834778ca1361c9ce55a0b641e23c5bbbd7ee32fab8ea5da33e3b6016fe515ae250aae00d34117d10d8314e04063c8822a98a3248a8361fd89030494bd7cda72f3d555a9f37c7a25e9c8a9543df15a9ba0e6affc3b18691df2d259e611978ff4d609fef7a0f9177aa0f97bb0bba026678a055503eaeb1b55db5519d3d4a97df8ed91b43243ee4b25ae7c5b59fe600c89244ea1a42b34802f3cfe075a4c4c0ee626ef5b9daafd7205787d0626c5d98da6899dbf61e2efd5a578f6ebd53d34a835aa57dfb015527cb0e470b6ff5dee1e5562", 0xd6}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4040004}}], 0x3, 0x0) 33.756841734s ago: executing program 0 (id=1390): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), &(0x7f0000000140)={0x0, 0xfb, 0xe3, 0x4, 0x8, "6091e59fedc565d05e85445a820ae0ba", "63395c9ae529cdd597b98521a437475f1f636cc4669aa7dddb32765018fe35c057125f6dfa20edb601fcf7c7c00007d0816ec32f5becca72e5148570f74bb58631ca196a09295164c36e5d019b39a1d48d6d14ee2445bc04fab1118049dd8fe9a16c8e59bc4c4bc273810a4568d4d560c428fd5ffd4144bca18d8801f42d0ceb11ed6e109a879d1481bb809b04421597739ef0cf52274881fa2362972b3df295941846d82db79e144dcc9d280dbb15f76ea4d57393a152d80ceb416b9a9e5608b2e3e2ccf48d327415619fbd7064"}, 0xe3, 0x2) 33.650285466s ago: executing program 0 (id=1391): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x12) 33.644832511s ago: executing program 0 (id=1392): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 33.592588789s ago: executing program 0 (id=1393): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) write$dsp(r6, &(0x7f0000002200)="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", 0x1000) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r5, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 33.501929832s ago: executing program 5 (id=1394): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xb080, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r2, r4}}, './file0\x00'}) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@cache_loose}, {@afid={'afid', 0x3d, 0x3}}, {@version_9p2000}], [{@subj_user={'subj_user', 0x3d, '[-.-[\'X^'}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/autofs\x00'}}, {@audit}, {@obj_role={'obj_role', 0x3d, '/dev/autofs\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel}]}}) write$P9_RSTAT(r5, &(0x7f0000000480)={0x5e, 0x7d, 0x2, {0x0, 0x57, 0x5, 0xbf7b, {0x0, 0x3, 0x3}, 0x2110000, 0xfffffff7, 0x9, 0x9, 0x8, 'obj_role', 0x4, '^#(@', 0xe, '{*.}H&\xf1*&!$)%/', 0xa, 'defcontext'}}, 0x5e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x0, 0x4, 0xfffffff9]}, &(0x7f0000000580)=0x44) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000600)={0x1d, r8, 0x0, {0x0, 0xff, 0x2}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7}, './file0/file0\x00'}) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) ioctl$KIOCSOUND(r10, 0x4b2f, 0xfff) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x210080) setfsuid(r3) r12 = syz_open_dev$mouse(&(0x7f0000000700), 0x2ca5, 0x100) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLERROR(r13, &(0x7f0000000780)={0xe, 0x7, 0x1, {0x5, '+}%})'}}, 0xe) read(r9, &(0x7f00000007c0)=""/6, 0x6) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000800)=0x19) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000000840)={0x0, "6a31ff8075a76b7760610463b06b53ba"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r12, 0xc4089434, &(0x7f0000001840)={r14, 0x3, 0x0, [0x2, 0x4, 0xb, 0x7, 0x2], [0x10000, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7, 0x9520, 0x9, 0x6, 0x7, 0x3, 0x1, 0x5, 0x9, 0x5cb2, 0x4, 0x9, 0x2, 0x3ff, 0x61f23bab, 0x5, 0x50, 0x1, 0x7, 0x2, 0x7fff, 0x3, 0xffffffffffffffff, 0x4, 0x5, 0x7fffffffffffffff, 0xffffffffffffff8e, 0x0, 0x0, 0x9d, 0x1, 0x100000001, 0x100, 0x4, 0xa, 0x6, 0xfd, 0x5, 0xf3, 0x2, 0x9, 0x8000000000000001, 0xffff, 0x4, 0x7, 0x6, 0xb, 0x6, 0x0, 0x3, 0x800, 0x5, 0xc, 0x8, 0x7, 0xfffffffffffffff7, 0x9, 0x93, 0x101, 0x4, 0xf9d8, 0xffff, 0x6, 0x7285, 0x7, 0x2400000, 0x5, 0x3, 0x8, 0xfffffffffffffffa, 0x1000, 0x2, 0x4, 0x8, 0xf5, 0x7, 0x2, 0x0, 0x8, 0x10001, 0xa, 0xfffffffffffffffb, 0xffffffffffff0001, 0x4, 0x0, 0x3d6b, 0x2800, 0x3, 0x1, 0x2, 0x3, 0x9, 0x0, 0x0, 0x46, 0x5, 0x401, 0x10, 0x9, 0x0, 0x2, 0x1, 0x81e6, 0x27, 0x1, 0x9a0d, 0x8001, 0x2, 0x3, 0x6e0, 0x7, 0x1, 0x8, 0x4, 0xb2a1, 0x5]}) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000001c80), 0x725000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r15, 0x8982, &(0x7f0000001cc0)={0x7, 'pim6reg\x00', {0x10001}, 0x4bd}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r16, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xc}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xdc5c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40480c1) 33.463412025s ago: executing program 5 (id=1395): mount(&(0x7f0000000080)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x10000, 0x0) 33.341735023s ago: executing program 5 (id=1396): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x100) (async) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x100) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 32.99674718s ago: executing program 5 (id=1398): select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/123, 0x7b}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) setresuid(0xee01, 0xee01, 0x0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x408c0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcffb6000040"]) pselect6(0x40, &(0x7f0000000500)={0x4, 0xffffffff, 0xff, 0x6, 0x80000000, 0x3, 0x6b, 0x55aa}, &(0x7f0000000540)={0x0, 0xa573, 0xc, 0xffffffffffffffff, 0x4cad, 0x7, 0x5578, 0x1}, &(0x7f0000000580)={0x9, 0x0, 0x79f, 0x100000001, 0x1, 0x2, 0xffffffff, 0xfffffffffffffffc}, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000640)={&(0x7f0000000600)={[0x5]}, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0xdf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x2040}, 0x54) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd890010490d1070900c010303010902120001000000080904"], 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x9d7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 32.992990158s ago: executing program 2 (id=1399): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000145c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="ec", 0x1}], 0x1}}], 0x1, 0x4000000) recvfrom(r1, 0x0, 0x3c, 0x2010, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r3, 0x1004}], 0x1, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x18, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000001c0)=0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000000c0)="00fbff008600000000003271a5bf00", 0x20) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000100)) readlinkat(r0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=""/177, 0xb1) 32.786231691s ago: executing program 2 (id=1400): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x30}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x30, r0, 0xffffe000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000003c0)={0x28, 0x7, 0x0, 0x0, 0x7, 0x3, 0x2}) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x30}}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x30, r0, 0xffffe000) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000003c0)={0x28, 0x7, 0x0, 0x0, 0x7, 0x3, 0x2}) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) (async) 32.785447455s ago: executing program 2 (id=1401): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r0, 0xe6683000) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x8) (async) r2 = timerfd_create(0x7, 0x0) (async) r3 = dup(r0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000000)=0x326) (async) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) (async) readv(r2, &(0x7f0000000200)=[{0x0}], 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) 32.720579652s ago: executing program 2 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000)=0x80000, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x40000000015, 0x5, 0x0) (async) sendto$inet6(r1, 0x0, 0xfffffffffffffe25, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000040), 0x4) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) r6 = creat(&(0x7f0000001380)='./file0\x00', 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @private2, 0x8001}, 0x1c) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="3a0163fe6c8d2b0020586627c5649a4b13e0fdce7ff118ad8fc142f2a0d42ec0f51e131eb9b83eb7e35a480835836da9de2635212e3b7ae2"], 0x4) (async, rerun: 64) r8 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000000)={0xffffffffffffffec, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) 32.01326469s ago: executing program 3 (id=1403): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) r0 = socket(0x21, 0x80805, 0x0) unshare(0x2040400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setns(r3, 0x2000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x3, 0x2}, 0x8) r6 = socket$inet(0x2, 0x80001, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c29", 0x28}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r8, 0x10, "0948ca94a1cbe2a6c2b19c7f52685346"}, &(0x7f0000000340)=0x18) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r9 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000) 31.710252384s ago: executing program 2 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050900000001"], 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 31.672046276s ago: executing program 2 (id=1405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000080)={{0x4000, 0x1, 0x6900745c5a16a6d8, 0x40, 0x1, 0x6, 0x2, 0x2, 0xa, 0x5, 0x4, 0x4}, {0x0, 0x8000000, 0x9, 0x99, 0x9, 0xd7, 0xe0, 0xa, 0x9, 0x6, 0x5, 0x80}, {0x6000, 0xdddd1000, 0xc, 0x6, 0x0, 0x7, 0x4, 0x40, 0x13, 0x8, 0x8, 0x2d}, {0x3000, 0xf000, 0x8f3e4c3900bfa277, 0x9, 0x0, 0x4, 0x7, 0x99, 0xb, 0x82, 0x81, 0x7a}, {0x9432d9cfa81c7369, 0xf000, 0xb, 0x7, 0xc, 0x4, 0x7, 0x5, 0x6, 0x1, 0x0, 0x59}, {0xdddd0000, 0x3000, 0x8, 0xb, 0xf1, 0x2, 0x1, 0x1, 0xe9, 0x96, 0x4, 0x8}, {0xffff1000, 0xdddd1000, 0x4, 0x4, 0xf1, 0xdf, 0x8, 0x8, 0x2, 0xa, 0x9, 0xea}, {0xd000, 0x4000, 0xd, 0x4, 0x2, 0x7f, 0xc0, 0x98, 0x69, 0x9, 0x9, 0xa0}, {0xdddd1000, 0x6}, {0x6000, 0x7}, 0x80010030, 0x0, 0xffff1000, 0x8, 0xd, 0x0, 0x10000, 0x0, [0x4, 0x7, 0x0, 0x8]}) r6 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000001c0)=0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000011000000000000c060ec9700003a2c00fe810000000000000000000000c5ac2332a776cca621b60000aaff0200e300000000000000000000000167000000000000008902907800000000fc00000000000000000000000000000000000000000000000000ffffe00000010101a3da6f0a80f08715"], 0x70) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000200)=r9) 31.394548872s ago: executing program 3 (id=1406): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d19, &(0x7f00000002c0)) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4090, 0xffa}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001c40)=""/67, 0x43}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@loopback, 0x80ff, 0x3c}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffe}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 29.258450108s ago: executing program 5 (id=1407): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x9}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="580000000206010200000000000000000c0000090c00078008000840000000400500010006000000000005000a00000005000400000000000900230073797a310000000013000300686173683a6e65742c69666163650000"], 0x58}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a80"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='erofs\x00', 0x3000404, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x4) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x1000, &(0x7f00000041c0)={[{@verity_on}, {@redirect_dir_off}, {@verity_require}, {@verity_on}]}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xd40, 0x1c1) (async, rerun: 32) r5 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) close(0x3) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000002c0)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000100)='mountinfo\x00') r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) shutdown(r8, 0x0) (rerun: 64) sendfile(r9, r8, 0x0, 0x80000000) r10 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r10) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, &(0x7f0000000340)={0x2, 0x0, @auto=[0x31, 0x25, 0x24, 0x19, 0x3a, 0x24, 0x38, 0x16, 0x1b, 0x36]}, 0x12, r11) creat(&(0x7f0000001380)='./file0\x00', 0x4) 26.66587148s ago: executing program 0 (id=1408): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xcc00, 0x0) 0s ago: executing program 34 (id=1405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000080)={{0x4000, 0x1, 0x6900745c5a16a6d8, 0x40, 0x1, 0x6, 0x2, 0x2, 0xa, 0x5, 0x4, 0x4}, {0x0, 0x8000000, 0x9, 0x99, 0x9, 0xd7, 0xe0, 0xa, 0x9, 0x6, 0x5, 0x80}, {0x6000, 0xdddd1000, 0xc, 0x6, 0x0, 0x7, 0x4, 0x40, 0x13, 0x8, 0x8, 0x2d}, {0x3000, 0xf000, 0x8f3e4c3900bfa277, 0x9, 0x0, 0x4, 0x7, 0x99, 0xb, 0x82, 0x81, 0x7a}, {0x9432d9cfa81c7369, 0xf000, 0xb, 0x7, 0xc, 0x4, 0x7, 0x5, 0x6, 0x1, 0x0, 0x59}, {0xdddd0000, 0x3000, 0x8, 0xb, 0xf1, 0x2, 0x1, 0x1, 0xe9, 0x96, 0x4, 0x8}, {0xffff1000, 0xdddd1000, 0x4, 0x4, 0xf1, 0xdf, 0x8, 0x8, 0x2, 0xa, 0x9, 0xea}, {0xd000, 0x4000, 0xd, 0x4, 0x2, 0x7f, 0xc0, 0x98, 0x69, 0x9, 0x9, 0xa0}, {0xdddd1000, 0x6}, {0x6000, 0x7}, 0x80010030, 0x0, 0xffff1000, 0x8, 0xd, 0x0, 0x10000, 0x0, [0x4, 0x7, 0x0, 0x8]}) r6 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000001c0)=0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000011000000000000c060ec9700003a2c00fe810000000000000000000000c5ac2332a776cca621b60000aaff0200e300000000000000000000000167000000000000008902907800000000fc00000000000000000000000000000000000000000000000000ffffe00000010101a3da6f0a80f08715"], 0x70) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000200)=r9) kernel console output (not intermixed with test programs): ][ T7488] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 214.406900][ T7488] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 214.415976][ T7488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.423939][ T7488] usb 6-1: Product: syz [ 214.428845][ T7488] usb 6-1: Manufacturer: syz [ 214.433423][ T7488] usb 6-1: SerialNumber: syz [ 214.504969][ T43] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 214.636417][ T43] usb 3-1: device descriptor read/64, error -71 [ 214.648652][ T7488] cypress_m8 6-1:5.0: DeLorme Earthmate USB converter detected [ 214.657710][ T7488] earthmate ttyUSB0: required endpoint is missing [ 214.668097][ T7488] usb 6-1: USB disconnect, device number 56 [ 214.683074][ T7488] cypress_m8 6-1:5.0: device disconnected [ 214.724919][ T10] vhci_hcd: vhci_device speed not set [ 214.884985][ T43] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 215.026406][ T43] usb 3-1: device descriptor read/64, error -71 [ 215.136050][ T43] usb usb3-port1: attempt power cycle [ 215.231478][ T9942] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 215.238500][ T9942] cramfs: wrong magic [ 215.438986][ T9951] trusted_key: encrypted_key: insufficient parameters specified [ 215.448559][ T9951] trusted_key: encrypted_key: keylen parameter is missing [ 215.475068][ T43] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 215.495408][ T43] usb 3-1: device descriptor read/8, error -71 [ 215.578535][ T9953] binder: 9952:9953 ioctl c0306201 200000000080 returned -14 [ 215.586970][ T9953] binder: 9952:9953 ioctl c018aa3f 200000000000 returned -22 [ 215.695042][ T7488] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 215.711223][ T9968] /dev/rnullb0: Can't open blockdev [ 215.736875][ T43] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 215.765937][ T43] usb 3-1: device descriptor read/8, error -71 [ 215.855368][ T7488] usb 6-1: Using ep0 maxpacket: 32 [ 215.861681][ T7488] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.869709][ T7488] usb 6-1: config 0 has no interface number 0 [ 215.875826][ T7488] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.886843][ T43] usb usb3-port1: unable to enumerate USB device [ 215.893586][ T7488] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.903811][ T7488] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 215.912878][ T7488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.921932][ T7488] usb 6-1: config 0 descriptor?? [ 215.924961][ T5947] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 215.984897][ T5868] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 216.086173][ T5947] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 216.094367][ T5947] usb 1-1: config 7 has no interface number 0 [ 216.102121][ T5947] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 216.112016][ T5947] usb 1-1: config 7 interface 252 has no altsetting 0 [ 216.121623][ T5947] usb 1-1: string descriptor 0 read error: -22 [ 216.127904][ T5947] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 216.136941][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.149135][ T5947] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 216.157251][ T5868] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 216.168522][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.176813][ T5868] usb 4-1: Product: syz [ 216.181049][ T5868] usb 4-1: Manufacturer: syz [ 216.185801][ T5868] usb 4-1: SerialNumber: syz [ 216.191552][ T5868] usb 4-1: config 0 descriptor?? [ 216.350789][ T5947] usb 1-1: USB disconnect, device number 43 [ 216.643405][ T7488] usbhid 6-1:0.1: can't add hid device: -71 [ 216.649468][ T7488] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 216.658887][ T7488] usb 6-1: USB disconnect, device number 57 [ 216.877584][ T9973] /dev/rnullb0: Can't open blockdev [ 216.959585][ T9975] overlay: ./file0 is not a directory [ 217.175204][ T30] audit: type=1326 audit(1756666218.927:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d58f8ebe9 code=0x7fc00000 [ 217.202445][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.249398][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.294526][ T5868] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 217.315231][ T5868] asix 4-1:0.0: probe with driver asix failed with error -71 [ 217.369492][ T5868] usb 4-1: USB disconnect, device number 61 [ 217.714886][ T7488] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 217.866751][ T7488] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 217.886020][ T7488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.908601][ T7488] usb 6-1: config 0 descriptor?? [ 218.114907][ T5947] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 218.121267][ T7488] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 218.267536][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.286877][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.338235][ T7488] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 218.714877][ T7488] [drm] Initialized udl on minor 2 [ 218.721244][ T7488] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 218.737546][ T7488] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 218.902805][ T9995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.924669][ T9995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.945187][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.945576][ T92] usb 6-1: USB disconnect, device number 58 [ 218.955722][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 218.980041][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 220.215703][ T43] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 220.354964][ T43] usb 4-1: device descriptor read/64, error -71 [ 220.594980][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 220.724938][ T43] usb 4-1: device descriptor read/64, error -71 [ 220.801722][ T5947] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 220.818756][ T5947] usb 1-1: can't read configurations, error -71 [ 220.835216][ T43] usb usb4-port1: attempt power cycle [ 221.075350][T10034] /dev/rnullb0: Can't open blockdev [ 221.175046][ T5947] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 221.215224][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 221.247191][ T43] usb 4-1: device descriptor read/8, error -71 [ 221.334871][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 221.341306][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 221.363129][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 221.386645][ T5947] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 221.398680][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.409185][ T5947] usb 1-1: Product: syz [ 221.413361][ T5947] usb 1-1: Manufacturer: syz [ 221.419320][ T5947] usb 1-1: SerialNumber: syz [ 221.425924][ T5947] usb 1-1: config 0 descriptor?? [ 221.485360][ T92] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 221.486338][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 221.517266][ T43] usb 4-1: device descriptor read/8, error -71 [ 221.637697][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.649093][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.659659][ T92] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.689391][ T92] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 221.709555][ T5947] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 221.720034][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.752288][ C0] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 221.762653][ T5947] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 221.876287][ T43] usb usb4-port1: unable to enumerate USB device [ 221.884756][ T92] usb 6-1: config 0 descriptor?? [ 222.307047][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.318968][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.326016][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.332892][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.345318][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.356224][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.370690][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.379271][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.389373][ T92] apple 0003:05AC:029C.0010: unknown main item tag 0x0 [ 222.413512][ T92] apple 0003:05AC:029C.0010: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.5-1/input0 [ 222.515680][T10038] /dev/rnullb0: Can't open blockdev [ 222.538987][ T92] usb 6-1: USB disconnect, device number 59 [ 223.394893][ T5868] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 223.595336][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 223.610359][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.639172][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.782545][ T7488] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 223.790463][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 223.823824][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.837438][ T5868] usb 6-1: config 0 descriptor?? [ 223.854169][ T92] usb 1-1: USB disconnect, device number 45 [ 223.944941][ T7488] usb 3-1: device descriptor read/64, error -71 [ 223.959118][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 223.970580][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.008317][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.018682][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.077828][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.087251][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 224.194979][ T7488] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 224.252992][ T5868] logitech 0003:046D:C626.0011: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 224.285877][ T5928] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 224.325484][ T7488] usb 3-1: device descriptor read/64, error -71 [ 224.425000][ T5928] usb 4-1: device descriptor read/64, error -71 [ 224.435401][ T7488] usb usb3-port1: attempt power cycle [ 224.476029][ T9] usb 6-1: USB disconnect, device number 60 [ 224.674986][ T5928] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 224.774952][ T7488] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 224.796656][ T7488] usb 3-1: device descriptor read/8, error -71 [ 224.805064][ T5928] usb 4-1: device descriptor read/64, error -71 [ 224.905947][T10075] binder: 10074:10075 ioctl 40a0ae49 200000000040 returned -22 [ 224.917207][ T5928] usb usb4-port1: attempt power cycle [ 225.036422][ T7488] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 225.065444][ T7488] usb 3-1: device descriptor read/8, error -71 [ 225.175228][ T7488] usb usb3-port1: unable to enumerate USB device [ 225.264912][ T5928] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 225.285380][ T5928] usb 4-1: device descriptor read/8, error -71 [ 225.355048][ T43] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 225.514930][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 225.523470][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.538115][ T5928] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 225.545994][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.557418][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 225.567919][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.579346][ T5928] usb 4-1: device descriptor read/8, error -71 [ 225.590729][ T43] usb 6-1: config 0 descriptor?? [ 225.695181][ T5928] usb usb4-port1: unable to enumerate USB device [ 226.019283][ T43] savu 0003:1E7D:2D5A.0012: ignoring exceeding usage max [ 226.028612][T10086] netlink: 'syz.0.1118': attribute type 21 has an invalid length. [ 226.040867][ T43] savu 0003:1E7D:2D5A.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 226.048212][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 226.225160][ T43] usb 6-1: USB disconnect, device number 61 [ 226.955267][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 227.034931][ T43] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 227.080617][T10108] /dev/rnullb0: Can't open blockdev [ 227.115098][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 227.129449][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 227.141799][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.150868][ T9] usb 3-1: Product: syz [ 227.155130][ T9] usb 3-1: Manufacturer: syz [ 227.175563][ T43] usb 6-1: device descriptor read/64, error -71 [ 227.189193][ T9] usb 3-1: SerialNumber: syz [ 227.201619][ T9] usb 3-1: config 0 descriptor?? [ 227.435143][ T43] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 227.446880][ T9] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 227.586205][ T43] usb 6-1: device descriptor read/64, error -71 [ 227.696956][ T43] usb usb6-port1: attempt power cycle [ 228.054895][ T43] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 228.065707][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1129'. [ 228.075299][ T43] usb 6-1: device descriptor read/8, error -71 [ 228.100523][T10116] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 228.128379][T10116] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 228.296843][T10122] overlayfs: failed to resolve './file1': -2 [ 228.321289][ T43] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 228.347521][ T43] usb 6-1: device descriptor read/8, error -71 [ 228.476031][ T43] usb usb6-port1: unable to enumerate USB device [ 229.048237][T10154] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 229.172497][T10161] bridge0: port 3(veth1_to_bridge) entered blocking state [ 229.191667][T10161] bridge0: port 3(veth1_to_bridge) entered disabled state [ 229.221014][T10163] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.222263][T10161] veth1_to_bridge: entered allmulticast mode [ 229.237349][T10164] /dev/rnullb0: Can't open blockdev [ 229.237683][T10161] veth1_to_bridge: entered promiscuous mode [ 229.244114][T10163] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 229.251926][T10161] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.264970][T10163] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 229.275345][T10161] bridge0: port 3(veth1_to_bridge) entered blocking state [ 229.282558][T10161] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 229.282671][T10163] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 229.308036][T10163] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 229.329719][T10163] comedi comedi3: 8255: I/O port conflict (0x3fd,4) [ 229.337492][T10163] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 229.344040][T10163] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 229.353417][T10163] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 229.360958][T10163] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 229.367564][T10163] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 229.374305][T10163] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 229.381879][T10163] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 229.390323][T10163] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 229.402322][T10163] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 229.410282][T10163] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 229.417422][T10163] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 229.425352][T10163] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 229.433496][T10163] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 229.752209][ T9] usb write operation failed. (-71) [ 229.774773][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.792143][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 229.812587][ T9] usb 3-1: media controller created [ 229.825266][ T9] usb read operation failed. (-71) [ 229.836198][ T9] usb write operation failed. (-71) [ 229.851691][ T9] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 229.935911][ T9] usb 3-1: USB disconnect, device number 60 [ 229.964356][T10178] /dev/rnullb0: Can't open blockdev [ 230.652132][T10196] Mount JFS Failure: -22 [ 230.680563][T10196] jfs_mount failed w/return code = -22 [ 230.694665][T10196] /dev/rnullb0: Can't open blockdev [ 231.084900][ T5947] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 231.237319][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.245114][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 231.261962][ T5947] usb 3-1: config 1 has an invalid interface number: 36 but max is 0 [ 231.279286][ T5947] usb 3-1: config 1 has no interface number 0 [ 231.297090][ T5947] usb 3-1: config 1 interface 36 has no altsetting 0 [ 231.310107][ T5947] usb 3-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=8b.54 [ 231.331612][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.349818][ T5947] usb 3-1: Product: syz [ 231.361409][ T5947] usb 3-1: Manufacturer: syz [ 231.376388][ T5947] usb 3-1: SerialNumber: syz [ 231.404900][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 231.417487][ T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 231.437732][ T9] usb 6-1: config 0 has no interface number 0 [ 231.443917][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.491652][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.523047][ T9] usb 6-1: config 0 interface 85 has no altsetting 0 [ 231.536406][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 231.545294][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.551595][ T5873] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 231.551854][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.587621][ T9] usb 6-1: Product: syz [ 232.544662][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.576313][ T9] usb 6-1: Manufacturer: syz [ 232.580974][ T9] usb 6-1: SerialNumber: syz [ 232.907176][T10202] /dev/rnullb0: Can't open blockdev [ 233.100439][ T9081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.226193][ T5868] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 233.416535][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 233.466403][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.486372][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.519249][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.562854][ T9] usb 6-1: config 0 descriptor?? [ 233.584541][ T5868] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.625444][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.706042][ T5868] usb 4-1: config 0 descriptor?? [ 233.863406][ T5947] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 233.885213][ T5947] gspca_sn9c20x: Write register 1000 failed -71 [ 233.891506][ T5947] gspca_sn9c20x: Device initialization failed [ 233.904895][ T5947] gspca_sn9c20x 3-1:1.36: probe with driver gspca_sn9c20x failed with error -71 [ 233.919683][ T5947] usb 3-1: USB disconnect, device number 61 [ 234.199008][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.219308][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.248099][ T5868] microsoft 0003:045E:07DA.0013: unknown main item tag 0x2 [ 234.271191][ T5868] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 234.294314][ T5868] microsoft 0003:045E:07DA.0013: unknown main item tag 0x2 [ 234.345818][ T5868] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 234.525866][ T5868] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 234.577636][ T5868] microsoft 0003:045E:07DA.0013: no inputs found [ 234.604889][ T5868] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 234.657242][ T5947] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 234.828754][ T5947] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 234.847191][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.865959][ T5947] usb 3-1: Product: syz [ 234.874633][ T5947] usb 3-1: Manufacturer: syz [ 234.888858][ T5947] usb 3-1: SerialNumber: syz [ 234.912245][ T5947] usb 3-1: config 0 descriptor?? [ 235.032706][ T9] appletouch 6-1:0.85: Failed to read mode from device. [ 235.060166][ T9] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 236.091013][ T9] usb 6-1: USB disconnect, device number 66 [ 237.479381][ T5947] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.529877][ T5947] asix 3-1:0.0: probe with driver asix failed with error -71 [ 237.588107][ T5947] usb 3-1: USB disconnect, device number 62 [ 237.720557][ T92] usb 4-1: USB disconnect, device number 70 [ 238.003358][T10227] /dev/rnullb0: Can't open blockdev [ 238.185032][T10229] [U] ^C [ 238.323925][T10241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.404883][ T92] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 238.625161][ T92] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.648653][ T92] usb 4-1: config 7 has an invalid interface number: 47 but max is 0 [ 238.664895][ T92] usb 4-1: config 7 has no interface number 0 [ 238.670997][ T92] usb 4-1: config 7 interface 47 has no altsetting 0 [ 238.701710][ T92] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=c4.81 [ 238.733016][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.759277][ T92] usb 4-1: Product: syz [ 238.763506][ T92] usb 4-1: Manufacturer: syz [ 238.772522][ T92] usb 4-1: SerialNumber: syz [ 238.884946][T10249] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 239.018548][ T92] qmi_wwan 4-1:7.47: bogus CDC Union: master=0, slave=0 [ 239.020219][T10253] /dev/rnullb0: Can't open blockdev [ 239.038182][ T92] qmi_wwan 4-1:7.47: probe with driver qmi_wwan failed with error -22 [ 239.047629][T10254] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.069350][T10253] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.075257][ T92] usb 4-1: USB disconnect, device number 71 [ 240.706274][T10276] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.1182'. [ 240.765546][T10276] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 240.774045][T10276] /dev/rnullb0: Can't open blockdev [ 240.794973][ T43] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 240.973110][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.997050][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.044928][ T43] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 241.053995][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.100714][ T43] usb 6-1: config 0 descriptor?? [ 241.404693][T10278] 9p: Bad value for 'rfdno' [ 241.531856][ T43] ortek 0003:1223:3F07.0014: unknown main item tag 0x6 [ 241.542262][ T43] ortek 0003:1223:3F07.0014: report_id 29495 is invalid [ 241.561238][ T43] ortek 0003:1223:3F07.0014: item 0 2 1 8 parsing failed [ 241.575615][ T43] ortek 0003:1223:3F07.0014: probe with driver ortek failed with error -22 [ 241.734906][ T5868] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 241.906711][ T5868] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 241.934979][ T5868] usb 1-1: config 0 has no interface number 0 [ 241.943676][ T5868] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 241.952960][ T43] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 241.960990][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.983115][ T5868] usb 1-1: Product: syz [ 241.987758][ T5868] usb 1-1: Manufacturer: syz [ 241.992464][ T5868] usb 1-1: SerialNumber: syz [ 241.995392][ T5947] usb 6-1: USB disconnect, device number 67 [ 242.005819][ T5868] usb 1-1: config 0 descriptor?? [ 242.104896][ T43] usb 4-1: device descriptor read/64, error -71 [ 242.354890][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 242.419190][ T5868] usb 1-1: USB disconnect, device number 46 [ 242.435213][ T5868] f81534a_ctrl 1-1:0.74: failed to set register 0x116: -19 [ 242.447726][ T5868] f81534a_ctrl 1-1:0.74: failed to enable ports: -19 [ 242.505321][ T43] usb 4-1: device descriptor read/64, error -71 [ 242.639852][ T43] usb usb4-port1: attempt power cycle [ 242.894894][ T5868] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 242.985586][T10287] ./cgroup: Can't lookup blockdev [ 242.999049][ T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 243.039863][ T43] usb 4-1: device descriptor read/8, error -71 [ 243.068558][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.085901][ T5868] usb 6-1: config 7 has an invalid interface number: 47 but max is 0 [ 243.104193][ T5868] usb 6-1: config 7 has no interface number 0 [ 243.110724][ T5868] usb 6-1: config 7 interface 47 has no altsetting 0 [ 243.126687][ T5868] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=c4.81 [ 243.136108][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.144109][ T5868] usb 6-1: Product: syz [ 243.155106][ T5868] usb 6-1: Manufacturer: syz [ 243.162968][ T5868] usb 6-1: SerialNumber: syz [ 243.304875][ T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 243.325437][ T43] usb 4-1: device descriptor read/8, error -71 [ 243.446642][ T43] usb usb4-port1: unable to enumerate USB device [ 243.933590][ T5868] qmi_wwan 6-1:7.47: bogus CDC Union: master=0, slave=0 [ 243.955858][ T5868] qmi_wwan 6-1:7.47: probe with driver qmi_wwan failed with error -22 [ 243.977339][ T5868] usb 6-1: USB disconnect, device number 68 [ 244.214871][ T5947] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 244.367536][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 244.376331][ T5947] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 244.384423][ T5947] usb 1-1: config 0 has no interface number 0 [ 244.391435][ T5947] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.403452][ T5947] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 244.416910][ T5947] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.428149][ T5947] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.442399][ T5947] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 244.451663][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.473377][ T5947] usb 1-1: config 0 descriptor?? [ 244.496513][ T5947] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 244.506188][T10298] bpf: Bad value for 'gid' [ 244.765059][ T5947] usb 1-1: USB disconnect, device number 47 [ 244.771033][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 244.980554][T10309] /dev/rnullb0: Can't open blockdev [ 245.000266][ T5947] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 245.006963][T10296] ldusb: No device or device unplugged -19 [ 245.158093][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 245.224903][ T92] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 245.379185][ T92] usb 6-1: unable to get BOS descriptor or descriptor too short [ 245.388877][ T92] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 245.407543][ T92] usb 6-1: string descriptor 0 read error: -22 [ 245.413970][ T92] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 245.423392][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.564931][ T92] usb 6-1: reset high-speed USB device number 69 using dummy_hcd [ 246.244889][ T5868] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 246.265028][ T92] usb 6-1: device descriptor read/64, error -71 [ 246.417801][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.426586][ T5868] usb 4-1: config 7 has an invalid interface number: 47 but max is 0 [ 246.437954][ T5868] usb 4-1: config 7 has no interface number 0 [ 246.444048][ T5868] usb 4-1: config 7 interface 47 has no altsetting 0 [ 246.454779][ T5868] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=c4.81 [ 246.464040][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.472144][ T5868] usb 4-1: Product: syz [ 246.478588][ T5868] usb 4-1: Manufacturer: syz [ 246.483205][ T5868] usb 4-1: SerialNumber: syz [ 246.504898][ T92] usb 6-1: reset high-speed USB device number 69 using dummy_hcd [ 246.658129][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.668001][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.677346][T10312] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 246.684357][T10312] block nbd5: Attempted send on invalid socket [ 246.691080][T10312] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.715819][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.728974][ T92] usb 6-1: unable to get BOS descriptor or descriptor too short [ 246.737051][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.737134][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.747477][ T92] usb 6-1: device firmware changed [ 246.757771][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.775126][ T5928] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 246.786774][ T92] usb 6-1: USB disconnect, device number 69 [ 246.818560][ T5868] qmi_wwan 4-1:7.47: bogus CDC Union: master=0, slave=0 [ 246.834638][ T5868] qmi_wwan 4-1:7.47: probe with driver qmi_wwan failed with error -22 [ 246.870062][ T5868] usb 4-1: USB disconnect, device number 76 [ 246.961576][ T5928] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 246.980585][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.093284][ T5928] usb 1-1: config 0 descriptor?? [ 247.154479][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 247.318879][ T5928] kaweth 1-1:0.0: Firmware present in device. [ 247.373318][T10358] /dev/rnullb0: Can't open blockdev [ 247.509279][ T5928] kaweth 1-1:0.0: Statistics collection: 0 [ 247.523053][ T5928] kaweth 1-1:0.0: Multicast filter limit: 0 [ 247.536991][ T5928] kaweth 1-1:0.0: MTU: 0 [ 247.546901][ T5928] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 248.133201][ T5928] kaweth 1-1:0.0: kaweth interface created at eth9 [ 248.334891][ T5908] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 248.343085][T10327] /dev/rnullb0: Can't open blockdev [ 248.356330][ T5928] usb 1-1: USB disconnect, device number 48 [ 248.510300][ T5908] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 248.525836][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.544341][ T5908] usb 3-1: Product: syz [ 248.554229][ T5908] usb 3-1: Manufacturer: syz [ 248.562901][ T5908] usb 3-1: SerialNumber: syz [ 248.578098][ T5908] usb 3-1: config 0 descriptor?? [ 248.792987][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.807889][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.820845][ T5908] usb 3-1: ignoring: probably an ADSL modem [ 249.047892][T10410] /dev/rnullb0: Can't open blockdev [ 249.090908][T10412] /dev/rnullb0: Can't open blockdev [ 249.237376][ T5908] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 249.294919][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 249.516320][ T5908] usb 3-1: USB disconnect, device number 63 [ 249.705243][ T5947] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 249.864958][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 249.876036][ T5947] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 249.894493][ T5947] usb 6-1: config 0 has no interface number 0 [ 249.905834][ T5947] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 249.918401][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.934358][ T5947] usb 6-1: Product: syz [ 249.943193][ T5947] usb 6-1: Manufacturer: syz [ 249.953490][ T5947] usb 6-1: SerialNumber: syz [ 249.970769][ T5947] usb 6-1: config 0 descriptor?? [ 249.986953][ T5947] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 249.993804][ T5947] command write [95] error -22 [ 250.135789][ T5858] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 250.146830][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 250.146853][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.146864][ T5858] Call Trace: [ 250.146871][ T5858] [ 250.146878][ T5858] dump_stack_lvl+0x189/0x250 [ 250.146915][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.146937][ T5858] ? __pfx__printk+0x10/0x10 [ 250.146960][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.146981][ T5858] dump_header+0xd3/0x480 [ 250.146997][ T5858] oom_kill_process+0x387/0x920 [ 250.147017][ T5858] out_of_memory+0xf09/0x12a0 [ 250.147037][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147055][ T5858] ? __pfx_out_of_memory+0x10/0x10 [ 250.147071][ T5858] ? percpu_ref_put+0x19/0x180 [ 250.147086][ T5858] ? lock_release+0x4b/0x3e0 [ 250.147105][ T5858] mem_cgroup_out_of_memory+0x145/0x240 [ 250.147123][ T5858] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 250.147145][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 250.147163][ T5858] ? memcg1_oom_prepare+0x37f/0x450 [ 250.147184][ T5858] try_charge_memcg+0xdff/0x1290 [ 250.147205][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147227][ T5858] ? __pfx_try_charge_memcg+0x10/0x10 [ 250.147248][ T5858] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 250.147265][ T5858] ? xa_load+0x60/0x210 [ 250.147285][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147303][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147320][ T5858] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 250.147343][ T5858] charge_memcg+0x9f/0x180 [ 250.147363][ T5858] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 250.147384][ T5858] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 250.147408][ T5858] __read_swap_cache_async+0x28c/0x510 [ 250.147431][ T5858] swap_cluster_readahead+0x305/0x5f0 [ 250.147452][ T5858] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 250.147473][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147489][ T5858] ? filemap_get_entry+0xad/0x2f0 [ 250.147507][ T5858] ? get_vma_policy+0x27c/0x3c0 [ 250.147530][ T5858] swapin_readahead+0x17d/0xb50 [ 250.147548][ T5858] ? __pfx_filemap_get_entry+0x10/0x10 [ 250.147567][ T5858] ? get_swap_device_info+0x1c/0x2b0 [ 250.147585][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147601][ T5858] ? __pfx_swapin_readahead+0x10/0x10 [ 250.147621][ T5858] ? __filemap_get_folio+0x9a6/0xaf0 [ 250.147641][ T5858] ? swap_cache_get_folio+0xae/0x3b0 [ 250.147668][ T5858] do_swap_page+0x525/0x5ac0 [ 250.147689][ T5858] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.147711][ T5858] ? ___pte_offset_map+0x29/0x250 [ 250.147733][ T5858] ? lock_acquire+0x5f/0x360 [ 250.147748][ T5858] ? do_swap_page+0x184/0x5ac0 [ 250.147766][ T5858] ? __pfx_do_swap_page+0x10/0x10 [ 250.147787][ T5858] ? __pfx_default_wake_function+0x10/0x10 [ 250.147804][ T5858] ? ___pte_offset_map+0x45/0x250 [ 250.147823][ T5858] ? ___pte_offset_map+0x1cf/0x250 [ 250.147844][ T5858] ? pte_offset_map_rw_nolock+0xea/0x160 [ 250.147866][ T5858] __handle_mm_fault+0xe55/0x5400 [ 250.147893][ T5858] ? __pfx___handle_mm_fault+0x10/0x10 [ 250.147914][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.147935][ T5858] ? lock_vma_under_rcu+0x3cb/0x450 [ 250.147952][ T5858] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 250.147969][ T5858] handle_mm_fault+0x40a/0x8e0 [ 250.147994][ T5858] do_user_addr_fault+0xa81/0x1390 [ 250.148012][ T5858] ? rcu_is_watching+0x15/0xb0 [ 250.148029][ T5858] ? trace_page_fault_user+0x84/0x1e0 [ 250.148046][ T5858] exc_page_fault+0x82/0x100 [ 250.148066][ T5858] asm_exc_page_fault+0x26/0x30 [ 250.148082][ T5858] RIP: 0033:0x7fbef3bc14a8 [ 250.148101][ T5858] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 250.148116][ T5858] RSP: 002b:00007fff05160020 EFLAGS: 00010293 [ 250.148132][ T5858] RAX: 0000000000000000 RBX: 00000000000003b0 RCX: 00007fbef3bc14a5 [ 250.148143][ T5858] RDX: 00007fff05160060 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.148154][ T5858] RBP: 00007fff051600cc R08: 0000000000000000 R09: 0000000000000000 [ 250.148165][ T5858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 250.148175][ T5858] R13: 00000000000927c0 R14: 000000000003c7b4 R15: 00007fff05160120 [ 250.148194][ T5858] [ 250.148201][ T5858] memory: usage 307200kB, limit 307200kB, failcnt 19472 [ 250.269786][ T5928] usb 6-1: USB disconnect, device number 70 [ 250.285205][ T5858] memory+swap: usage 307944kB, limit 9007199254740988kB, failcnt 0 [ 250.580178][ T5858] kmem: usage 2708kB, limit 9007199254740988kB, failcnt 0 [ 250.590837][ T5858] Memory cgroup stats for /syz3: [ 250.590975][ T5858] cache 311054336 [ 250.599668][ T5858] rss 0 [ 250.602410][ T5858] rss_huge 0 [ 250.605744][ T5858] shmem 311054336 [ 250.609382][ T5858] mapped_file 0 [ 250.612907][ T5858] dirty 0 [ 250.615869][ T5858] writeback 0 [ 250.619145][ T5858] workingset_refault_anon 4035 [ 250.623893][ T5858] workingset_refault_file 2112 [ 250.628961][ T5858] swap 761856 [ 250.632301][ T5858] swapcached 16384 [ 250.636297][ T5947] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 250.644727][ T5858] pgpgin 472445 [ 250.648372][ T5858] pgpgout 397135 [ 250.651940][ T5858] pgfault 191382 [ 250.655752][ T5858] pgmajfault 2448 [ 250.659395][ T5858] inactive_anon 311054336 [ 250.663703][ T5858] active_anon 16384 [ 250.667691][ T5858] inactive_file 0 [ 250.671422][ T5858] active_file 0 [ 250.675132][ T5858] unevictable 0 [ 250.678663][ T5858] hierarchical_memory_limit 314572800 [ 250.684039][ T5858] hierarchical_memsw_limit 9223372036854771712 [ 250.690335][ T5858] total_cache 311054336 [ 250.694473][ T5858] total_rss 0 [ 250.697993][ T5858] total_rss_huge 0 [ 250.701708][ T5858] total_shmem 311054336 [ 250.705878][ T5858] total_mapped_file 0 [ 250.709849][ T5858] total_dirty 0 [ 250.713987][ T5858] total_writeback 0 [ 250.718192][ T5858] total_workingset_refault_anon 4035 [ 250.723594][ T5858] total_workingset_refault_file 2112 [ 250.728948][ T5858] total_swap 761856 [ 250.732745][ T5858] total_swapcached 16384 [ 250.737073][ T5858] total_pgpgin 472445 [ 250.741043][ T5858] total_pgpgout 397135 [ 250.745146][ T5858] total_pgfault 191382 [ 250.749196][ T5858] total_pgmajfault 2448 [ 250.753321][ T5858] total_inactive_anon 311054336 [ 250.758261][ T5858] total_active_anon 16384 [ 250.762582][ T5858] total_inactive_file 0 [ 250.766762][ T5858] total_active_file 0 [ 250.770730][ T5858] total_unevictable 0 [ 250.774699][ T5858] anon_cost 0 [ 250.778186][ T5858] file_cost 0 [ 250.781552][ T5858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1210,pid=10363,uid=0 [ 250.796650][ T5858] Memory cgroup out of memory: Killed process 10363 (syz.3.1210) total-vm:102008kB, anon-rss:1020kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 250.823230][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 250.834852][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 250.845858][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 250.855631][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 250.868227][ T5947] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 250.877331][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.885359][ T5947] usb 3-1: Product: syz [ 250.889516][ T5947] usb 3-1: Manufacturer: syz [ 250.894081][ T5947] usb 3-1: SerialNumber: syz [ 250.903640][ T5947] usb 3-1: config 0 descriptor?? [ 251.120579][T10423] /dev/rnullb0: Can't open blockdev [ 251.130870][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.152087][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.167221][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.180843][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.202093][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.214040][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.231273][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.246850][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.263487][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.283598][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.290242][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.305214][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.315271][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.330183][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.346439][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.355839][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.374916][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.381254][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.395328][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.414898][ T5947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 251.420933][ T5947] input input24: Timeout waiting for response from device. [ 251.434880][ T5928] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 251.445296][ T5947] usb 3-1: USB disconnect, device number 64 [ 251.596497][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.611507][ T5928] usb 6-1: config 7 has an invalid interface number: 47 but max is 0 [ 251.624459][ T5928] usb 6-1: config 7 has no interface number 0 [ 251.638126][ T5928] usb 6-1: config 7 interface 47 has no altsetting 0 [ 251.656510][ T5928] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=c4.81 [ 251.681594][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.704532][ T5928] usb 6-1: Product: syz [ 251.713130][ T5928] usb 6-1: Manufacturer: syz [ 251.722290][ T5928] usb 6-1: SerialNumber: syz [ 251.827663][T10445] syzkaller1: entered promiscuous mode [ 251.853482][T10445] syzkaller1: entered allmulticast mode [ 251.891672][ T5870] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 251.906233][T10445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.959007][ T5928] qmi_wwan 6-1:7.47: bogus CDC Union: master=0, slave=0 [ 251.988728][ T5928] qmi_wwan 6-1:7.47: probe with driver qmi_wwan failed with error -22 [ 252.570536][T10451] /dev/rnullb0: Can't open blockdev [ 252.587242][T10451] tipc: Enabling of bearer rejected, failed to enable media [ 252.600859][T10452] /dev/sg0: Can't lookup blockdev [ 252.994164][ T5928] usb 6-1: USB disconnect, device number 71 [ 253.225031][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 253.389231][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.407740][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.422598][ T9] usb 4-1: Product: syz [ 253.428280][ T9] usb 4-1: Manufacturer: syz [ 253.432933][ T9] usb 4-1: SerialNumber: syz [ 253.869050][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1240'. [ 254.138857][T10482] can0: slcan on ptm0. [ 254.289325][T10481] can0 (unregistered): slcan off ptm0. [ 254.537891][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.583308][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.707422][ T9] cdc_ncm 4-1:1.0: failed to get mac address [ 254.753242][ T9] cdc_ncm 4-1:1.0: bind() failure [ 254.823481][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 254.875635][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 254.927981][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 254.976986][ T9] usb 4-1: USB disconnect, device number 77 [ 255.111844][T10492] netlink: 'syz.5.1243': attribute type 21 has an invalid length. [ 255.152619][T10492] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1243'. [ 255.181979][T10516] /dev/rnullb0: Can't open blockdev [ 255.307268][T10524] /dev/rnullb0: Can't open blockdev [ 255.465431][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 255.618684][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.625932][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.667705][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 255.681149][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 38691, setting to 64 [ 255.706867][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.748401][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 255.780169][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.803696][ T9] usb 1-1: SerialNumber: syz [ 255.825150][T10519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.832382][T10519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.115536][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.126076][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.136381][T10556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.146640][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.161593][ T9] usbtest 1-1:1.0: Linux user mode ISO test driver [ 256.173468][ T9] usbtest 1-1:1.0: full-speed {control bulk-in bulk-out} tests (+alt) [ 256.187723][ T9] usb 1-1: USB disconnect, device number 49 [ 256.365093][ T43] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 256.495393][ T5870] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 256.505067][ T43] usb 6-1: device descriptor read/64, error -71 [ 256.774930][ T43] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 256.925013][ T43] usb 6-1: device descriptor read/64, error -71 [ 257.045217][ T43] usb usb6-port1: attempt power cycle [ 257.384914][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 257.425331][ T43] usb 6-1: device descriptor read/8, error -71 [ 257.664920][ T43] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 257.685966][ T43] usb 6-1: device descriptor read/8, error -71 [ 257.797140][ T43] usb usb6-port1: unable to enumerate USB device [ 258.425102][ T43] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 258.586547][ T43] usb 3-1: device descriptor read/64, error -71 [ 258.708103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.720357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.733182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.745549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.758312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.770751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.783598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.796020][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.808545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.820947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.132982][ T43] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 259.691031][ T43] usb 3-1: device descriptor read/64, error -71 [ 260.066517][T10635] /dev/rnullb0: Can't open blockdev [ 260.117992][ T43] usb usb3-port1: attempt power cycle [ 260.329894][ T92] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 260.505009][ T92] usb 6-1: device descriptor read/64, error -71 [ 260.636401][ T43] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 260.718504][ T43] usb 3-1: device descriptor read/8, error -71 [ 260.765138][ T92] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 260.914401][ T92] usb 6-1: device descriptor read/64, error -71 [ 261.035129][ T92] usb usb6-port1: attempt power cycle [ 261.291348][T10650] wlan1 speed is unknown, defaulting to 1000 [ 261.292180][ T43] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 261.377911][ T92] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 261.417466][ T92] usb 6-1: device descriptor read/8, error -71 [ 261.555916][ T43] usb 3-1: device not accepting address 68, error -71 [ 261.570864][ T43] usb usb3-port1: unable to enumerate USB device [ 261.676210][ T30] audit: type=1326 audit(1756666263.447:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52f18ebe9 code=0x7fc00000 [ 261.844884][ T92] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 261.865510][ T92] usb 6-1: device descriptor read/8, error -71 [ 261.995165][ T92] usb usb6-port1: unable to enumerate USB device [ 262.102689][T10658] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1280'. [ 262.570927][T10663] /dev/rnullb0: Can't open blockdev [ 262.587024][T10664] /dev/rnullb0: Can't open blockdev [ 262.686580][T10666] /dev/rnullb0: Can't open blockdev [ 262.988937][T10669] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 263.008933][T10669] netlink: 'syz.2.1284': attribute type 101 has an invalid length. [ 263.031326][T10669] netlink: 624 bytes leftover after parsing attributes in process `syz.2.1284'. [ 263.715881][ C1] net_ratelimit: 14025 callbacks suppressed [ 263.715898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.734329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.746249][ T92] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 263.746654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.766223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.778536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.791002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.803338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.815803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.828147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.840577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.917082][ T92] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 263.941719][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.972629][T10683] /dev/rnullb0: Can't open blockdev [ 263.985955][ T92] usb 3-1: config 0 descriptor?? [ 263.998521][T10683] /dev/rnullb0: Can't open blockdev [ 264.026035][T10683] /dev/rnullb0: Can't open blockdev [ 264.036952][T10683] /dev/rnullb0: Can't open blockdev [ 264.063624][T10683] /dev/rnullb0: Can't open blockdev [ 264.081011][T10683] /dev/rnullb0: Can't open blockdev [ 264.099477][T10683] /dev/rnullb0: Can't open blockdev [ 264.116664][T10683] /dev/rnullb0: Can't open blockdev [ 264.133767][T10683] /dev/rnullb0: Can't open blockdev [ 264.152147][T10683] /dev/rnullb0: Can't open blockdev [ 264.177897][T10683] /dev/rnullb0: Can't open blockdev [ 264.183604][T10683] /dev/rnullb0: Can't open blockdev [ 264.225432][T10683] /dev/rnullb0: Can't open blockdev [ 264.232520][T10683] /dev/rnullb0: Can't open blockdev [ 264.260401][T10683] /dev/rnullb0: Can't open blockdev [ 264.296263][T10683] /dev/rnullb0: Can't open blockdev [ 264.301917][T10683] /dev/rnullb0: Can't open blockdev [ 264.332804][ T9082] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.405540][T10683] /dev/rnullb0: Can't open blockdev [ 264.412859][T10683] /dev/rnullb0: Can't open blockdev [ 264.426687][T10683] /dev/rnullb0: Can't open blockdev [ 264.438966][T10687] /dev/rnullb0: Can't open blockdev [ 264.456082][T10683] /dev/rnullb0: Can't open blockdev [ 264.476938][T10683] /dev/rnullb0: Can't open blockdev [ 264.493241][T10683] /dev/rnullb0: Can't open blockdev [ 264.516491][T10683] /dev/rnullb0: Can't open blockdev [ 264.522446][T10683] /dev/rnullb0: Can't open blockdev [ 264.531207][T10683] /dev/rnullb0: Can't open blockdev [ 264.538231][T10683] /dev/rnullb0: Can't open blockdev [ 264.544071][T10683] /dev/rnullb0: Can't open blockdev [ 264.552005][T10683] /dev/rnullb0: Can't open blockdev [ 264.558173][T10683] /dev/rnullb0: Can't open blockdev [ 264.563980][T10683] /dev/rnullb0: Can't open blockdev [ 264.571551][T10683] /dev/rnullb0: Can't open blockdev [ 264.578068][T10683] /dev/rnullb0: Can't open blockdev [ 266.353384][ T92] usb 3-1: Cannot set autoneg [ 266.362263][ T92] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 266.398270][ T92] usb 3-1: USB disconnect, device number 69 [ 266.719593][T10698] use of bytesused == 0 is deprecated and will be removed in the future, [ 266.757454][T10698] use the actual size instead. [ 266.874938][ T5947] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 267.048592][ T5947] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 267.070277][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.100886][ T5947] usb 1-1: Product: syz [ 267.116067][ T5947] usb 1-1: Manufacturer: syz [ 267.131751][ T5947] usb 1-1: SerialNumber: syz [ 267.153320][ T5947] usb 1-1: config 0 descriptor?? [ 267.504958][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 267.665320][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 267.675117][ T92] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 267.691372][ T9] usb 3-1: config 0 has an invalid interface number: 233 but max is 0 [ 267.708675][ T9] usb 3-1: config 0 has no interface number 0 [ 267.727529][ T9] usb 3-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 267.745147][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.763472][ T9] usb 3-1: Product: syz [ 267.773614][ T9] usb 3-1: Manufacturer: syz [ 267.783577][T10696] /dev/rnullb0: Can't open blockdev [ 267.795952][ T9] usb 3-1: SerialNumber: syz [ 267.812434][ T9] usb 3-1: config 0 descriptor?? [ 267.834065][ T9] io_ti 3-1:0.233: required endpoints missing [ 267.876235][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.900164][ T5947] mos7840 1-1:0.0: required endpoints missing [ 267.932100][ T5947] usb 1-1: USB disconnect, device number 50 [ 267.938790][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 267.990841][ T92] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.016258][T10712] /dev/rnullb0: Can't open blockdev [ 268.055546][ T9] usb 3-1: USB disconnect, device number 70 [ 268.065945][ T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.101753][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.138263][ T92] usb 4-1: SerialNumber: syz [ 268.163418][T10707] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.183768][ T92] hub 4-1:1.0: bad descriptor, ignoring hub [ 268.201394][ T92] hub 4-1:1.0: probe with driver hub failed with error -5 [ 268.388631][T10707] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.396068][ T5947] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 268.556576][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.569431][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.579733][ T5947] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 268.606208][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.628954][ T5947] usb 1-1: config 0 descriptor?? [ 268.670852][T10717] rdma_rxe: rxe_newlink: failed to add wlan1 [ 268.724991][ C1] net_ratelimit: 12322 callbacks suppressed [ 268.725009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.743331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.755658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.768026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.780319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.792732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.805056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.812668][ T92] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 268.817424][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.841061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.853484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.035069][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 269.135873][ T92] usb 4-1: USB disconnect, device number 78 [ 269.167238][ T92] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 269.209148][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.224981][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.235644][ T10] usb 3-1: Product: syz [ 269.239841][ T10] usb 3-1: Manufacturer: syz [ 269.245846][ T10] usb 3-1: SerialNumber: syz [ 269.274318][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.321948][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 269.867145][T10721] /dev/rnullb0: Can't open blockdev [ 269.947023][ T5908] usb 3-1: USB disconnect, device number 71 [ 270.886679][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 270.893733][ T9] ath9k_htc: Failed to initialize the device [ 272.093708][ T5908] usb 3-1: ath9k_htc: USB layer deinitialized [ 273.208230][ T5947] usbhid 1-1:0.0: can't add hid device: -71 [ 273.214585][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 273.248594][ T5947] usb 1-1: USB disconnect, device number 51 [ 273.351536][T10743] /dev/rnullb0: Can't open blockdev [ 273.376887][T10743] /dev/rnullb0: Can't open blockdev [ 273.594820][ C1] sched: DL replenish lagged too much [ 273.735076][ C1] net_ratelimit: 12141 callbacks suppressed [ 273.735094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.753287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.765715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.778024][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.790633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.802985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.816930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.820069][T10757] /dev/rnullb0: Can't open blockdev [ 273.829258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.846763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.859105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.182588][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.219983][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.246416][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.264202][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.283875][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.297730][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.316005][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.333688][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.360362][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.387431][ T9] hid-generic 01FF:0004:0C00.0015: unknown main item tag 0x0 [ 274.434923][ T5947] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 274.443204][ T9] hid-generic 01FF:0004:0C00.0015: hidraw0: HID v0.05 Device [syz0] on syz0 [ 274.614949][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 274.643948][ T5947] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 274.698253][ T5947] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.758143][ T5947] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.832638][ T5947] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.851632][T10783] /dev/rnullb0: Can't open blockdev [ 274.888812][ T5947] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.944428][ T5947] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.973713][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.004206][ T30] audit: type=1800 audit(1756666276.767:23): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1311" name="/newroot/310/bus/#1654//deleted" dev="tmpfs" ino=1654 res=0 errno=0 [ 275.243014][ T5947] usb 4-1: GET_CAPABILITIES returned 0 [ 275.254860][ T5947] usbtmc 4-1:16.0: can't read capabilities [ 275.919253][ T5928] usb 4-1: USB disconnect, device number 79 [ 277.015490][ T5947] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 277.167578][ T5947] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 277.177306][ T5947] usb 6-1: config 6 has an invalid descriptor of length 245, skipping remainder of the config [ 277.202298][ T5947] usb 6-1: config 6 has no interface number 0 [ 277.216775][ T5947] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.244196][ T5947] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 277.272636][ T5947] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 277.299030][ T5947] usb 6-1: Product: syz [ 277.306829][ T5947] usb 6-1: Manufacturer: syz [ 277.311443][ T5947] usb 6-1: SerialNumber: syz [ 277.430021][T10814] /dev/rnullb0: Can't open blockdev [ 277.479701][T10817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1322'. [ 277.558214][ T5947] hso 6-1:6.2: Failed to find INT IN ep [ 277.580137][ T5947] usb 6-1: USB disconnect, device number 80 [ 277.885463][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 278.035946][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 278.054412][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 278.067955][ T9] usb 1-1: can't read configurations, error -61 [ 278.204965][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 278.366514][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 278.400092][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 278.420837][ T9] usb 1-1: can't read configurations, error -61 [ 278.435597][ T9] usb usb1-port1: attempt power cycle [ 278.664938][ T5947] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 278.745051][ C1] net_ratelimit: 12472 callbacks suppressed [ 278.745069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.763383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.777866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.778633][T10842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1329'. [ 278.790231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.800731][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 278.811176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.830701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.843155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.855552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.857343][T10842] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1329'. [ 278.868035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.888582][ T5947] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 278.888957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.912117][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 278.921011][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.943008][ T5947] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 278.952957][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 278.969567][ T9] usb 1-1: can't read configurations, error -61 [ 278.985932][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.999743][ T5947] usb 3-1: config 0 descriptor?? [ 279.019195][T10833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 279.114893][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 279.136465][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 279.159416][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 279.219031][ T9] usb 1-1: can't read configurations, error -61 [ 279.290178][ T9] usb usb1-port1: unable to enumerate USB device [ 279.339365][ T5947] usbhid 3-1:0.0: can't add hid device: -71 [ 279.346770][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.363318][ T5947] usb 3-1: USB disconnect, device number 72 [ 280.051488][T10854] /dev/rnullb0: Can't open blockdev [ 280.518539][T10859] binder: 10858:10859 ioctl 81009431 200000000140 returned -22 [ 280.847494][ T5928] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 280.918370][T10861] /dev/rnullb0: Can't open blockdev [ 281.146971][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.189145][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.273054][ T5928] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.291852][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.339595][ T5928] usb 6-1: SerialNumber: syz [ 281.407134][T10876] /dev/rnullb0: Can't open blockdev [ 281.517346][T10878] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 281.556207][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 281.623271][T10889] /dev/rnullb0: Can't open blockdev [ 281.636077][T10889] /dev/rnullb0: Can't open blockdev [ 281.652769][T10889] /dev/rnullb0: Can't open blockdev [ 281.673813][T10889] /dev/rnullb0: Can't open blockdev [ 281.681455][T10889] /dev/rnullb0: Can't open blockdev [ 281.687808][T10889] /dev/rnullb0: Can't open blockdev [ 281.693693][T10889] /dev/rnullb0: Can't open blockdev [ 281.710001][T10889] /dev/rnullb0: Can't open blockdev [ 281.717010][T10889] /dev/rnullb0: Can't open blockdev [ 281.722767][T10889] /dev/rnullb0: Can't open blockdev [ 281.730305][T10889] /dev/rnullb0: Can't open blockdev [ 281.736995][T10889] /dev/rnullb0: Can't open blockdev [ 281.743872][T10889] /dev/rnullb0: Can't open blockdev [ 281.750178][T10889] /dev/rnullb0: Can't open blockdev [ 281.758890][T10889] /dev/rnullb0: Can't open blockdev [ 281.764601][T10889] /dev/rnullb0: Can't open blockdev [ 281.771056][T10889] /dev/rnullb0: Can't open blockdev [ 281.779324][T10889] /dev/rnullb0: Can't open blockdev [ 281.785597][T10889] /dev/rnullb0: Can't open blockdev [ 281.791307][T10889] /dev/rnullb0: Can't open blockdev [ 281.807702][T10889] /dev/rnullb0: Can't open blockdev [ 281.813431][T10889] /dev/rnullb0: Can't open blockdev [ 281.822669][T10889] /dev/rnullb0: Can't open blockdev [ 281.828883][T10889] /dev/rnullb0: Can't open blockdev [ 281.834649][T10889] /dev/rnullb0: Can't open blockdev [ 281.843859][T10889] /dev/rnullb0: Can't open blockdev [ 281.850108][T10889] /dev/rnullb0: Can't open blockdev [ 281.857126][T10889] /dev/rnullb0: Can't open blockdev [ 281.862924][T10889] /dev/rnullb0: Can't open blockdev [ 281.869587][T10889] /dev/rnullb0: Can't open blockdev [ 281.878706][T10889] /dev/rnullb0: Can't open blockdev [ 281.886396][T10889] /dev/rnullb0: Can't open blockdev [ 281.892131][T10889] /dev/rnullb0: Can't open blockdev [ 282.036081][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 282.052425][T10900] wlan1 speed is unknown, defaulting to 1000 [ 282.195058][ T5947] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 282.207548][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 282.220150][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 282.229987][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 282.240631][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.254097][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.272170][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.281141][ T9] usb 3-1: Product: syz [ 282.285911][ T9] usb 3-1: Manufacturer: syz [ 282.290509][ T9] usb 3-1: SerialNumber: syz [ 282.354946][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 282.362437][ T5947] usb 4-1: config 142 has an invalid descriptor of length 220, skipping remainder of the config [ 282.375455][ T5947] usb 4-1: config 142 has 0 interfaces, different from the descriptor's value: 1 [ 282.389466][ T5947] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 282.399114][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=152, SerialNumber=26 [ 282.404048][ T5928] usb 6-1: 0:2 : does not exist [ 282.425252][ T5947] usb 4-1: Product: syz [ 282.425270][ T5947] usb 4-1: Manufacturer: syz [ 282.425284][ T5947] usb 4-1: SerialNumber: syz [ 282.461106][T10903] /dev/rnullb0: Can't open blockdev [ 282.516905][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.602626][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.619174][ T5928] usb 6-1: USB disconnect, device number 81 [ 283.505647][ T5947] usb 4-1: USB disconnect, device number 80 [ 283.755092][ C1] net_ratelimit: 12042 callbacks suppressed [ 283.755114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.773415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.786310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.798722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.811247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.823640][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.836091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.848445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.860897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.873252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.053192][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.434257][T10909] /dev/rnullb0: Can't open blockdev [ 285.933861][T10913] /dev/rnullb0: Can't open blockdev [ 286.120574][ T9] usb 3-1: 0:2 : does not exist [ 286.224553][ T9] usb 3-1: USB disconnect, device number 73 [ 286.318012][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.380423][T10920] /dev/rnullb0: Can't open blockdev [ 286.456432][ T5947] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 286.627391][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 286.644253][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.660867][ T5947] usb 4-1: can't read configurations, error -61 [ 286.805388][ T5947] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 286.967640][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 286.978189][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.992464][ T5947] usb 4-1: can't read configurations, error -61 [ 287.027252][ T5947] usb usb4-port1: attempt power cycle [ 287.077564][T10945] /dev/rnullb0: Can't open blockdev [ 287.174646][T10947] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 287.216695][T10947] macvlan1: entered allmulticast mode [ 287.227293][T10947] veth1_vlan: entered allmulticast mode [ 287.244203][T10947] team0: Port device macvlan1 added [ 287.391398][ T5947] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 287.419652][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 287.428984][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 287.437909][T10955] /dev/rnullb0: Can't open blockdev [ 287.448988][ T5947] usb 4-1: can't read configurations, error -61 [ 287.595248][ T5947] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 287.637377][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 287.650404][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 287.662236][ T5947] usb 4-1: can't read configurations, error -61 [ 287.681132][ T5947] usb usb4-port1: unable to enumerate USB device [ 288.301044][T10974] /dev/rnullb0: Can't open blockdev [ 288.765143][ C1] net_ratelimit: 12525 callbacks suppressed [ 288.765163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.783399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.796072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.808487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.820786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.833134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.845432][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.857817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.870087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.882472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.276295][ T5908] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 289.547318][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 289.562208][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 289.615060][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.629882][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.654868][ T5908] usb 4-1: Product: 폙짧埀鰵獞鍘㤠㩗ᠦ먋՟귀腝㻄៓筺儃䌊琽鄐燙䷎뷁顿衒 [ 289.699626][ T5908] usb 4-1: Manufacturer: ဠ [ 289.720493][ T5908] usb 4-1: SerialNumber: င [ 289.779772][T10982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.812254][T10993] /dev/rnullb0: Can't open blockdev [ 290.003760][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.038332][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.061168][T10982] IPVS: set_ctl: invalid protocol: 51 172.30.1.4:20001 [ 290.302327][ T5908] cdc_ncm 4-1:1.0: bind() failure [ 290.353509][ T5908] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 290.378062][ T5908] cdc_ncm 4-1:1.1: bind() failure [ 290.393434][ T5908] usb 4-1: USB disconnect, device number 85 [ 290.409387][T11010] rdma_rxe: rxe_newlink: failed to add wlan1 [ 290.469152][T11010] /dev/rnullb0: Can't open blockdev [ 290.623811][ T30] audit: type=1326 audit(1756666292.387:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.2.1380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d58f8ebe9 code=0x0 [ 291.006061][ T5908] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 291.168960][ T5908] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 291.181316][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.200561][ T5947] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 291.224097][ T5908] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.246809][ T5908] usb 3-1: config 1 has no interface number 1 [ 291.259245][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 291.302484][ T5908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.318981][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.327426][ T5908] usb 3-1: Product: syz [ 291.331591][ T5908] usb 3-1: Manufacturer: syz [ 291.337684][ T5908] usb 3-1: SerialNumber: syz [ 291.377603][ T5947] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 291.386041][ T5947] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 291.403806][ T5947] usb 4-1: config 8 has no interface number 0 [ 291.412483][ T5947] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 291.427694][ T5947] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.449784][ T5947] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 291.469070][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.478646][ T5947] usb 4-1: Product: syz [ 291.482845][ T5947] usb 4-1: Manufacturer: syz [ 291.489009][ T5947] usb 4-1: SerialNumber: syz [ 291.557716][T11018] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 291.564770][T11018] /dev/rnullb0: Can't open blockdev [ 291.719462][ T5947] usb 4-1: USB disconnect, device number 86 [ 292.170348][T11033] comedi comedi4: bad chanlist[0]=0x00080002 chan=2 range length=2 [ 292.481580][T11036] syzkaller1: entered promiscuous mode [ 292.517005][T11036] syzkaller1: entered allmulticast mode [ 293.146960][T11047] /dev/rnullb0: Can't open blockdev [ 293.242454][T11053] /dev/rnullb0: Can't open blockdev [ 293.463086][T11060] /dev/sg0: Can't lookup blockdev [ 293.678933][ T5908] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 293.709243][ T5908] usb 3-1: MIDIStreaming interface descriptor not found [ 293.774889][ C1] net_ratelimit: 11736 callbacks suppressed [ 293.774906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.793318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.805721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.818257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.825804][ T5908] usb 3-1: USB disconnect, device number 74 [ 293.830630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.848529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.860862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.873314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.885705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.898202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.951590][T11071] /dev/rnullb0: Can't open blockdev [ 294.345072][ T5908] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 294.414925][ T5947] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 294.524967][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 294.537569][ T5908] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 294.550846][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 294.560138][ T5908] usb 6-1: Product: syz [ 294.564510][ T5908] usb 6-1: Manufacturer: syz [ 294.570511][ T5908] usb 6-1: SerialNumber: syz [ 294.578284][ T5947] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 294.591744][ T5908] usb 6-1: config 0 descriptor?? [ 294.597217][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.609344][ T5947] usb 3-1: Product: syz [ 294.614694][ T5908] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 294.624545][ T5947] usb 3-1: Manufacturer: syz [ 294.630712][ T5947] usb 3-1: SerialNumber: syz [ 294.638298][ T5947] usb 3-1: config 0 descriptor?? [ 294.830748][T11072] /dev/rnullb0: Can't open blockdev [ 294.868880][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.884253][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.894163][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.906990][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.918311][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.928275][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.950631][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.960996][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.980303][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.997467][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.022432][ T5947] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 295.048697][ T5947] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 295.069246][ T5947] usb 3-1: USB disconnect, device number 75 [ 295.210717][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 295.257509][ T1117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.707909][ T5908] usb 6-1: USB disconnect, device number 82 [ 295.804929][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 295.955163][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 295.962564][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 295.979073][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 295.988663][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 295.997927][ T9] usb 4-1: Product: syz [ 296.002302][ T9] usb 4-1: Manufacturer: syz [ 296.007491][ T9] usb 4-1: SerialNumber: syz [ 296.234086][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 296.243381][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 296.257342][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 298.784912][ C0] net_ratelimit: 26525 callbacks suppressed [ 298.784931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 298.785029][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.791078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 298.803194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.815104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 298.827214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.839007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 298.851133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.863017][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 298.875094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.862898][ T9] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 303.794887][ C1] net_ratelimit: 37635 callbacks suppressed [ 303.794907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.794926][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 303.801246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.813112][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 303.825388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.837082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 303.849307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.861110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 303.873305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.885114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 308.804937][ C1] net_ratelimit: 38377 callbacks suppressed [ 308.804957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.804986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 308.811237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.823079][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 308.835212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.847086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 308.859108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.870943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 308.882998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.894930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 313.814820][ C0] net_ratelimit: 38274 callbacks suppressed [ 313.814840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 313.815033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.821006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 313.833141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.844940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 313.856969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.868851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 313.880917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.892794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 313.904838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.376123][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.303794][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.824863][ C1] net_ratelimit: 38511 callbacks suppressed [ 318.824873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 318.824882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.825207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.831043][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 318.843093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.854886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 318.867089][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.878916][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 318.890952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.903119][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 323.834833][ C0] net_ratelimit: 36181 callbacks suppressed [ 323.834833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.834851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 323.841214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.853025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 323.865557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.876875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 323.889064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.900874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 323.913385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.924672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.844914][ C0] net_ratelimit: 32114 callbacks suppressed [ 328.844914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.844934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.851303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.863086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 328.875706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.886996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.899198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.911009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 328.923647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.934967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.854845][ C0] net_ratelimit: 33115 callbacks suppressed [ 333.854846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.854862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.860997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.872945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 333.884825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.896835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.909635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.920735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 333.932941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.944984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.996726][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 338.864895][ C0] net_ratelimit: 37151 callbacks suppressed [ 338.864914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 338.865442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.871093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 338.883132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.895014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 338.906894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.918918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 338.930682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.942751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 338.955485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.874954][ C0] net_ratelimit: 38013 callbacks suppressed [ 343.874974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 343.875287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.881120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.893314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.905153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 343.917056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.929044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.940968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.953031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 343.965508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.884958][ C0] net_ratelimit: 37049 callbacks suppressed [ 348.884982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.885167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.891138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 348.903487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.915127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.927108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.939108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 348.950933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.963009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.975611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.894969][ C0] net_ratelimit: 36445 callbacks suppressed [ 353.894989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 353.895400][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.901140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.913330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.925140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 353.936968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.948955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.960856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.972913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 353.985462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.904928][ C0] net_ratelimit: 36238 callbacks suppressed [ 358.904947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.905032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.911062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 358.922937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.934946][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.946831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.958944][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 358.971397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.982684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.994844][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.914804][ C0] net_ratelimit: 36822 callbacks suppressed [ 363.914824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.914879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.921050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 363.933508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.945143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.957110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.968913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 363.981039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.993046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.004972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.924911][ C1] net_ratelimit: 37045 callbacks suppressed [ 368.924930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.924970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.931033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.943098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 368.955564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.966931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.979095][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.990928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 369.002724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.014739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.934803][ C0] net_ratelimit: 36677 callbacks suppressed [ 373.934823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 373.935359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.940972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.953171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.964989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 373.976814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.988832][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.000736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.012804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 374.025384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.944824][ C0] net_ratelimit: 36199 callbacks suppressed [ 378.944836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.944844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 378.945039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.951573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.963012][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 378.975144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.986894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.998807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.010899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 379.022687][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.736250][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.992614][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.954811][ C0] net_ratelimit: 36538 callbacks suppressed [ 383.954831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 383.955019][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.960987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.972934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.984941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 383.996742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.008857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.021389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.032945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 384.044800][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.964796][ C1] net_ratelimit: 36675 callbacks suppressed [ 388.964816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.964928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 388.971566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.982949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 388.995123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.006961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.018836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.030832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 389.042686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.054787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.974885][ C0] net_ratelimit: 36757 callbacks suppressed [ 393.974906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 393.974975][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.981051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.992986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.005011][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 394.016830][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.028899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 394.041422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.052923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 394.065050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.984814][ C0] net_ratelimit: 36823 callbacks suppressed [ 398.984834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 398.985112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.991001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 399.002863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.014871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.026769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.038976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 399.051570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.062809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.075003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.994939][ C0] net_ratelimit: 36655 callbacks suppressed [ 403.994960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.995288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.001124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 404.013276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.025084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.037075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.049122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 404.060936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.073096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.085817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.004934][ C0] net_ratelimit: 36084 callbacks suppressed [ 409.004961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.005516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.011140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 409.023288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.035126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.047043][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.059010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 409.070900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.082963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.096251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.014829][ C0] net_ratelimit: 37265 callbacks suppressed [ 414.014851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 414.014915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.020987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.032953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.044998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 414.057496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.068866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.081041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.092876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 414.104906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.024938][ C1] net_ratelimit: 35531 callbacks suppressed [ 419.024948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.024957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.025334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.031152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 419.043045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.055127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.066923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.079061][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 419.091706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.103012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.034798][ C1] net_ratelimit: 35949 callbacks suppressed [ 424.034819][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.034893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 424.041142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.052991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.064990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.076951][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 424.088796][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.100864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.113425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.124729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 425.484768][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 425.491731][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6888/1:b..l [ 425.499671][ C0] rcu: (detected by 0, t=10503 jiffies, g=51769, q=191093 ncpus=2) [ 425.507653][ C0] task:syz-executor state:R running task stack:21032 pid:6888 tgid:6888 ppid:6875 task_flags:0x400140 flags:0x00004002 [ 425.521133][ C0] Call Trace: [ 425.524407][ C0] [ 425.527334][ C0] __schedule+0x1798/0x4cc0 [ 425.531847][ C0] ? unwind_next_frame+0xa5/0x2390 [ 425.536957][ C0] ? unwind_next_frame+0xa5/0x2390 [ 425.542067][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.547363][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.552126][ C0] ? __pfx___schedule+0x10/0x10 [ 425.556978][ C0] ? unwind_next_frame+0xa5/0x2390 [ 425.562087][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 425.567278][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.572036][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.576795][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.581559][ C0] preempt_schedule_irq+0xb5/0x150 [ 425.586755][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 425.592475][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.597235][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 425.603038][ C0] irqentry_exit+0x6f/0x90 [ 425.607459][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.613437][ C0] RIP: 0010:unwind_next_frame+0x1853/0x2390 [ 425.619336][ C0] Code: 43 7f b0 00 4d 8b 6e 08 4d 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 26 7f b0 00 49 8b 07 4d 39 e5 0f 96 c1 <4c> 39 e0 0f 97 c2 20 ca 80 fa 01 0f 85 63 01 00 00 49 8d 4c 24 08 [ 425.638942][ C0] RSP: 0018:ffffc90002fa73b8 EFLAGS: 00000287 [ 425.645014][ C0] RAX: ffffc90002fa8000 RBX: ffffffff9083dc01 RCX: 0000000000000001 [ 425.652984][ C0] RDX: ffffc90002fa74c8 RSI: dffffc0000000000 RDI: ffffc90002fa7490 [ 425.661043][ C0] RBP: dffffc0000000000 R08: ffffc90002fa7730 R09: 0000000000000000 [ 425.669014][ C0] R10: ffffc90002fa74d8 R11: fffff520005f4e9d R12: ffffc90002fa7740 [ 425.676985][ C0] R13: ffffc90002fa0000 R14: ffffc90002fa7488 R15: ffffc90002fa7498 [ 425.684961][ C0] ? unwind_next_frame+0x17c4/0x2390 [ 425.690253][ C0] ? unwind_next_frame+0xa5/0x2390 [ 425.695364][ C0] ? __reset_page_owner+0x71/0x1f0 [ 425.700475][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.706630][ C0] arch_stack_walk+0x11c/0x150 [ 425.711394][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 425.716678][ C0] stack_trace_save+0x9c/0xe0 [ 425.721353][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 425.726725][ C0] save_stack+0xf5/0x1f0 [ 425.730970][ C0] ? __pfx_save_stack+0x10/0x10 [ 425.735826][ C0] ? lock_release+0x4b/0x3e0 [ 425.740612][ C0] ? page_ext_get+0x22/0x2f0 [ 425.745212][ C0] __reset_page_owner+0x71/0x1f0 [ 425.750153][ C0] __free_frozen_pages+0xbc4/0xd30 [ 425.755280][ C0] __slab_free+0x2e7/0x390 [ 425.759701][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.765592][ C0] ? __phys_addr+0xd3/0x180 [ 425.770097][ C0] qlist_free_all+0x97/0x140 [ 425.774687][ C0] kasan_quarantine_reduce+0x148/0x160 [ 425.780143][ C0] __kasan_kmalloc+0x22/0xb0 [ 425.784730][ C0] __kmalloc_noprof+0x266/0x4b0 [ 425.789576][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 425.795298][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 425.800844][ C0] ? tomoyo_domain+0xd9/0x130 [ 425.805519][ C0] tomoyo_path_perm+0x213/0x4b0 [ 425.810370][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 425.815387][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 425.820770][ C0] ? __might_fault+0xb0/0x130 [ 425.825451][ C0] security_inode_getattr+0x12f/0x330 [ 425.830827][ C0] vfs_statx+0x18e/0x550 [ 425.835065][ C0] ? __might_fault+0xb0/0x130 [ 425.839744][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 425.844502][ C0] ? strncpy_from_user+0x150/0x290 [ 425.849614][ C0] ? getname_flags+0x1e5/0x540 [ 425.854397][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.859771][ C0] vfs_fstatat+0x118/0x170 [ 425.864190][ C0] __x64_sys_newfstatat+0x116/0x190 [ 425.869387][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 425.875200][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.879964][ C0] ? rcu_is_watching+0x15/0xb0 [ 425.884725][ C0] do_syscall_64+0xfa/0xfa0 [ 425.889227][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.895291][ C0] ? clear_bhb_loop+0x60/0xb0 [ 425.899974][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.905876][ C0] RIP: 0033:0x7f269f58d3fa [ 425.910297][ C0] RSP: 002b:00007ffd23d9f668 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 425.918730][ C0] RAX: ffffffffffffffda RBX: 00007f269f611c05 RCX: 00007f269f58d3fa [ 425.926868][ C0] RDX: 00007ffd23d9f690 RSI: 00007ffd23d9f720 RDI: 00000000ffffff9c [ 425.934816][ C0] RBP: 00007ffd23d9f720 R08: 0000000000000000 R09: 0000000000000000 [ 425.942768][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd23da07b0 [ 425.950728][ C0] R13: 00007f269f611c05 R14: 000000000004863f R15: 00007ffd23da07f0 [ 425.958688][ C0] [ 425.961694][ C0] rcu: rcu_preempt kthread starved for 944 jiffies! g51769 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 425.972701][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 425.982779][ C0] rcu: RCU grace-period kthread stack dump: [ 425.988756][ C0] task:rcu_preempt state:R running task stack:27464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 426.002240][ C0] Call Trace: [ 426.005540][ C0] [ 426.008469][ C0] __schedule+0x1798/0x4cc0 [ 426.012983][ C0] ? rcu_is_watching+0x15/0xb0 [ 426.017755][ C0] ? __pfx___schedule+0x10/0x10 [ 426.022605][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 426.028496][ C0] ? schedule+0x91/0x360 [ 426.032738][ C0] ? rcu_is_watching+0x15/0xb0 [ 426.037506][ C0] ? lock_release+0x4b/0x3e0 [ 426.042097][ C0] schedule+0x165/0x360 [ 426.046309][ C0] schedule_timeout+0x12b/0x270 [ 426.051180][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 426.056558][ C0] ? rcu_is_watching+0x15/0xb0 [ 426.061322][ C0] ? __pfx_process_timeout+0x10/0x10 [ 426.066610][ C0] ? prepare_to_swait_event+0x341/0x380 [ 426.072158][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 426.077098][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 426.083266][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 426.088551][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 426.093753][ C0] rcu_gp_kthread+0x99/0x390 [ 426.098344][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 426.103540][ C0] ? __kthread_parkme+0x7b/0x200 [ 426.108474][ C0] ? __kthread_parkme+0x1a1/0x200 [ 426.113508][ C0] kthread+0x711/0x8a0 [ 426.117588][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 426.122786][ C0] ? __pfx_kthread+0x10/0x10 [ 426.127380][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 426.132582][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.137779][ C0] ? __pfx_kthread+0x10/0x10 [ 426.142368][ C0] ret_from_fork+0x47c/0x820 [ 426.146962][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 426.152075][ C0] ? __switch_to_asm+0x39/0x70 [ 426.156836][ C0] ? __switch_to_asm+0x33/0x70 [ 426.161593][ C0] ? __pfx_kthread+0x10/0x10 [ 426.166182][ C0] ret_from_fork_asm+0x1a/0x30 [ 426.170948][ C0] [ 426.173967][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 426.180295][ C0] Sending NMI from CPU 0 to CPUs 1: [ 426.185508][ C1] NMI backtrace for cpu 1 [ 426.185531][ C1] CPU: 1 UID: 0 PID: 9085 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 426.185567][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.185588][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 426.185627][ C1] RIP: 0010:trace_kmem_cache_alloc+0xe/0xc0 [ 426.185656][ C1] Code: fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 90 65 8b 05 db 35 cc 10 83 f8 08 73 24 <89> c0 48 0f a3 05 c8 a2 cb 0d 73 12 e8 71 fb 8d ff 84 c0 75 09 f6 [ 426.185669][ C1] RSP: 0018:ffffc90000a08078 EFLAGS: 00000297 [ 426.185681][ C1] RAX: 0000000000000001 RBX: ffff888178ecb500 RCX: 0000000000000820 [ 426.185691][ C1] RDX: ffff888140ed5a00 RSI: ffff888178ecb500 RDI: ffffffff8966bb82 [ 426.185702][ C1] RBP: 00000000ffffffff R08: 00000000ffffffff R09: 0000000000000000 [ 426.185711][ C1] R10: ffff888178ecb500 R11: ffffffff81ad6180 R12: 00000000000000f0 [ 426.185722][ C1] R13: ffff888178ecb500 R14: 0000000000000820 R15: ffff888140ed5a00 [ 426.185733][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 426.185745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.185755][ C1] CR2: 0000001b32c24224 CR3: 0000000033c52000 CR4: 00000000003526f0 [ 426.185768][ C1] Call Trace: [ 426.185773][ C1] [ 426.185779][ C1] kmem_cache_alloc_node_noprof+0x203/0x390 [ 426.185798][ C1] ? __alloc_skb+0x112/0x2d0 [ 426.185817][ C1] __alloc_skb+0x112/0x2d0 [ 426.185834][ C1] fdb_notify+0xa6/0x160 [ 426.185850][ C1] br_fdb_update+0x4c8/0x690 [ 426.185865][ C1] ? arch_stack_walk+0x11c/0x150 [ 426.185883][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 426.185903][ C1] br_handle_frame_finish+0x573/0x19b0 [ 426.185920][ C1] ? stack_depot_save_flags+0x40/0x860 [ 426.185941][ C1] ? kasan_save_track+0x3e/0x80 [ 426.185958][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 426.185976][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 426.185993][ C1] ? br_handle_frame+0x982/0x14c0 [ 426.186011][ C1] ? __netif_receive_skb+0x72/0x380 [ 426.186025][ C1] ? process_backlog+0x60e/0x14f0 [ 426.186040][ C1] ? __napi_poll+0xc4/0x360 [ 426.186054][ C1] ? handle_softirqs+0x283/0x870 [ 426.186069][ C1] ? do_softirq+0xec/0x180 [ 426.186082][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 426.186097][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 426.186111][ C1] ? worker_thread+0x8a0/0xda0 [ 426.186125][ C1] ? kthread+0x711/0x8a0 [ 426.186140][ C1] ? ret_from_fork+0x310/0x820 [ 426.186155][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 426.186172][ C1] ? nf_hook_slow+0x176/0x220 [ 426.186190][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 426.186208][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 426.186229][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 426.186245][ C1] ? net_generic+0x1e/0x240 [ 426.186263][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 426.186281][ C1] ? lock_release+0x4b/0x3e0 [ 426.186298][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 426.186317][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 426.186338][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 426.186357][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 426.186377][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 426.186397][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 426.186415][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 426.186435][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 426.186454][ C1] br_handle_frame+0x982/0x14c0 [ 426.186474][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 426.186493][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 426.186518][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 426.186533][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.186550][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 426.186568][ C1] __netif_receive_skb_core+0x10b9/0x4020 [ 426.186586][ C1] ? ip6_input+0x226/0x270 [ 426.186603][ C1] ? ip6_mc_input+0x5c8/0xaf0 [ 426.186621][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 426.186637][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 426.186653][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 426.186669][ C1] ? NF_HOOK+0x309/0x3a0 [ 426.186684][ C1] ? skb_orphan+0xaf/0xd0 [ 426.186699][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 426.186714][ C1] ? NF_HOOK+0x9a/0x3a0 [ 426.186729][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 426.186745][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 426.186761][ C1] ? process_backlog+0x2d5/0x14f0 [ 426.186777][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.186792][ C1] ? lock_acquire+0x5f/0x360 [ 426.186806][ C1] __netif_receive_skb+0x72/0x380 [ 426.186823][ C1] ? process_backlog+0x2d5/0x14f0 [ 426.186839][ C1] process_backlog+0x60e/0x14f0 [ 426.186860][ C1] ? __pfx_process_backlog+0x10/0x10 [ 426.186876][ C1] ? get_jiffies_update+0x44/0x140 [ 426.186895][ C1] __napi_poll+0xc4/0x360 [ 426.186909][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.186925][ C1] net_rx_action+0x707/0xe30 [ 426.186941][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.186961][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 426.186989][ C1] handle_softirqs+0x283/0x870 [ 426.187005][ C1] ? do_softirq+0xec/0x180 [ 426.187021][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 426.187038][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 426.187053][ C1] do_softirq+0xec/0x180 [ 426.187067][ C1] [ 426.187072][ C1] [ 426.187078][ C1] ? __pfx_do_softirq+0x10/0x10 [ 426.187091][ C1] ? devlink_trap_report+0x216/0x6a0 [ 426.187109][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.187124][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 426.187139][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 426.187155][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 426.187173][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 426.187189][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 426.187210][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 426.187226][ C1] process_scheduled_works+0xae1/0x17b0 [ 426.187250][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.187271][ C1] worker_thread+0x8a0/0xda0 [ 426.187290][ C1] ? __kthread_parkme+0x7b/0x200 [ 426.187310][ C1] kthread+0x711/0x8a0 [ 426.187327][ C1] ? __pfx_worker_thread+0x10/0x10 [ 426.187342][ C1] ? __pfx_kthread+0x10/0x10 [ 426.187359][ C1] ? rcu_is_watching+0x15/0xb0 [ 426.187374][ C1] ? __pfx_kthread+0x10/0x10 [ 426.187391][ C1] ret_from_fork+0x47c/0x820 [ 426.187406][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 426.187424][ C1] ? __switch_to_asm+0x39/0x70 [ 426.187438][ C1] ? __switch_to_asm+0x33/0x70 [ 426.187451][ C1] ? __pfx_kthread+0x10/0x10 [ 426.187468][ C1] ret_from_fork_asm+0x1a/0x30 [ 426.187488][ C1] [ 429.044951][ C0] net_ratelimit: 28946 callbacks suppressed [ 429.044978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.045009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.051140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 429.063064][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.075106][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.087051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.099094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 429.111635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.122925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.135123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.054852][ C0] net_ratelimit: 30192 callbacks suppressed [ 434.054873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 434.054920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.061001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.073259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.085039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 434.096851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.108839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.120775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.132840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:33:78:37:1f:03, vlan:0) [ 434.145333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)