last executing test programs: 16m50.071220054s ago: executing program 3 (id=2549): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x42) 16m49.971708411s ago: executing program 3 (id=2550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000004580)=[{&(0x7f0000000400)="c836", 0x2}], 0x1}}], 0x2, 0x4044805) 16m49.757877278s ago: executing program 3 (id=2552): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000080)={0x18, r3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r8, 0x5405, 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000001640), 0x0, 0x14000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180", @ANYRES16=0x0], 0x18}}, 0x8810) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6104000000000000000000000300000000960400000000000000000000000002080000694600000000000072791c42551bcf1500"/72], 0x48) 16m45.974384124s ago: executing program 3 (id=2558): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000021c0)='./file0\x00', 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x20, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) write$cgroup_int(r1, &(0x7f00000000c0)=0x202, 0x12) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x48080, &(0x7f0000000240)={0xa, 0x4e0f, 0x6, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x5, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaccaa0180c20000000800450000240000000000119078000000000000000000404e2000109078a200000000000000c0908c2ca392cc2d4f4e79b45207f1b3b7ed14f0026e419870dc0bf8b1bff6c5bc5dc1a957865c498847eedd0df84df5054dc6f3c03a716f90b066bee7343919ddef18235ad37a2b175d40c46e601f4503e8fa8b"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4084) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ipv6_route\x00') close_range(r8, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000400)={0x0, @vbi={0x0, 0x8, 0xcb, 0x0, [0x68, 0x1], [0xff, 0x4], 0x1}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m45.352875065s ago: executing program 3 (id=2564): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800000108000200ac1e00010c000280050001"], 0x64}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000680)=""/4122, &(0x7f0000000000)=0x101a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) 16m45.11084518s ago: executing program 3 (id=2566): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 16m44.72346421s ago: executing program 32 (id=2566): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 16m13.513933751s ago: executing program 5 (id=2719): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@generic={0x2, "59f50bd02a19b4b6e54d3839d726507394996fc3eb0609498d8191a69f18cc3b19ea427d73357aa9234b837b4f27cb158045cd8ddd5937fd671ecbc0188fe7cdc79f7f82b412fdf75ce4c90122b05776730b174ae8e8bc0f623344a3b1c5b84c6dfdc3b19cce27ac2890d7658d948129ab0c33c1fb2c0401cdf7753960b1"}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="2343be60b93a5e4c507384d9fa6b0e8507e6faf3796b70d6569663b80fa54c685d449611509669912ca0368ec53ee8bfbf5a4eaaecb6c14aa946b88e6c57957392afe2965c54264a98aebf4243588227a4c89fca8f428abc7b8318bff5d28f04ed41dbfaa780242cfa7d9d4ede0e749b7992462bb8c1e9aa167c8bf704c367ba7b8b9ab71f46f2f8b61a0043e116fd612a8a1192992814ed7e5d50dbdb03c690a5baaf12a271cc29ed2333d4a9ac2b3798da575eb4b25ddb4c4c", 0xba}, {&(0x7f0000000140)="20c4d941963c7c4046ddaf333ed150c9427eb5bbf9c7f6079582fa7abc7fb4856b861839e075f56afdb7206400271e2ee4cf93bfed98b739664b1a7a58e6d3dff5e59d73f1de881111c9eacfde9b030ef3e77373c340f9a928b75b5b7c3bca6e71a4e9e27780d2f19923a89c2e7ed098ce7ab6d497695858cf4807d45c18b87ff67a4d98935e41c95bd0dedb37802ab9ba6dacf19c715ea76d620bf7f734a2e52911ce9f348d154110e3f8f693def28b8ae44e238cfbc4ac19c77873b0f95d14dce6b36825b3726e3415921bdcc9e4559d93c80b88a2ef67d48d3fcbbbfdfe93e3", 0xe1}, {&(0x7f0000000240)="48b4d2932e1bce1a9ba95ae6e37a2fead125ed470f3600d8329e461d061ec0902601d6a5f0f8b696", 0x28}, {&(0x7f0000000280)="e763826e186fd750ccfe1a1535bdf6e2aabe4e4ee0d4ad7edc54cdbcd1a00cf2", 0x20}, {&(0x7f00000002c0)="4a043feabe83ec8e5ebf7ccd623719264c06f56842db85e9c769a223fc5324c2737acc28dbef2fdd89025fc669caad72692885c137568df1b97d0bd4b13d7a88eed2cb33903425ddc65961e6ca3e95912b53a3bf1580e9a7ae9469dd42638b293c49c4985f0fc1d1093e8df596cd347591efb0fc2b9906b9b27e7cd12f0df4ae18b499280681b2e73a8e594cee98d7f24192b99d4b5b15aaf418aa3fbf9cfd9ba60db7cf9f29307fbfd8d36a363beb112577ed1fff448e1e25ed8afd4156160aad56c71244141eea9652335b9e2d76e76870c6cbcd6e6c3c317d", 0xda}, {&(0x7f00000003c0)="5592a29753d752b9988e9a0f33210efbe34e1efdfab227f697bff7d0303500d8f9a71f79d9f26747a7f0424c19227be8f50faf8005b3528c2f4f157c82f351770f6250be265e531df539603514b687041c17fe0309b7496922cdde11c7d4b08fab49632e63f07cc8cdd9886c76fcc0591dc493c2ce47c19e8dec4641c7", 0x7d}], 0x6}}, {{&(0x7f00000004c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)="7b3cbd374929", 0x6}, {&(0x7f0000000580)="4ca971d8aba1e8da900389b4a8e8552faaa6535161152fb9463fa1b1dd9190356b19a0a45a8368", 0x27}, {&(0x7f00000005c0)="bc128ec7d9fc11f51ba31c7f503162beb5164a34396bf899fbf90e5af658fd24f1a99702c1e84cc76ca699161d222de26a68e4a9e1e3dc5455f816e1293126e62911c40bf46b8b77e635e4b0e176d395593b450bbd0649c1eead20b6ebfd066399771729869ca28eca25fec28b2e3494bb023547c18dc4fb76c2bf5de8c27c62cc703e9a512ba19a9b654fedaf203a6e7e2d22e1e52734f80deeeff74b0bd66f689e851673e10815683ce213cebeb65a4df9974403116e591d9b955a0c83ef0979f80f9702b805448a1c4a06be94e3b62ed5592f46812d367d65936dc32a7790e1fabda4", 0xe4}], 0x3, &(0x7f0000000700)=[{0xe8, 0x3a, 0x95e, "6e16670034440adf20036b84b929a0af5dc4c5a03f7e6bb4e54ed769794e3ee16a981292dfc252b1e92e73c64adf5393f8d2cb085acc034de8ecefcb59663a86b3be14e6cd26591792ee523ad61981994309ea5e073c33a53b761fbfbd1b5357c491b7e68d9129fc5b21366f92f5e152c28ca673f16e6cf98a5633424faa9c8e17a69be61ce94bec4d896f8baac5af8b0fd4d2d919605812914361a9d8b4d8af611cf90f06d897cc63309d8f0020c575b837e1cc87a8fd22185907babd869c80c99ad8a0d45f0d1349cf96b0016d727136"}], 0xe8}}, {{&(0x7f0000000840)=@nfc={0x27, r1, 0x0, 0x7}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="7f93808d999f236fde9ba8234b2e93a8e0fec65bb3bf2609b6", 0x19}, {&(0x7f0000000900)="b13defa4152b81c1ebdf35d9bcb080dbe15d89484dec6ff61e62528c85bf323464638576a2a057ccc6918e5fe2e4582c26ebab10737c80bb447b3ce0056deb2878ef787f024f8fb65d6467382f3b88d1d92df3ecb4ab11ceaf238b0261bf9cb2655adcd14ce32d54d687d38aaa117a2dbddfec85dd291bbdba26a16cffc8635188", 0x81}, {&(0x7f00000009c0)="e6ad5e77646d088db6ff680f7a6bdaf38f6f916feb2927d130428243b7298abb9dbfcc1bed94e045ea88784336c6f6ca452b837c02f8d07aa75ee91f1fbda131d5af221c6b29a3c6d22198417d6351b237b534fffb66ced809bdcf72f9ea385557c3c940eceee19ae38d47ed337e8a203c6079a8c292ac115fd5e7b3faba96312ef672a763c82763ecca2fe7380b8be83c5a2e922f44fdd06f17bd04cbead68158e4ee28fc62ed6fd78c7ec6181b925bd0d1e6d9fafd0ff4f34fa782a3b6cda6cd17e6d6bf80548b42b36e996bd4a1759dd3bda61e5e99ac430e5c8c3d5de71d8d6308d6934f63096d15a4", 0xeb}, {&(0x7f0000000ac0)="d42a0f2d4ec566696695dc5bfaa8a1842acbd97121ed89c3806e6f4cb14f4053d58b256d611c8b4b3b2ee7ce925761b542f37428b29b5a49306305d57df86377e7a60ff5845ed2d322726ee7e3997aa559ebac97ed102275e93ee6a0e93f53610d4cce64c7c8b852468c11bf6f22b0080d1762c3c408d1d47f2f311b4e13d3a2c3ec2e0725e639fbf4b931b0f0788ac37eaae6b219b08a8f19540e82ee41bbb4781cceaec00c7f049d8670ff14fe7ee80cf95bad9099eb468d5db71e93456fb003fff96d2f426d31f68c08a4858e", 0xce}], 0x4, &(0x7f0000000c00)=[{0x10, 0x1e3, 0x9}, {0x68, 0x114, 0x5, "5cc4ea3de9c6a63509fc5a2638e6dce8c99f4a094e0f4576cb67fa1457f4c8487a358820934c959d48592c6669c5a386dc5b74293fb9d3d7dab524bf81f3836a6a70a06b8554a2f69e86f662bfe54c9223a187e2533f"}, {0xe0, 0x84, 0x6, "83e915a179662b3614c855a836c4e2e90749f272ba784cf3f92cdb2c36c0dffc8c7acee98d8afc9d87f432b032f8a6af71b35e063c5e5e60abfb22127b1a41df42aaf4263e818ec3d6692e1ba95a09c1b3f7a10dff5ce64dccf0cb2c3622ca70a809409161d09b44ae8fac8cffba1e971a87908d30a8055bc2c3ad1b304ecbda1a4f91b90c5d2b707268f92212252fccc3764e6dad48688da4163bd762bd4876d61b526d2b6243b511ceb2c4ed8223a76d1ac8b528bf47fe19f72457892555b47448666225e16a1648b140f512"}], 0x158}}, {{&(0x7f0000000d80)=@l2tp6={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfc5, 0x1}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000e00)="9fc779c6fcddc86d722f5aa75c89b122efb9a7c78c10b1276a58", 0x1a}, {&(0x7f0000000e40)="afc4", 0x2}, {&(0x7f0000000e80)="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", 0x1000}], 0x3}}], 0x4, 0xd) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000001fc0)={0x2, 0x0, @dev}, &(0x7f0000002000)=0x10) getresuid(&(0x7f0000002040)=0x0, &(0x7f0000002080), &(0x7f00000020c0)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002100)={{{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0x5658, 0x4e23, 0x1, 0x2, 0x80, 0x80, 0xbf834c06a45572f0, 0x0, r3}, {0x1, 0x1, 0x8, 0x1, 0x0, 0x5, 0x81, 0x4}, {0x2, 0x3ff, 0x6279, 0x800}, 0x9, 0x6e6bc0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x0, 0x3f, 0xe2bd, 0xc}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000002200)=""/123) add_key$user(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, &(0x7f0000002300)="61634e273109830aff18df9480eda4db6e81127b38e01c6b94d232ef79666556ae3fbcee5277affa20bc7c61b231927ebbdf3040605b3c65ec39a32274fa3fd1599d7c2cf19522b929002a66a76325b35d78a6419b8b4d86dbd481eeba7e6f992d1b06bada24de12de9976ec6dcad046f1289184e471cba1dc5b2304d8f19a9f4d29f1d63650ed91107a62dd6e10a280e7053201158adb8cd2d323120d73451207f2b92e4b79c821f95ac4a1fea138baa4412688ea0443a9253c718a5f0d6237b9ee754f664936e7081bc498e7ee22889fb99803b1e70fcd3e44484db8", 0xdd, 0xfffffffffffffffc) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000002400)={0x1, 0xfffffff8, 0x9, 0x7c51a9b6, 0x82, "eeefa1da73dfa1a14d6f3db4c72a6485fa5a2a", 0x7, 0x4}) shutdown(r4, 0x1) r6 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000002500)={0x14, &(0x7f0000002480)={0x0, 0x6, 0xa, {0xa, 0x21, "f901836c1efb8ed7"}}, &(0x7f00000024c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f00000026c0)={0x34, &(0x7f0000002540)={0x0, 0xb, 0x26, "95aa53fa9effffe3afa9b73d4f539e30ad2b45b2bd22780f404933d0e7bf05309b8b23341c6c"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002600)={0xc0, 0xa1, 0x4, 0xffffffff}, &(0x7f0000002640)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000002680)={0xc0, 0xa2, 0x2f, "ec8a878f033de571eaa3badd516f4b44c9f03ad090ba25f79d6ae6937e02d0491d01a99396618d7e0351812ba4084d"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002800)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002700)="52e9a3b4458e8dba0d8684c55524dc67317fc392385ddb9c35b0b797dcbc9beb45b07bc8e57098dcbbc4118d6fb0d305d0606a6f69a0cddb39450304cb338129475c6e9d4445349f4c7933663eb70b396b666f19c57f8882307d349f094784050023c16704f176caf1940568d3b868b5fa02556188be59febe045dc6240851d57a849f35b83e3bd746366378ab1a559cd5f6944d7911cc722a1bd247d1b4372e8dfe63eeafe9dd61bde0f1cff6ec4d8129edf4f03249fcf2505a6c47f7cbc17cf306c314d83bd72ff40c5e8287d8c7f37fcddcc3f270cff8f4fa6a", 0xdb, r2}, 0x68) getitimer(0x2, &(0x7f0000002880)) syz_open_dev$sg(&(0x7f00000028c0), 0xfffffffffffffff8, 0x210602) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000002900), &(0x7f0000002940)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000002a00)=0xffffffffffffffff) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000002a40)={0xffffffffffffffff}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000002ac0), 0x4) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002b00)={'wg0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b40)={0x1b, 0x0, 0x0, 0x6, 0x0, r8, 0x0, '\x00', r9, r8, 0x5, 0x1, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002c40)={'syztnl0\x00', &(0x7f0000002bc0)={'syztnl1\x00', r9, 0x20, 0x80, 0x3ff, 0x5, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0x13, 0xe8, [@remote, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xe, "46d9f8a6d528f57f6598622d"}]}}}}}) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000002c80)={0x6, 0x4}) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000002cc0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16m12.298820197s ago: executing program 5 (id=2723): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'system.', '/dev/kvm\x00'}, &(0x7f0000000440)=""/4096, 0x1000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000000, 0x10}, 0xc) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB='\n\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0300008e5800000001000000000000e74af8c2cfdeac24278f95ff3d00"/41], 0x50) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x7f, 0xfffffffc, 0x3, 0x8, 0x3cf, 0x0}) (rerun: 64) fcntl$lock(r2, 0x24, &(0x7f00000003c0)={0x0, 0x4, 0xfff, 0x95, r8}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16m12.066788597s ago: executing program 5 (id=2726): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16m11.944904472s ago: executing program 5 (id=2727): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) (async) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x3, 0x3448, 0x0, 0x7}}]}) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x3, 0x3448, 0x0, 0x7}}]}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0xa, 0x401, 0x1ff}) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0xa, 0x401, 0x1ff}) r3 = socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x83f440c739cc2f89, 0x80, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) socket$alg(0x26, 0x5, 0x0) 16m11.674215475s ago: executing program 5 (id=2731): socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x9, 0x5, 0x7, 0x4000000000, 0x6, 0x2, 0x1041, 0x288, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xc1c, 0x6, 0x5, 0x8}, {0x8, 0x6, 0x10, 0x8}, {0x6f5, 0xfc, 0x2}, {0xfff, 0x2, 0x8, 0x1}, {0x8, 0x9, 0x9, 0x9}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="2dd37d8ffd0646da30892b969e9a7c9630adcf08f225031a5f46db6aef272db7b846748d6b364a07cd5f13531a4db34e5625e72f55ff1d55ee9da6b310ef641c56c800d6183ed7d65dd8eca09f35bab0b5e8bc59b39c86292b136ad0c70f17b62eb1c6191945edda02250589d9aaa5ae2de808554454f79a49eb352c948e0f79ae69c2a0647a8c565f577b2c3585d2fb59f80881d1da8def03cfa13d3d9d25eeaa0cf34d920e320eee58484dc422651eb9ea433ba6eecca98b09c6fd68617f716d63c64a", 0xc4}, 0x68) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 16m10.421304992s ago: executing program 5 (id=2741): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x8000000d, 0x24000, 0x1, {0x1, @raw_data="e6a89b66b2fddd80b9f9b9376aa5e0c41f9f254a00f285c3e6fe75d0c126c1a1e5a74da41b08503e1a0dfd6250a96698a5a64d76c076e83d381615e187ac1460cb48270b82eedba5c0c0df84f19323bedb611295101cd8d106cb2b8f91e3913da2a19db70059ae1ee29d09f6b5c5ba69a764e05b0e678d7bde5b68f2460100e162b2a3769ecc61279cfdf4b1912f713d4d07ef8358390926d645ee48aba5a9525cc0dc0708a04a224794318ef5040cbc5df2fc010cace670829aac6c6808eb8ed141435901854f3e"}, 0x1d0}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4080) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000580)="661a84d3e6a57033fa87976f60e79f7a7381243b19e15845b468bb8befdceff880c07980b888348190320d1a47029f71d4acd585477dd7511eaf42866e", 0x3d}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="4b5d4017cbcfd3bc86017143ce77ca6cf20c67494bc950b2e64ce1d65d17f4f4b5", 0x21}, {&(0x7f0000000380)="cfc953eec0072680128af8455f200114b08f22595e3d19f856d2d4abb56758271141cd55c52fa0c71797d4e22d", 0x2d}, {&(0x7f0000000200)="d7a76bf9f393245e4a72b15d8a5cfd5e0d7e384542d2cc6fe8", 0x19}, {&(0x7f00000004c0)="f3539f4fe58af973a4f57a9fcb4a078b329df68cae9a2914519fb87a44e9b4ba2d3d20d5559f177f02418689de1b49420acfa5191329232bfd1c07013031b906e2860a9a4f77116e616cc4893ea014c0bea95c4ba41dbe9ac12c08acd656d3839faa16173c55c6af40874fff708cea48c231591602974a7419608590e04c69d808c30c0e7d25c41a09d63c2c0725499b2734b50c709d", 0x96}, {&(0x7f0000000700)="7a76d967042924814dd0edf24e666c7a10d9e9bf3b6c60cb6340ab4ecd6074dc4a7c6afdb07e75ce5a125bf950e9d82ea352988e7a19d95566a4af4ac237a1c79ac4622a8a748cb67c3f295658003cc174598ce1f575f9176d5ebae50f519a7c46bf538cbaff92843d8e53cfa800d4ae81c4a8b1255263b634f8c693cabe838462880d8cfa0ef054f7cbc7e8c35d83ab008cc87e0938f1fe62ae07279bbba197b1a9d77210498020890527cca1fda65ca39836e684c2ff5a967281024e74989e9d11c0e4f6bb1e26e6dd22", 0xcb}, {&(0x7f0000000040)="3da7de3eeec12c0019d292943c7fc6dbc4d81ceeb372f9c91ab8fd921fd41f2d8f3798106074c89e0b6baf1f57135dd1e35d886952849d2129f0ebd61d5fe46934c52c2e09947765a5867559d579b87b", 0x50}, {&(0x7f0000000140)="518728567b2abfb821ff63a8ece35f895e3f80fd547bbd67bd72840fa71acac0dc7d0c687754fd35589076d6952717984122bb1e74197e4b4f687a556609f92a42575f7dfe37973868779408cce05f5eaba95077c3f94521693e05c456b8969e9a76cf5f84040ba934ccda787419a722eae27bfa89585c2a567da0fa1b8211e4bf344a0330d918e75da50923de8dab72f6ac1b490627c9878e0ea8ce5030e1aaec", 0xa1}], 0x9, 0x6) (async) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000580)="661a84d3e6a57033fa87976f60e79f7a7381243b19e15845b468bb8befdceff880c07980b888348190320d1a47029f71d4acd585477dd7511eaf42866e", 0x3d}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="4b5d4017cbcfd3bc86017143ce77ca6cf20c67494bc950b2e64ce1d65d17f4f4b5", 0x21}, {&(0x7f0000000380)="cfc953eec0072680128af8455f200114b08f22595e3d19f856d2d4abb56758271141cd55c52fa0c71797d4e22d", 0x2d}, {&(0x7f0000000200)="d7a76bf9f393245e4a72b15d8a5cfd5e0d7e384542d2cc6fe8", 0x19}, {&(0x7f00000004c0)="f3539f4fe58af973a4f57a9fcb4a078b329df68cae9a2914519fb87a44e9b4ba2d3d20d5559f177f02418689de1b49420acfa5191329232bfd1c07013031b906e2860a9a4f77116e616cc4893ea014c0bea95c4ba41dbe9ac12c08acd656d3839faa16173c55c6af40874fff708cea48c231591602974a7419608590e04c69d808c30c0e7d25c41a09d63c2c0725499b2734b50c709d", 0x96}, {&(0x7f0000000700)="7a76d967042924814dd0edf24e666c7a10d9e9bf3b6c60cb6340ab4ecd6074dc4a7c6afdb07e75ce5a125bf950e9d82ea352988e7a19d95566a4af4ac237a1c79ac4622a8a748cb67c3f295658003cc174598ce1f575f9176d5ebae50f519a7c46bf538cbaff92843d8e53cfa800d4ae81c4a8b1255263b634f8c693cabe838462880d8cfa0ef054f7cbc7e8c35d83ab008cc87e0938f1fe62ae07279bbba197b1a9d77210498020890527cca1fda65ca39836e684c2ff5a967281024e74989e9d11c0e4f6bb1e26e6dd22", 0xcb}, {&(0x7f0000000040)="3da7de3eeec12c0019d292943c7fc6dbc4d81ceeb372f9c91ab8fd921fd41f2d8f3798106074c89e0b6baf1f57135dd1e35d886952849d2129f0ebd61d5fe46934c52c2e09947765a5867559d579b87b", 0x50}, {&(0x7f0000000140)="518728567b2abfb821ff63a8ece35f895e3f80fd547bbd67bd72840fa71acac0dc7d0c687754fd35589076d6952717984122bb1e74197e4b4f687a556609f92a42575f7dfe37973868779408cce05f5eaba95077c3f94521693e05c456b8969e9a76cf5f84040ba934ccda787419a722eae27bfa89585c2a567da0fa1b8211e4bf344a0330d918e75da50923de8dab72f6ac1b490627c9878e0ea8ce5030e1aaec", 0xa1}], 0x9, 0x6) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x4) (async) listen(r3, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c", @ANYRESOCT=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000480"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000480"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, r5, 0x2) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 15m54.802151362s ago: executing program 33 (id=2741): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x8000000d, 0x24000, 0x1, {0x1, @raw_data="e6a89b66b2fddd80b9f9b9376aa5e0c41f9f254a00f285c3e6fe75d0c126c1a1e5a74da41b08503e1a0dfd6250a96698a5a64d76c076e83d381615e187ac1460cb48270b82eedba5c0c0df84f19323bedb611295101cd8d106cb2b8f91e3913da2a19db70059ae1ee29d09f6b5c5ba69a764e05b0e678d7bde5b68f2460100e162b2a3769ecc61279cfdf4b1912f713d4d07ef8358390926d645ee48aba5a9525cc0dc0708a04a224794318ef5040cbc5df2fc010cace670829aac6c6808eb8ed141435901854f3e"}, 0x1d0}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4080) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000580)="661a84d3e6a57033fa87976f60e79f7a7381243b19e15845b468bb8befdceff880c07980b888348190320d1a47029f71d4acd585477dd7511eaf42866e", 0x3d}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="4b5d4017cbcfd3bc86017143ce77ca6cf20c67494bc950b2e64ce1d65d17f4f4b5", 0x21}, {&(0x7f0000000380)="cfc953eec0072680128af8455f200114b08f22595e3d19f856d2d4abb56758271141cd55c52fa0c71797d4e22d", 0x2d}, {&(0x7f0000000200)="d7a76bf9f393245e4a72b15d8a5cfd5e0d7e384542d2cc6fe8", 0x19}, {&(0x7f00000004c0)="f3539f4fe58af973a4f57a9fcb4a078b329df68cae9a2914519fb87a44e9b4ba2d3d20d5559f177f02418689de1b49420acfa5191329232bfd1c07013031b906e2860a9a4f77116e616cc4893ea014c0bea95c4ba41dbe9ac12c08acd656d3839faa16173c55c6af40874fff708cea48c231591602974a7419608590e04c69d808c30c0e7d25c41a09d63c2c0725499b2734b50c709d", 0x96}, {&(0x7f0000000700)="7a76d967042924814dd0edf24e666c7a10d9e9bf3b6c60cb6340ab4ecd6074dc4a7c6afdb07e75ce5a125bf950e9d82ea352988e7a19d95566a4af4ac237a1c79ac4622a8a748cb67c3f295658003cc174598ce1f575f9176d5ebae50f519a7c46bf538cbaff92843d8e53cfa800d4ae81c4a8b1255263b634f8c693cabe838462880d8cfa0ef054f7cbc7e8c35d83ab008cc87e0938f1fe62ae07279bbba197b1a9d77210498020890527cca1fda65ca39836e684c2ff5a967281024e74989e9d11c0e4f6bb1e26e6dd22", 0xcb}, {&(0x7f0000000040)="3da7de3eeec12c0019d292943c7fc6dbc4d81ceeb372f9c91ab8fd921fd41f2d8f3798106074c89e0b6baf1f57135dd1e35d886952849d2129f0ebd61d5fe46934c52c2e09947765a5867559d579b87b", 0x50}, {&(0x7f0000000140)="518728567b2abfb821ff63a8ece35f895e3f80fd547bbd67bd72840fa71acac0dc7d0c687754fd35589076d6952717984122bb1e74197e4b4f687a556609f92a42575f7dfe37973868779408cce05f5eaba95077c3f94521693e05c456b8969e9a76cf5f84040ba934ccda787419a722eae27bfa89585c2a567da0fa1b8211e4bf344a0330d918e75da50923de8dab72f6ac1b490627c9878e0ea8ce5030e1aaec", 0xa1}], 0x9, 0x6) (async) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000580)="661a84d3e6a57033fa87976f60e79f7a7381243b19e15845b468bb8befdceff880c07980b888348190320d1a47029f71d4acd585477dd7511eaf42866e", 0x3d}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="4b5d4017cbcfd3bc86017143ce77ca6cf20c67494bc950b2e64ce1d65d17f4f4b5", 0x21}, {&(0x7f0000000380)="cfc953eec0072680128af8455f200114b08f22595e3d19f856d2d4abb56758271141cd55c52fa0c71797d4e22d", 0x2d}, {&(0x7f0000000200)="d7a76bf9f393245e4a72b15d8a5cfd5e0d7e384542d2cc6fe8", 0x19}, {&(0x7f00000004c0)="f3539f4fe58af973a4f57a9fcb4a078b329df68cae9a2914519fb87a44e9b4ba2d3d20d5559f177f02418689de1b49420acfa5191329232bfd1c07013031b906e2860a9a4f77116e616cc4893ea014c0bea95c4ba41dbe9ac12c08acd656d3839faa16173c55c6af40874fff708cea48c231591602974a7419608590e04c69d808c30c0e7d25c41a09d63c2c0725499b2734b50c709d", 0x96}, {&(0x7f0000000700)="7a76d967042924814dd0edf24e666c7a10d9e9bf3b6c60cb6340ab4ecd6074dc4a7c6afdb07e75ce5a125bf950e9d82ea352988e7a19d95566a4af4ac237a1c79ac4622a8a748cb67c3f295658003cc174598ce1f575f9176d5ebae50f519a7c46bf538cbaff92843d8e53cfa800d4ae81c4a8b1255263b634f8c693cabe838462880d8cfa0ef054f7cbc7e8c35d83ab008cc87e0938f1fe62ae07279bbba197b1a9d77210498020890527cca1fda65ca39836e684c2ff5a967281024e74989e9d11c0e4f6bb1e26e6dd22", 0xcb}, {&(0x7f0000000040)="3da7de3eeec12c0019d292943c7fc6dbc4d81ceeb372f9c91ab8fd921fd41f2d8f3798106074c89e0b6baf1f57135dd1e35d886952849d2129f0ebd61d5fe46934c52c2e09947765a5867559d579b87b", 0x50}, {&(0x7f0000000140)="518728567b2abfb821ff63a8ece35f895e3f80fd547bbd67bd72840fa71acac0dc7d0c687754fd35589076d6952717984122bb1e74197e4b4f687a556609f92a42575f7dfe37973868779408cce05f5eaba95077c3f94521693e05c456b8969e9a76cf5f84040ba934ccda787419a722eae27bfa89585c2a567da0fa1b8211e4bf344a0330d918e75da50923de8dab72f6ac1b490627c9878e0ea8ce5030e1aaec", 0xa1}], 0x9, 0x6) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x4) (async) listen(r3, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c", @ANYRESOCT=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000480"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000480"], 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, r5, 0x2) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 2m44.519499371s ago: executing program 1 (id=6345): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000730139000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x3e81, &(0x7f0000000040)={0x0, 0x2eb3, 0x400, 0x3, 0x350}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200), 0x3ffffffffffffe74) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x108, 0x115, 0x8, "57b7886a1c486bf2d46b608924985c3d71d8a4d46edd089258d68fa973c391603bd18d17916b88f6cd617fa6d5d7b3543a4ec4d8f246211a13cd3d0903637e0ac32d398c495106799e0696a87acea99c6d6cd88baa6ae0ab0c595bf37636135e3dbec496af835596c56d4bfd92a15157117843e2b9b1a87a1228db112ff25858fede020a8ce406dcfceffb32fc2a31cea751dfb8d0fe9706b3dc3b2ab658077f6f0cab5ff1662921eead435a2133421000f476ea6bee14ba72e8c65452fc006ae90d2b74fb75fc5be0f9a11c308be87a040528d26d91d201c8809b2d451181b9eea6e00165e1c7477d6720562db831f77576"}, {0x20, 0x3a, 0x7, "3997961fc5faf1bde73aa91fe797"}], 0x128}}], 0x1, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x448d0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x409, 0x0}) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m44.289318985s ago: executing program 1 (id=6346): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003280)={0x7, 0x0, [{0x200000, 0x1000, &(0x7f0000000d00)=""/4096}, {0x8000000, 0x12, &(0x7f0000001d00)=""/18}, {0x6000, 0xfe, &(0x7f0000001d40)=""/254}, {0x25000, 0xe4, &(0x7f0000001e40)=""/228}, {0x58000, 0xf9, &(0x7f0000001f40)=""/249}, {0x26000, 0x1000, &(0x7f0000002180)=""/4096}, {0x1, 0xcd, &(0x7f0000003180)=""/205}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, 0x10000, 0x77) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2005}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80501, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010101, 0x0, 0x0, 0x30, 0x0, [{}, {@empty}, {@multicast2}]}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x29, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x29a10f4c, 0xb, 0x2, 0x8, 0x3, 0x0, 0x0, 0x4}}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) 2m43.374768369s ago: executing program 1 (id=6348): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000140)=0x7, 0x4) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000280)=ANY=[]) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x20, 0x10000, 0x1, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "1d4f011551f3b511a9"}]}]}}}}}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r7, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4]}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000540)=0x4) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4000) 2m41.544592344s ago: executing program 1 (id=6354): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000000)=0x4e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsopen(&(0x7f0000000300)='btrfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)={0x0, 0x7ff, 0x4}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x7}, {{@in=@rand_addr=0x64010102, 0x2000002, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2m40.113222408s ago: executing program 1 (id=6357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) (async, rerun: 64) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000001680)=[@in_dx={0x69, 0x20, {0x62cf, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x53b, 0x6, 0x1, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2805, 0x2, 0x7fffffff, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x202}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xdd59}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x297a, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x9, 0x2}}, @out_dx={0x6a, 0x28, {0x45dd, 0x0, 0x400}}, @nested_load_code={0x12e, 0x62, {0x3, "8f6848b6570188c421d5634b00c4a13f7d8b7086f8463ec600dcc600bdc422050789ad00000066ba2000ed66baf80cb818a9908eef66bafc0cb809000000ef0f0864660fc7b0f0000000"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c04, 0x9, 0xb, 0x5}}, @out_dx={0x6a, 0x28, {0x7575, 0x1, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x49b, 0x3ff, 0x7, 0xff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x2b2}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001600)=[@text32={0x20, &(0x7f0000001580)="816164f1070000660f3822190f01c30f01cf66b885000f00d836660f3a0d6c2adf14c4c31579c00166baf80cb8b43f2387ef66bafc0cb800980000efc4c2893fc226670fae4ee3", 0x47}], 0x1, 0xe, &(0x7f0000001640)=[@dstype3={0x7, 0xc}, @cr4={0x1, 0x80}], 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000020000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) (async) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$tun(r5, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], 0xfdef) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') (rerun: 64) writev(r7, &(0x7f00000012c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88840) ioctl$EVIOCSKEYCODE(r9, 0x40084504, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 2m39.566939913s ago: executing program 1 (id=6361): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000608000604"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000368060100000800030006010000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x10001, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="8d", 0x1}], 0x1, 0xec, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m28.205658607s ago: executing program 4 (id=6398): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040700c0bf0e75689cb3800000000000109022400010000d80909040008010300030009210100330122e30109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000600)=""/202, 0xca}], 0x1, 0xa2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m25.030624112s ago: executing program 4 (id=6411): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x3, 0x0, @pic={0x0, 0x8e, 0x1, 0xd8, 0x7, 0x6, 0x4, 0x4, 0x3, 0x0, 0xff, 0x0, 0x80, 0x81, 0x6b, 0x8}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x334e8b}) pipe(&(0x7f0000000200)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000100)=ANY=[@ANYBLOB="fffd50ad45"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x7fff, 0x0, 0xb3, 0x7fffffff, 0xfffffdfffffffffe, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 2m23.942465931s ago: executing program 34 (id=6361): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000608000604"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000368060100000800030006010000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x10001, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="8d", 0x1}], 0x1, 0xec, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3300202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc303fffde1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m23.9342437s ago: executing program 4 (id=6416): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x16, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 2m23.828063482s ago: executing program 4 (id=6417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x12, 0x2}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x120) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 2m22.626193709s ago: executing program 4 (id=6421): unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x27, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000d0a050000000000000000000a000001f6ff010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, 0x0, &(0x7f0000001000)) r3 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, r1, 0xc369d000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) 2m22.219380969s ago: executing program 4 (id=6423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x3, 0x101000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x22880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m20.912408452s ago: executing program 35 (id=6423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x3, 0x101000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x22880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.991102987s ago: executing program 6 (id=6619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70ad26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m4.918655823s ago: executing program 6 (id=6620): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() move_pages(r3, 0x5, &(0x7f00000000c0)=[&(0x7f00001d3000/0x4000)=nil, &(0x7f0000657000/0x4000)=nil, &(0x7f000053c000/0x3000)=nil, &(0x7f0000527000/0x1000)=nil, &(0x7f0000185000/0x4000)=nil], &(0x7f0000000100)=[0x4, 0x7fffffff, 0x7, 0x80000000, 0x80000000], &(0x7f0000000140)=[0x0, 0x0], 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) r5 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$can_j1939(r5, 0x0, 0x0) getpid() 1m1.847419423s ago: executing program 8 (id=6631): r0 = syz_io_uring_setup(0x2d38, &(0x7f0000000340)={0x0, 0xffffff7c, 0x1082, 0x3fffffc, 0x3a8}, &(0x7f0000000500), &(0x7f00000000c0), &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000ac0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) io_uring_enter(r0, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) 1m1.795614705s ago: executing program 6 (id=6632): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f00000000c0)=@generic={0x8, "d382e523cc4c93588928efea163bc3a05c62e0d479873c5ebb6db958259139a2499e316e023d735eb3573549aab71b239bcdf89239627972120a8d22220283f89d514258ef3193f106c1084cc5dabb237955692ae2ad2a8e64a0ade474fdb28aceca71d1e311bb50a4ba497a0a6b9d145e39b523cdc19b44ab47541836c6"}, 0x80) syz_usb_connect(0x0, 0xe4, &(0x7f00000001c0)=ANY=[], 0x0) 1m1.260228672s ago: executing program 8 (id=6635): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0x69, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "74504de9ce05f8ed1c264c5018e453a2f464ef278420056204a6529b71b8e0e1836e"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS, @NFTA_TABLE_USERDATA={0x0, 0x6, "c05cf8c92738cd43c8e7a421b9d69aa74bc9a6a29112ba6ce6e6027df12e92efef5eea87c5c006fdd0e3d77828e405362721a0b32612bd9a71d75e0935fe808813b302a205eb178742cc87ff0143bea0ce82870e6b5fa4e2e7289d2b6bb57192b59826203a5463f167b079bab307f8dcda4044e4846d3e048f2a29be60f69361795e26b275a249c5da9eb6f3b03023ddf46ee5c041e4cc68722ef37a11e9b70888faf8c631d9253f39fd443b210c941ecfffce47249f814f0387c88be02e4b9edcbd777641692bc919788abf50b3c18fe638e54ece2638ddd32b45d9feb6c1e09d4eef89a0df08"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0xa77a53dde7fa6402, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bc8d3a675d7dd84416cf80de8648d981f34636c09185a634087caeacd6ae43c0f8286c4ba9690c46a8060f8c2c5efdd7e1ce31d4fb75388d214fa05c8e345747b6393a1fc8f666bc51fd510b5104b98f068045236959a31c380b735528cb2d206108c57c99cbeb00bd497a9be35708cbfc40d68eb609b1876f3522c441f007373eb114a6eb4491075fa27af5afe2657497fd8f0a785b5221def0ca2ef3e833a2867ee3037a1b82f83b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m0.935078444s ago: executing program 7 (id=6637): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async, rerun: 32) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (rerun: 32) fallocate(r1, 0x1, 0x2, 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x198}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2c8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000280)=0x4) (async) flock(0xffffffffffffffff, 0x2) (async, rerun: 64) io_submit(0x0, 0x4, &(0x7f0000000d00)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000000600)="978d928873fecc48571231a3ad028d72cfe5ae8fc50a442bbb9ef27164ba5137362a90f8a1ca65a6983b05a10d6d168928e5c0a878131bad21edffe77f1b3cd9cf94fa301528e32fa347c82f5db78e0849037bba538b11b402885ea139d229e399c7f459f0e79cb7dca1871e9533e87683618b3440a16fb04efc27d223bc7126af97c1475921d55fe1fc7b022475", 0x8e, 0x40, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000780)="234fd73a8f17aa30112ec4f45e1b0a9741cb06f1e37de2efa415f52cd485bd83b3bc402c07f0881934b1067b49654cc7bf9d7b2fe2cae63e340171090d61c506b7442fac3167b446159a9ba5dc22549f8924a5a96145f02f99730a42b3425ba4afe2414a82878e8c7608dd843d4a4b6fafecb0f2f4b47bed89ff4492fa3f4d4d47fc92265656ce0076fd2e2dfae82906764d66575798760a8ce93c9187fb9778533c626fc5b2b3", 0xa7, 0x1, 0x0, 0x2}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x506, r1, &(0x7f0000000b40)="9cb40f42d10f27bddb2cb08521a7d46b1c401b73eb588aab3467a502168be71ff1656913355723726f6ef2a780690055238c227bfa1cf65040409c9150db6552063eb408540988f1818857e1295812dc4d81ed84c83fe006f9b4fdb26a993acb77afdb4ba113704166c904285ffabc146af254fca25f74354f2d0c7e3506f536d3c59983c7c8c450a184b623df89f76f34021ad101a0956492fc84f45fa688cb30fc2ce47deab0ea5d", 0xa9, 0x2, 0x0, 0x2}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000c40)="06f456046100e14e9d2a09d5c21a960aa22352c005dab581c3d7a5b5fba3f56de752bd8520d97c85a4c4b9e426ae5e61b4ff250a6ada3d4abc897e6ddcb6172f2b65af3fa6e142c092d38ba20ecc75387c1d586f47d4f852ac8111611ff5f2d346b290d3b74d", 0x66, 0xf}]) (rerun: 64) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000) (rerun: 32) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r9, &(0x7f00000000c0)='1\x00', 0x2) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1m0.775882589s ago: executing program 7 (id=6638): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004020000040000000a00", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x281, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0xe, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xe8, 0x2, 0x4}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000160000008500000083000000bf0900000000000055090100000000008900000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCFLSH(r12, 0x5411, 0x2000000000000) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r6, 0x2}}, 0x18) 1m0.286620306s ago: executing program 7 (id=6639): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="92000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf25010000004c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000007f00000000000000000000000000000001020000001400020077673100"/110], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x0, 0x2, 0x3, "8c8ee811ddd396f06db560b6396e471eeee6f7c1e1dc7c61b76dd45128573ea3", 0x20363159}) socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000e905000200664566f3fec90d4ab20100d4a21300000000037e0c388bbe43529f6841a5a09343ade10a41d601000000b4cca152"], 0x32202) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x2000, 0xc, 0x0) 59.32710735s ago: executing program 0 (id=6643): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf7904e479b7252364b718000000000000000000000000007f1ca748c0ffffff"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="d0869ac14d3dfd471f76527e20d0d584363e0c0b039ad9bdd0c1f4e5c0f53be6ca45183030f904582b01e4175ebc9254cf95f899684e39be5a0d10770449f15f1ac34743b41997086d1ef458"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r1, &(0x7f0000001140)=""/4096, 0x48) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) r4 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) (async, rerun: 64) r5 = dup(r0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000200)={0x2, 0x65}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = fsopen(0x0, 0x1) fsmount(r6, 0x1, 0x0) mkdirat(r5, 0x0, 0x166) (async) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) mount$fuseblk(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) (async) write$binfmt_aout(r5, 0x0, 0xffffffdb) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r7 = syz_open_dev$video4linux(0x0, 0x7ff, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) munlockall() 59.178700836s ago: executing program 2 (id=6644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bb5700000000000ffffffff000000000000000000000000000000000000000000000000000000000000ecdf4e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0, 0x7, 0x1, 0x605, 0x100, 0x401, 0x2a00000}) syz_usb_connect(0x2, 0x4f, &(0x7f00000002c0)={{0x12, 0x1, 0x340, 0x84, 0x3c, 0xf4, 0x20, 0x10ce, 0xea6a, 0xef2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x8, 0x7, 0x80, 0x1, "", [{{0x9, 0x4, 0xe3, 0xf9, 0x1, 0xb5, 0x67, 0x31, 0x9, [], [{{0x9, 0x5, 0xe, 0x1e, 0x8, 0xf2, 0x9f, 0x3, [@generic={0x8, 0xb, "3df3ea1281ac"}]}}]}}, {{0x9, 0x4, 0x7b, 0x5, 0x1, 0x83, 0x70, 0x32, 0x3, [], [{{0x9, 0x5, 0xd, 0x1c, 0x3ff, 0x67, 0x6, 0x7, [@generic={0x8, 0xb, "0ef9c0139679"}]}}]}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0xdf, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0xdf, 0x0, @opaque="ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec368e2be6a38e100ad79a38fb5c1436b5988215e096f64a843aafad7b82e65587c030411aefc61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe77e10e2bd1d0cde2e814806120485b4b6f5c6d14b23c1b00be5fe8ca59610a206c47126484462b109828cae2dbbdd69bf1f853aaaac48ed7002cfe08806b1a56c2886d7fd3c77f48ae33282aa4e245082bbcabdba8d34197fec5a19521e8557bb8c690fdd6f108251a924d3740ce4effb"}}}}, 0x107) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x40010, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) r4 = socket(0xa, 0x3, 0xff) move_mount(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x101001, 0x252) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x19) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000640)={0x0, 0x15, '\x00', [@pad1, @generic={0xe, 0x8b, "c919cb3dd46c04db55c738df5bf9fb121989a17ed7e50894ece489bd2a4f734780424515c7cbd1b439ca06f00e0d1d5b323fcd65623d02114008afb50804846e4dcd7db54f24cbe57cae70c5faa147cf5ae3575a0cb9d896a7d3e9ec640b627fcffc645a7c85fe2d024f422c9c9da2e4dd46478d2047f9665bf69d59f7fcb4ecead4984a57a42ad6023bea"}, @ra={0x5, 0x2, 0xd}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x41}, @pad1]}, 0xb8) sendto$inet6(r4, &(0x7f0000000000)="be430a96f34a0165af66e69eeb8b8b9a3de26b3710cc136687a4a9488208ca30836bc81df5afff6e9e6659c0f3e5de2fa0137f4299f0d54ddbfb89f261f25ca2e23e701ae13735d0d29ef9b333e14d717f0247e46512ded112983bd401a1258759b2c35edde33fb454", 0x69, 0x8000, &(0x7f0000000080)={0xa, 0x4e23, 0x40, @empty}, 0x1c) 59.17831198s ago: executing program 0 (id=6645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, r1, 0x705, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000040) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) 59.109199637s ago: executing program 0 (id=6646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20014004) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5a42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r8, 0x2007ffd) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x2010, r8, 0x0) rt_sigprocmask(0x1, &(0x7f0000000180)={[0xffffffffffffffff]}, &(0x7f00000001c0), 0x8) sendfile(r4, r6, 0x0, 0x1000a3) pipe(0x0) io_setup(0x3ff, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000200)=""/233) 58.666000223s ago: executing program 6 (id=6647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)={0x0, 0xa, 0x6, "66747a6dfb12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acb"], 0x0) 58.423684957s ago: executing program 7 (id=6648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x6}) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x88) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x24) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000055c0)='./file0\x00', &(0x7f0000005600)=@random={'security.', '+-\'\x05\x00\x00'}, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x9, 0x9}, {0x5, 0x20}, {}, @raw32={[0x8b, 0x3, 0xf]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"5c83c678192238f4a1f87da8"}}, {0x10, 0x0, 0x0, 0x0, @time={0x0, 0xa}, {0x7}, {0x0, 0x80}, @control}, {0x0, 0x4, 0x0, 0x0, @tick=0xdf, {}, {}, @time}], 0x70) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x4}]}) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010102000000000000000002000000100002800c0006"], 0x24}}, 0x4048000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) syz_clone(0x88106000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) 58.078813831s ago: executing program 8 (id=6649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a08000000800026a079f99a8f8d956d5ac6909a545cc4000000002080003400000000224", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESHEX=r1], 0xe0}, 0x1, 0x0, 0x0, 0x4040840}, 0x24044880) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffbffffd, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0x80000001, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 57.933313621s ago: executing program 7 (id=6650): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() move_pages(r3, 0x5, &(0x7f00000000c0)=[&(0x7f00001d3000/0x4000)=nil, &(0x7f0000657000/0x4000)=nil, &(0x7f000053c000/0x3000)=nil, &(0x7f0000527000/0x1000)=nil, &(0x7f0000185000/0x4000)=nil], &(0x7f0000000100)=[0x4, 0x7fffffff, 0x7, 0x80000000, 0x80000000], &(0x7f0000000140)=[0x0, 0x0], 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) r5 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$can_j1939(r5, 0x0, 0x0) getpid() 57.632440979s ago: executing program 0 (id=6651): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00011027bd7000fedbdf250a803302fe01fd0000020000220004008fb2361e0a9c70c266633f0f70df2147564c3ada7bd81f796a9b1e3fd161e95959ea62e9e18b53bcf80b1ef1", @ANYRES32=0x0, @ANYBLOB="08001000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000000100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 56.075007608s ago: executing program 2 (id=6653): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0x69, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "74504de9ce05f8ed1c264c5018e453a2f464ef278420056204a6529b71b8e0e1836e"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS, @NFTA_TABLE_USERDATA={0x0, 0x6, "c05cf8c92738cd43c8e7a421b9d69aa74bc9a6a29112ba6ce6e6027df12e92efef5eea87c5c006fdd0e3d77828e405362721a0b32612bd9a71d75e0935fe808813b302a205eb178742cc87ff0143bea0ce82870e6b5fa4e2e7289d2b6bb57192b59826203a5463f167b079bab307f8dcda4044e4846d3e048f2a29be60f69361795e26b275a249c5da9eb6f3b03023ddf46ee5c041e4cc68722ef37a11e9b70888faf8c631d9253f39fd443b210c941ecfffce47249f814f0387c88be02e4b9edcbd777641692bc919788abf50b3c18fe638e54ece2638ddd32b45d9feb6c1e09d4eef89a0df08"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0xa77a53dde7fa6402, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bc8d3a675d7dd84416cf80de8648d981f34636c09185a634087caeacd6ae43c0f8286c4ba9690c46a8060f8c2c5efdd7e1ce31d4fb75388d214fa05c8e345747b6393a1fc8f666bc51fd510b5104b98f068045236959a31c380b735528cb2d206108c57c99cbeb00bd497a9be35708cbfc40d68eb609b1876f3522c441f007373eb114a6eb4491075fa27af5afe2657497fd8f0a785b5221def0ca2ef3e833a2867ee3037a1b82f83b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 55.467937279s ago: executing program 6 (id=6654): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x30, 0x3, {0x3, 0xa, "eb"}}, &(0x7f0000000440)={0x0, 0x3, 0x75, @string={0x75, 0x3, "1a302d3d409bad537a4374ec1b4b7598fff74ad2afb14eccdd416cc3430808e30030934f46427209f158f576f8f9083a601987002888beeccc33c1c17735fae7276e9be3cf2769b7059078f0130d72978e6411056cfc162807567ef3d42e32d205b37e45606095307d0b55244c79d0ca62e5c6"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x14, 0xeb, "c06dec0de32c0ec011bf564b7a32b4c34fd9a6939693cb096c31054a28e7f326b962d2bc0c4bcd2dd4240632a6373cc518352311323d6be3d4289ef391f3728e1c2da058dfbe652679c4de89051d1ee33fe1914ad50d45eca37ac4a2d7d1f8f11129c7fb20e8fe3c6eb49655afe7d7ea9aed9dc75a320c36b5322d49220c47d486b7c90e3c708b06440cf439ed5bb96f9c9513b3215d81d2a076c503ce2aa08bd1614a2f46f71e247280a611255e15479b4fc4d3e6477255e3cf3484904d9cafb175ed1a76c47584a5156b70db4118a14407f1e77929900fe4a66e51eb2dbf06644c508093b97b50a56652"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x81, 0x1, "1a"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "a6"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "dc40"}, &(0x7f0000000780)={0x20, 0x84, 0x3, "84c07e"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "e161f5"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400e0100000023"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0xc, 0x19, {0x19, 0x10, "1f0d9ac873ffaed914a01640539e4fb9b8382a2835b4e2"}}, &(0x7f0000000080)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "39b637f75997837cbd6b9fd23aa6970023ecf08e277b84bc2cab1653fea6fce889c2f10d7d0612c997f0b418fd55801d643af1d4a646f8dc7081b01d1ba580bdd991c8c8002b0dc75108116fa6e514f7522e1e62e1f312eac113ad32cf0ca10b85dfcf3f60c435f74e826386"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0xc, 0xd9, "e20f5415396252e573486cd6a6a264a4621a0c3fb74f933f97002fe2dadddc8f1954a3a67615d393769bedc5b84937ae19cae2a75de0824b955969a52ca1ddd8fb19b194cdbeeb6e8d4d7f397d5efb0dd719ee493dc932c9dd5b49ed1120471219cd4205222fc0687b641e7dcce6f82dfe6a1eddc16b63a0d47ec9333a318dd0c21c831bcbfab67c04766226971cee0010997aaa32ef18245db6f52e7d85f51919e3833d2bafdbf7dfab21bb4a8fe7639ccae0e85b51b3edbfa104248dd87b84dbaeafc36540f84412503407dd1573056ffabdf189835614d5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xb}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "ce1dcd58a873b114f2156805e5ea6074e69a1c71455c82e8315521dad66ca809228f20363b43a7cf04a6d56743b4d8"}}) 55.114094163s ago: executing program 0 (id=6655): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "86352346"}, @local=@item_4={0x3, 0x2, 0x8, "b1cece77"}]}}, 0x0}, 0x0) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x80, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x5, 0xfb, {0x8, 0x25, 0x1, 0x80, 0x30, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x7, 0x0, {0x8, 0x25, 0x1, 0x80, 0xe, 0x2d}}}}}}}}]}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) (async) syz_usb_connect$midi(0x6, 0x122, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0xf, [@midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x1, 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x7, 0x7, [{0x9, 0x8}, {0x1, 0x5}, {0x29, 0x1}, {0x8, 0x5}, {0xb, 0xf}, {0x2, 0x9}, {0xce, 0x3}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x3}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x1c, 0x7, [{0x9, 0x2}, {0x2, 0x8b}, {0x7, 0x2}, {0x5, 0x5}, {0x81, 0x1}, {0x5, 0x7}, {0x5, 0x1}], 0x5d}], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xe, 0x9, 0x8a, {0x12, 0x25, 0x1, 0xe, "2b209f0cdcbfa249b47aea79fd6c"}}}, {{0x9, 0x5, 0x84, 0x0, 0x200, 0x1, 0x8, 0x7, {0x4}}}, {{0x9, 0x5, 0x7, 0x13, 0x10, 0xc4, 0x9, 0x6, {0x12, 0x25, 0x1, 0xe, "4dc2bd1ede0bb98c71340b74992c"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x7, 0x1, {0xf, 0x25, 0x1, 0xb, "fbf5fa52a7e196e2f28275"}}}, {{0x9, 0x5, 0x80, 0x540e6c2289ac05c9, 0xf2d6ef19d8c94afa, 0xfa, 0x1, 0xff, {0xd, 0x25, 0x1, 0x9, "730398b6401d292b98"}}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0xa2, 0x6, 0x0, {0x13, 0x25, 0x1, 0xf, "79e86dedb9f4284a13c4c0011394cd"}}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xff, 0x3, 0x9, {0x11, 0x25, 0x1, 0xd, "8637ae2dab842b1e3cf67a348c"}}}]}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0xf9, 0x9, 0x9, 0x40}, 0xf0, &(0x7f0000000500)={0x5, 0xf, 0xf0, 0x6, [@generic={0x8e, 0x10, 0x4, "68cf4fc1669d15bc09505fd69f207558eab2af1675e2093ebc3c46202f9b84132e97ec917c39fce8e1691812b08c53271776857e0cc8c7e640672ea35d7dc7b01734c4687d3b585fd0e77c2b51861c0d2d7685e9fbff829131bf4ab9e5a1e93d117a1beee7f4d0af1567a6fba943cb33dd6528e7c4af67e1273d9061120927382fb562e1c63120a24ed1be"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x40, 0x4, 0x1000}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xfd, 0x7f, 0xe2b5, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "09d4af658cab33d369e2c5333872b3bc"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x5, 0xf78f, 0x0, [0x30, 0x0, 0x0, 0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x2, 0x0, 0x2, [0xff0000, 0xf, 0xff0030]}]}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x480a}}, {0x26, &(0x7f0000000640)=@string={0x26, 0x3, "b336a1e3171e5af3a8274a4880fb67dd19de3547956efd2ee759f88b37798ad17ed22a44"}}, {0x1c, &(0x7f0000000680)=@string={0x1c, 0x3, "6b00ea11e91fb559f9badb7a533f7400d111ebd1c5d162debd81"}}, {0x51, &(0x7f00000006c0)=@string={0x51, 0x3, "4bad88f22710bf36bc5550c9ae635406bdc41b7becdeac4e0acfb1e0b884d054c728d95fdc7c0983b62e66154f1de5d61b5f65fd9014b247ad1fb95fa0a0800dc35c65977d48d23fc4757a71ec7263"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44a}}, {0x100, &(0x7f0000000780)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "b9e87a1b18d666f13df560189dd4caff91ae9707d67511ed29d961c6c1acfa38f6b2b91dfc15b9a8b4c1d37d0fd83d388d2faedd6a50c79693f97d631513b6e3d6cad06b0ef77ea6c58824f63b644b4d"}}, {0x82, &(0x7f0000000940)=@string={0x82, 0x3, "a480b19e5dade0e72dddbe2b2ddfb84ee9c19a080d217b8976feb073a5445ba34eb9029ddfa576d775f43521d228caa1500e5c571c684e9beb7d6e18f8ac1472ff0812acb754bf0f7aebfa0f11b2ca82b557689f05cc9bb20a135cddbed228e0863f1a347165d7f98e44b03bb1d08a12996c867bf0852804939f3239a680d94c"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x4ff}}]}) 54.687670554s ago: executing program 8 (id=6656): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', @ifru_addrs=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}}) (async) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', @ifru_addrs=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}}) 54.571872045s ago: executing program 7 (id=6657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x2, 0xff3, 0x0, 0x0, 0x0, 0xfffffe49}) r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xc, 0xd1, 0x9, 0x2c, 0x7f, 0x3, 0x6, 0x0, 0x7c, 0x40, 0x1ea, 0x2, 0x1, 0x38, 0x2, 0x8000, 0x7, 0x400}, [{0x6, 0xdab, 0x1, 0x7fffffff, 0x8, 0x6, 0xffffffff, 0x7}, {0x5, 0x5b, 0x6, 0x10000, 0xfffffffffffffff0, 0x2, 0x8001, 0x81}], "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", ['\x00', '\x00', '\x00']}, 0x4aa) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2], 0x2}, 0x58) 54.097142994s ago: executing program 8 (id=6658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x15, r2, 0x800006, 0x6) (async) sched_setattr(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) 53.80749476s ago: executing program 2 (id=6659): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x4d, 0xffffffffffffffff, &(0x7f00000000c0)=0xffe1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="f4f20f01f1b8010000000f01d9670f01ca66bad004b005ee0fc76826c4c285ba0f0f01cf66baa100b8fa000000ef0f35", 0x30}], 0x1, 0x29, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000640)={{@my=0x0, 0x2}, {@local, 0xc}, 0x400, "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"}, 0x418, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000200)=[@set_irq_handler={0xc8, 0x20, {0x79}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x4, 0x2}}, @uexit={0x0, 0x18, 0xb}, @set_irq_handler={0xc8, 0x20, {0x5e, 0x1}}, @uexit={0x0, 0x18, 0x9200000000000000}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x32, 0xa211, 0x5}}], 0x110}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f363b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa30d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0xfff, 0x20400) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) 50.454481444s ago: executing program 6 (id=6660): write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x8, "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", 0x6, 0x3, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1}}}, 0x128) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = dup(r6) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000b40)={0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000700)={0x40, 0x3, 0xe2, "02400ed622f73b6916ef4de61b38377fba4e7ab098bc6134d93b9b6d17ba4603e5f2ded6f45820bdefcb0092f9c0fa78579921197f5d73b58314b16ddc342c64f791e35eee4efc6e8c311d0fd4d091f4a4dd685d3c8c83f9f2e378019b282c84fa6a4eeb22b5aefb469de0871bc2319cd8c33f7a6bf61b8fcbae7c3487b5020504000000000000006c0bbb122dcdc8c570b608902077bbfbe7a7d4cfa49a0f871cc67d3135a1ad705cfb160d68fb2f43390b719c987dbe55c5cab71044c6ffc765a896e3c8a9a4c902f00adbd3034ce8b162e07354dcf098410cac9f39e433c265c8"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000d00)={0x20, 0x80, 0x1c, {0x400, 0xfff, 0x41, 0x8000, 0x7, 0x8, 0x7, 0x7, 0x0, 0x6, 0x3, 0x400}}, &(0x7f0000000d40)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000d80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000dc0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000e00)={0x20, 0x89, 0x2, 0x1}}) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x4040800) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x9, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x34}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e20, @in=@local}}]}, 0x10c}}, 0x0) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xd) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r11, 0x0, 0x2000fb) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000040)) 33.17464133s ago: executing program 0 (id=6670): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0x69, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "74504de9ce05f8ed1c264c5018e453a2f464ef278420056204a6529b71b8e0e1836e"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS, @NFTA_TABLE_USERDATA={0x0, 0x6, "c05cf8c92738cd43c8e7a421b9d69aa74bc9a6a29112ba6ce6e6027df12e92efef5eea87c5c006fdd0e3d77828e405362721a0b32612bd9a71d75e0935fe808813b302a205eb178742cc87ff0143bea0ce82870e6b5fa4e2e7289d2b6bb57192b59826203a5463f167b079bab307f8dcda4044e4846d3e048f2a29be60f69361795e26b275a249c5da9eb6f3b03023ddf46ee5c041e4cc68722ef37a11e9b70888faf8c631d9253f39fd443b210c941ecfffce47249f814f0387c88be02e4b9edcbd777641692bc919788abf50b3c18fe638e54ece2638ddd32b45d9feb6c1e09d4eef89a0df08"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0xa77a53dde7fa6402, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bc8d3a675d7dd84416cf80de8648d981f34636c09185a634087caeacd6ae43c0f8286c4ba9690c46a8060f8c2c5efdd7e1ce31d4fb75388d214fa05c8e345747b6393a1fc8f666bc51fd510b5104b98f068045236959a31c380b735528cb2d206108c57c99cbeb00bd497a9be35708cbfc40d68eb609b1876f3522c441f007373eb114a6eb4491075fa27af5afe2657497fd8f0a785b5221def0ca2ef3e833a2867ee3037a1b82f83b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 36 (id=6657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x2, 0xff3, 0x0, 0x0, 0x0, 0xfffffe49}) r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xc, 0xd1, 0x9, 0x2c, 0x7f, 0x3, 0x6, 0x0, 0x7c, 0x40, 0x1ea, 0x2, 0x1, 0x38, 0x2, 0x8000, 0x7, 0x400}, [{0x6, 0xdab, 0x1, 0x7fffffff, 0x8, 0x6, 0xffffffff, 0x7}, {0x5, 0x5b, 0x6, 0x10000, 0xfffffffffffffff0, 0x2, 0x8001, 0x81}], "7da4591f69a654917fd74d0665291792b245d27f76beceabfcd955e622cc2e3c6883ccb84985ba8425c13d8cc98b3295a733c47fe259e0cadaeda6825b1e0048d6d3ec8f162da2852b085a38d2c9edfe629357960c1c28bc355b83ed5766803db5780fb099c0afa1f42f037d3726062895610ed59312ebbb318719c8ed417a6a333501fbacb47bc63606da0b8ebd1b2eded53d62395d21e4ef4b30f73d3912d9fc20c132b2badd6d679a83d1e08063d6c9a88505b1738ea61a4a8e7759c3b7da8642654b973814fbdc6b740f21c002289a5a4c0b2f39fb7a38f75510a736af98f471bc73377329ad0683d0738bccda6816ef06ada7362d6ee027", ['\x00', '\x00', '\x00']}, 0x4aa) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2], 0x2}, 0x58) kernel console output (not intermixed with test programs): 1.653996][ T5701] usb usb3-port1: unable to enumerate USB device [ 1561.666007][T30430] Cannot create hsr debugfs directory [ 1561.697114][T30453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.721444][T30453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.818805][T30453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.853955][T30453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.874837][T30453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.975820][T30453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.417616][T30504] syzkaller0: entered promiscuous mode [ 1562.428139][T30504] syzkaller0: entered allmulticast mode [ 1562.581079][T30453] hsr_slave_0: entered promiscuous mode [ 1562.601907][T30453] hsr_slave_1: entered promiscuous mode [ 1562.618910][T30453] debugfs: 'hsr0' already exists in 'hsr' [ 1562.629863][T30453] Cannot create hsr debugfs directory [ 1563.131253][T30520] libceph: resolve '0..' (ret=-3): failed [ 1563.290642][T29959] Bluetooth: hci0: command tx timeout [ 1573.750736][T28359] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1573.760429][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1574.125872][ T5701] usb 2-1: USB disconnect, device number 55 [ 1574.188128][T30552] futex_wake_op: syz.0.6448 tries to shift op by -1; fix this program [ 1574.351772][T30556] netlink: 'syz.0.6448': attribute type 8 has an invalid length. [ 1574.654013][T28359] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1574.918060][T30554] program syz.6.6447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1574.973260][ T5362] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1575.108169][T30575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1575.195712][ T5362] usb 1-1: device descriptor read/64, error -71 [ 1575.409144][T20177] hsr_slave_0: left promiscuous mode [ 1575.437284][T20177] hsr_slave_1: left promiscuous mode [ 1575.448166][T20177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.456700][ T5362] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1575.465957][T20177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.479866][T20177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.488882][T20177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.566149][T20177] veth1_macvtap: left promiscuous mode [ 1575.572513][T20177] veth0_macvtap: left promiscuous mode [ 1575.590434][ T5362] usb 1-1: device descriptor read/64, error -71 [ 1575.711083][ T5362] usb usb1-port1: attempt power cycle [ 1576.091037][ T5362] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1576.153385][ T5362] usb 1-1: device descriptor read/8, error -71 [ 1576.450790][ T5362] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1576.460200][T20177] team0 (unregistering): Port device team_slave_1 removed [ 1576.481164][ T5362] usb 1-1: device descriptor read/8, error -71 [ 1576.526957][T20177] team0 (unregistering): Port device team_slave_0 removed [ 1576.590991][ T5362] usb usb1-port1: unable to enumerate USB device [ 1576.779597][ T5291] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1577.149026][T30430] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1577.264350][T30608] libceph: resolve '0..' (ret=-3): failed [ 1577.356973][T30430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.381694][T30430] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1577.412873][T30430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.479670][T30430] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1577.587652][T30430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.665217][T30430] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1577.739815][T30430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1577.879042][T30621] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6457'. [ 1578.459709][T20177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.636814][ T5291] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1578.644962][T30453] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1578.657545][T30453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1578.688114][T30453] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1578.701285][T30453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1578.726021][T30453] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1578.741109][T30453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1578.812997][T20177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.835045][T30453] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1578.845833][T30453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1578.936351][T30650] binder: 30649:30650 ioctl 400c620e 200000000240 returned -22 [ 1578.978818][T20177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.046170][T30430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.168499][T30656] libceph: resolve '0..' (ret=-3): failed [ 1579.208100][T20177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.346904][T30430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.389754][T20290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.396944][T20290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.495138][T20290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.503226][T20290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.081978][T30453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.123337][ T5291] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1580.172362][T20177] bridge_slave_1: left allmulticast mode [ 1580.202982][T20177] bridge_slave_1: left promiscuous mode [ 1580.219690][T20177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.255100][T20177] bridge_slave_0: left allmulticast mode [ 1580.268049][T20177] bridge_slave_0: left promiscuous mode [ 1580.285471][T20177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.321613][T20177] veth0_to_bond: left allmulticast mode [ 1580.330562][T20177] veth0_to_bond: left promiscuous mode [ 1580.340065][T20177] bridge1: port 2(veth0_to_bond) entered disabled state [ 1580.361313][T20177] veth3: left allmulticast mode [ 1580.368593][T20177] veth3: left promiscuous mode [ 1580.381041][T20177] bridge1: port 1(veth3) entered disabled state [ 1580.538930][T25323] IPVS: starting estimator thread 0... [ 1580.642374][T30683] IPVS: using max 36 ests per chain, 86400 per kthread [ 1580.737213][T20177] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1580.820412][ T5362] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1580.857539][T20177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.868722][T20177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.880195][T20177] bond0 (unregistering): Released all slaves [ 1581.018775][ T5362] usb 1-1: Using ep0 maxpacket: 16 [ 1581.027845][ T5362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1581.081006][ T5362] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1581.094266][T30453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.102192][ T5362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.121294][ T5362] usb 1-1: Product: syz [ 1581.128985][T20177] tipc: Left network mode [ 1581.143773][ T5362] usb 1-1: Manufacturer: syz [ 1581.152845][T20288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.160069][T20288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.169340][ T5362] usb 1-1: SerialNumber: syz [ 1581.186828][ T5362] usb 1-1: config 0 descriptor?? [ 1581.195243][T20177] IPVS: stopping backup sync thread 29433 ... [ 1581.219260][ T5362] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1581.237683][T20288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.244965][T20288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.254729][ T5362] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1581.477349][T30430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.837342][ T5362] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1582.315766][ T5362] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1582.348952][ T5362] em28xx 1-1:0.0: board has no eeprom [ 1582.396796][ T5291] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1582.515142][T30430] veth0_vlan: entered promiscuous mode [ 1582.699634][T20177] hsr_slave_0: left promiscuous mode [ 1582.716667][T20177] hsr_slave_1: left promiscuous mode [ 1582.722465][ T5362] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1582.734306][ T5362] em28xx 1-1:0.0: dvb set to bulk mode. [ 1582.740751][T20177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.750720][T11768] em28xx 1-1:0.0: Binding DVB extension [ 1582.760471][T20177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.776210][ T5362] usb 1-1: USB disconnect, device number 70 [ 1582.788691][T20177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.807782][ T5362] em28xx 1-1:0.0: Disconnecting em28xx [ 1582.822353][T20177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.888410][T11768] em28xx 1-1:0.0: Registering input extension [ 1582.909129][ T5362] em28xx 1-1:0.0: Closing input extension [ 1582.915720][T20177] veth1_macvtap: left promiscuous mode [ 1582.930772][T20177] veth0_macvtap: left promiscuous mode [ 1582.940949][T20177] veth1_vlan: left promiscuous mode [ 1582.955926][T20177] veth0_vlan: left promiscuous mode [ 1583.003957][ T5362] em28xx 1-1:0.0: Freeing device [ 1583.137124][T20177] team0 (unregistering): Port device vlan2 removed [ 1583.494949][T20177] team0 (unregistering): Port device team_slave_1 removed [ 1583.529639][T20177] team0 (unregistering): Port device team_slave_0 removed [ 1583.740944][T30430] veth1_vlan: entered promiscuous mode [ 1583.761295][T30453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.949612][T30430] veth0_macvtap: entered promiscuous mode [ 1583.980999][T30430] veth1_macvtap: entered promiscuous mode [ 1584.008566][T30453] veth0_vlan: entered promiscuous mode [ 1584.086020][T30453] veth1_vlan: entered promiscuous mode [ 1584.111562][T30430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.188049][T30430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.278396][T30453] veth0_macvtap: entered promiscuous mode [ 1584.297614][T20295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.308622][T20295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.354914][T20295] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.364865][T20295] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.445036][T30453] veth1_macvtap: entered promiscuous mode [ 1584.979386][T30453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.148459][T20291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.165059][T30453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.178113][T20291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.322478][ T5701] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1585.338800][T20291] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.373596][T20291] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.390197][ T5291] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1585.402730][T20291] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.479855][T20176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.484078][T20291] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.500084][ T5701] usb 1-1: device descriptor read/all, error -61 [ 1585.526121][T20176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.642134][ T5701] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1585.790389][ T5701] usb 1-1: device descriptor read/64, error -71 [ 1585.827864][T20293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.870137][T20293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.925055][ T5701] usb usb1-port1: attempt power cycle [ 1586.007501][T20295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.028005][T20295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.130575][T28359] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1586.279028][T30753] loop3: detected capacity change from 0 to 7 [ 1586.285553][ T5701] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1586.297224][T28359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1586.307949][T30753] Dev loop3: unable to read RDB block 7 [ 1586.316178][T30753] loop3: AHDI p3 p4 [ 1586.322894][T28359] usb 3-1: config 8 has an invalid interface number: 178 but max is 2 [ 1586.334350][ T5701] usb 1-1: device descriptor read/8, error -71 [ 1586.341457][T30753] loop3: partition table partially beyond EOD, truncated [ 1586.348753][T28359] usb 3-1: config 8 has an invalid interface number: 112 but max is 2 [ 1586.358596][T30753] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1586.366851][T28359] usb 3-1: config 8 has no interface number 1 [ 1586.388629][T28359] usb 3-1: config 8 has no interface number 2 [ 1586.422887][T28359] usb 3-1: too many endpoints for config 8 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1586.485278][T28359] usb 3-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1586.533521][T28359] usb 3-1: config 8 interface 178 has no altsetting 0 [ 1586.551750][T28359] usb 3-1: config 8 interface 112 has no altsetting 0 [ 1586.578454][T28359] usb 3-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=c5.50 [ 1586.587787][ T5701] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1586.609683][T28359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.626619][ T5701] usb 1-1: device descriptor read/8, error -71 [ 1586.639401][T30759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1586.658988][T28359] usb 3-1: Product: syz [ 1586.678167][T28359] usb 3-1: Manufacturer: syz [ 1586.698121][T28359] usb 3-1: SerialNumber: syz [ 1586.731033][T30762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1586.771449][ T5701] usb usb1-port1: unable to enumerate USB device [ 1586.916432][T14701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1586.923403][ T6477] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1586.953011][T14701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1586.968013][ T5701] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 1586.977977][T14701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1586.987791][T14701] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1587.002122][T14701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1587.080554][ T5701] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1587.124037][ T6477] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1587.181126][T30762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1587.218143][ T6477] usb 9-1: not running at top speed; connect to a high speed hub [ 1587.224960][T20295] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.247453][ T6477] usb 9-1: config 8 has an invalid interface number: 227 but max is 1 [ 1587.283687][T20295] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.303620][ T6477] usb 9-1: config 8 has an invalid interface number: 123 but max is 1 [ 1587.329035][ T6477] usb 9-1: config 8 has no interface number 0 [ 1587.335697][T20295] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.345455][ T6477] usb 9-1: config 8 has no interface number 1 [ 1587.366694][ T6477] usb 9-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1587.397132][T20295] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.446571][ T6477] usb 9-1: config 8 interface 227 has no altsetting 0 [ 1587.494834][ T6477] usb 9-1: config 8 interface 123 has no altsetting 0 [ 1587.547361][ T6477] usb 9-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 1587.583805][ T6477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.615148][ T6477] usb 9-1: Product: syz [ 1587.629598][ T6477] usb 9-1: Manufacturer: syz [ 1587.642145][ T6477] usb 9-1: SerialNumber: syz [ 1587.682174][ T6477] usb 9-1: Interface #227 referenced by multiple IADs [ 1587.719270][ T6477] usb 9-1: Interface #123 referenced by multiple IADs [ 1587.783311][T30775] libceph: resolve '0..' (ret=-3): failed [ 1588.022631][ T6477] cp210x 9-1:8.227: cp210x converter detected [ 1588.036387][ T6477] cp210x 9-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 1588.044422][ T6477] cp210x 9-1:8.227: querying part number failed [ 1588.057543][ T6477] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1588.079988][ T6477] cp210x 9-1:8.123: cp210x converter detected [ 1588.096609][ T6477] cp210x 9-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 1588.115764][ T6477] cp210x 9-1:8.123: querying part number failed [ 1588.161031][ T6477] usb 9-1: cp210x converter now attached to ttyUSB1 [ 1588.183399][ T6477] usb 9-1: USB disconnect, device number 2 [ 1588.227625][ T6477] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1588.254909][ T6477] cp210x 9-1:8.227: device disconnected [ 1588.292052][ T6477] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1588.314636][ T6477] cp210x 9-1:8.123: device disconnected [ 1588.690433][ T5291] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1589.141621][T29959] Bluetooth: hci5: command tx timeout [ 1589.200433][T12462] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1589.370836][T12462] usb 9-1: Using ep0 maxpacket: 8 [ 1589.384942][T12462] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 1589.401321][T12462] usb 9-1: config 0 has no interface number 0 [ 1589.408492][T12462] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.435556][T12462] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1589.468156][T12462] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1589.504484][T12462] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.556802][T12462] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1589.576950][T12462] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.608681][T12462] usb 9-1: Product: syz [ 1589.630446][T12462] usb 9-1: Manufacturer: syz [ 1589.647842][T12462] usb 9-1: SerialNumber: syz [ 1589.674078][T12462] usb 9-1: config 0 descriptor?? [ 1589.908193][T20291] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.926014][T12462] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1589.950776][T20291] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.055910][T30791] geneve4: entered allmulticast mode [ 1590.152449][T30769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.171948][T30769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.184709][T30769] bridge_slave_0: entered allmulticast mode [ 1590.194540][T30769] bridge_slave_0: entered promiscuous mode [ 1590.228522][T30769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.239604][T30769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.247716][T30769] bridge_slave_1: entered allmulticast mode [ 1590.257424][T30769] bridge_slave_1: entered promiscuous mode [ 1590.290514][ T5701] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1590.419917][T20291] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.420505][ T5701] usb 1-1: device descriptor read/64, error -71 [ 1590.437303][ T5735] usb 9-1: USB disconnect, device number 3 [ 1590.454316][T20291] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.743194][ T5701] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1590.770232][T30769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.858379][T30769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.900603][ T5701] usb 1-1: device descriptor read/64, error -71 [ 1590.988547][T28359] usb 3-1: selecting invalid altsetting 1 [ 1591.017232][T28359] usb 3-1: Could not set interface, error -22 [ 1591.040707][ T5701] usb usb1-port1: attempt power cycle [ 1591.072097][T28359] usb 3-1: USB disconnect, device number 39 [ 1591.211801][T29959] Bluetooth: hci5: command tx timeout [ 1591.239876][T30822] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6483'. [ 1591.246463][T20291] team0: Port device netdevsim1 removed [ 1591.264710][T20291] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.275893][T20291] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.391157][ T5701] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1591.461417][ T5701] usb 1-1: device descriptor read/8, error -71 [ 1591.512766][T30827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6484'. [ 1591.516614][T20291] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.532820][T20291] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.551474][T30769] team0: Port device team_slave_0 added [ 1591.559702][ T5291] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1591.579791][T30827] geneve0: entered promiscuous mode [ 1591.605176][T30769] team0: Port device team_slave_1 added [ 1591.624391][T30828] tipc: Enabling of bearer rejected, failed to enable media [ 1591.686792][T30836] libceph: resolve '0..' (ret=-3): failed [ 1591.714696][T30769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.721540][ T5701] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1591.721990][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.775073][T30769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.796624][T30769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.801599][ T5701] usb 1-1: device descriptor read/8, error -71 [ 1591.805942][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.844118][T30769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.950909][ T5701] usb usb1-port1: unable to enumerate USB device [ 1591.960217][T30841] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1592.271311][T12462] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1592.310238][T30769] hsr_slave_0: entered promiscuous mode [ 1592.330058][T30769] hsr_slave_1: entered promiscuous mode [ 1592.344171][T30769] debugfs: 'hsr0' already exists in 'hsr' [ 1592.351529][T30769] Cannot create hsr debugfs directory [ 1592.435725][T12462] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1592.454917][T12462] usb 9-1: not running at top speed; connect to a high speed hub [ 1592.485858][T12462] usb 9-1: config 8 has an invalid interface number: 227 but max is 1 [ 1592.500988][T12462] usb 9-1: config 8 has an invalid interface number: 123 but max is 1 [ 1592.538434][T12462] usb 9-1: config 8 has no interface number 0 [ 1592.557320][T12462] usb 9-1: config 8 has no interface number 1 [ 1592.584393][T12462] usb 9-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1592.628739][T12462] usb 9-1: config 8 interface 227 has no altsetting 0 [ 1592.675787][T12462] usb 9-1: config 8 interface 123 has no altsetting 0 [ 1592.713316][T12462] usb 9-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 1592.724417][T12462] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.752651][T12462] usb 9-1: Product: syz [ 1592.769644][T12462] usb 9-1: Manufacturer: syz [ 1592.785372][T12462] usb 9-1: SerialNumber: syz [ 1592.825179][T12462] usb 9-1: Interface #227 referenced by multiple IADs [ 1592.846371][T12462] usb 9-1: Interface #123 referenced by multiple IADs [ 1593.007733][T20291] bridge_slave_1: left promiscuous mode [ 1593.020048][T20291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.053114][T20291] bridge_slave_0: left allmulticast mode [ 1593.060064][T20291] bridge_slave_0: left promiscuous mode [ 1593.066644][T20291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.112846][T20291] pimreg3: left allmulticast mode [ 1593.155587][T12462] cp210x 9-1:8.227: cp210x converter detected [ 1593.181298][T12462] cp210x 9-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 1593.196569][T12462] cp210x 9-1:8.227: querying part number failed [ 1593.216968][T30864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1593.228914][T12462] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1593.242750][T30863] fuse: Bad value for 'fd' [ 1593.261822][T12462] cp210x 9-1:8.123: cp210x converter detected [ 1593.286795][T12462] cp210x 9-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 1593.305496][T12462] cp210x 9-1:8.123: querying part number failed [ 1593.329134][T29959] Bluetooth: hci5: command tx timeout [ 1593.344279][T12462] usb 9-1: cp210x converter now attached to ttyUSB1 [ 1593.368322][T12462] usb 9-1: USB disconnect, device number 4 [ 1593.393490][T12462] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1593.416913][T12462] cp210x 9-1:8.227: device disconnected [ 1593.431218][T12462] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1593.442716][T12462] cp210x 9-1:8.123: device disconnected [ 1593.509300][T20291] ip6gretap0 (unregistering): left allmulticast mode [ 1593.520750][ T5735] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1593.564532][T30872] loop3: detected capacity change from 0 to 7 [ 1593.574383][T30872] Dev loop3: unable to read RDB block 7 [ 1593.580126][T30872] loop3: AHDI p3 p4 [ 1593.585638][T30872] loop3: partition table partially beyond EOD, truncated [ 1593.594220][T30872] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1593.690814][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 1593.712890][ T5735] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1593.735042][ T5735] usb 1-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.783248][ T5735] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1593.810976][ T5735] usb 1-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40 [ 1593.841134][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.867524][ T5735] usb 1-1: Manufacturer: ဇ [ 1593.891751][ T5735] usb 1-1: SerialNumber: 緍ᰡ퓣旁䠨떄퐺鰥ᄭ킇뼕⬃ᕣ例䋕핯ꛅॉ䬺媟ꣶừ୻晱䷋퓧憎觚㳋ꖈ觮㲿鸹鱙珉ﶢ⯺罍绬ヌ㚿넡﷼ፚ䌽乌艼속뢻䐆ꜹ膏ႅ⿱Ұ [ 1594.068316][T30885] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1594.156872][T20291] bridge0 (unregistering): left promiscuous mode [ 1594.297994][T20291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.307284][T20291] bond_slave_0: left promiscuous mode [ 1594.316856][T20291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.326586][T20291] bond_slave_1: left promiscuous mode [ 1594.335462][T20291] bond0 (unregistering): Released all slaves [ 1594.347850][T20291] bond1 (unregistering): Released all slaves [ 1594.366202][T20291] bond2 (unregistering): Released all slaves [ 1594.380838][T12462] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1594.383684][T20291] bond3 (unregistering): Released all slaves [ 1594.407362][T20291] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1594.418733][T20291] veth0_to_bond: left promiscuous mode [ 1594.437387][T20291] veth0_to_bond: left allmulticast mode [ 1594.444981][T20291] bond4 (unregistering): Released all slaves [ 1594.461807][T20291] bond5 (unregistering): Released all slaves [ 1594.560356][T12462] usb 9-1: Using ep0 maxpacket: 32 [ 1594.602479][T12462] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1594.618342][ T5735] usbhid 1-1:1.0: can't add hid device: -71 [ 1594.630147][T12462] usb 9-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 1594.642300][ T5735] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1594.650489][T12462] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.661355][T12462] usb 9-1: Product: syz [ 1594.694178][ T5735] usb 1-1: USB disconnect, device number 79 [ 1594.702911][T12462] usb 9-1: Manufacturer: syz [ 1594.707653][T12462] usb 9-1: SerialNumber: syz [ 1594.989941][T12462] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1595.001712][T12462] usb 9-1: MIDIStreaming interface descriptor not found [ 1595.059618][T20291] tipc: Disabling bearer [ 1595.075368][T20291] tipc: Left network mode [ 1595.114650][T12462] usb 9-1: USB disconnect, device number 5 [ 1595.218543][T30544] udevd[30544]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1595.371933][T29959] Bluetooth: hci5: command tx timeout [ 1595.531528][T30903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1595.747096][T30897] syzkaller1: entered promiscuous mode [ 1595.780626][T30897] syzkaller1: entered allmulticast mode [ 1595.994117][T28359] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1596.025432][T30913] syzkaller1: entered promiscuous mode [ 1596.044912][T30913] syzkaller1: entered allmulticast mode [ 1596.197871][T28359] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 1596.217472][T28359] usb 1-1: config 253 has no interface number 0 [ 1596.232192][T28359] usb 1-1: config 253 interface 130 has no altsetting 0 [ 1596.312551][T28359] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1596.323318][T28359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.340113][T28359] usb 1-1: Product: syz [ 1596.347509][T28359] usb 1-1: Manufacturer: syz [ 1596.390947][T28359] usb 1-1: SerialNumber: syz [ 1596.577143][T30926] loop3: detected capacity change from 0 to 7 [ 1596.621116][T30926] Dev loop3: unable to read RDB block 7 [ 1596.628059][T30926] loop3: AHDI p3 p4 [ 1596.633262][T30926] loop3: partition table partially beyond EOD, truncated [ 1596.641870][T30926] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1596.875443][T30930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1596.968025][T30932] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1597.089786][T20291] hsr_slave_0: left promiscuous mode [ 1597.124673][T20291] hsr_slave_1: left promiscuous mode [ 1597.153732][T28359] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1597.180561][T12449] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1597.190738][T20291] veth1_macvtap: left promiscuous mode [ 1597.202523][T20291] veth0_macvtap: left promiscuous mode [ 1597.217515][T20291] veth1_vlan: left promiscuous mode [ 1597.262307][T20291] veth0_vlan: left promiscuous mode [ 1597.441222][T12449] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1597.449925][T12449] usb 3-1: not running at top speed; connect to a high speed hub [ 1597.458493][T28359] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1597.467410][T28359] dib0700: firmware download failed at 7 with -22 [ 1597.475093][T12449] usb 3-1: config 8 has an invalid interface number: 227 but max is 1 [ 1597.484596][T12449] usb 3-1: config 8 has an invalid interface number: 123 but max is 1 [ 1597.501832][T12449] usb 3-1: config 8 has no interface number 0 [ 1597.515780][T28359] usb 1-1: USB disconnect, device number 80 [ 1597.528504][T12449] usb 3-1: config 8 has no interface number 1 [ 1597.540882][T12449] usb 3-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1597.543304][ T5632] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1597.553952][T12449] usb 3-1: config 8 interface 227 has no altsetting 0 [ 1597.599064][T12449] usb 3-1: config 8 interface 123 has no altsetting 0 [ 1597.612433][T12449] usb 3-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 1597.628063][T12449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.639730][T12449] usb 3-1: Product: syz [ 1597.653744][T12449] usb 3-1: Manufacturer: syz [ 1597.659529][T12449] usb 3-1: SerialNumber: syz [ 1597.681311][T12449] usb 3-1: Interface #227 referenced by multiple IADs [ 1597.688463][T12449] usb 3-1: Interface #123 referenced by multiple IADs [ 1597.730345][ T5632] usb 9-1: Using ep0 maxpacket: 8 [ 1597.741876][ T5632] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1597.751445][ T5632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.759632][ T5632] usb 9-1: Product: syz [ 1597.764125][ T5632] usb 9-1: Manufacturer: syz [ 1597.768918][ T5632] usb 9-1: SerialNumber: syz [ 1597.782942][ T5632] usb 9-1: config 0 descriptor?? [ 1597.919937][T12449] cp210x 3-1:8.227: cp210x converter detected [ 1597.929254][T12449] cp210x 3-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 1597.937945][T20291] team0 (unregistering): Port device team_slave_1 removed [ 1597.948565][T12449] cp210x 3-1:8.227: querying part number failed [ 1597.966200][T12449] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1597.976559][T20291] team0 (unregistering): Port device team_slave_0 removed [ 1597.990044][T12449] cp210x 3-1:8.123: cp210x converter detected [ 1597.991891][ T5632] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1598.013984][T12449] cp210x 3-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 1598.030331][T12449] cp210x 3-1:8.123: querying part number failed [ 1598.044591][T12449] usb 3-1: cp210x converter now attached to ttyUSB1 [ 1598.076072][T12449] usb 3-1: USB disconnect, device number 40 [ 1598.101559][T12449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1598.115529][T12449] cp210x 3-1:8.227: device disconnected [ 1598.136422][T12449] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1598.160901][T12449] cp210x 3-1:8.123: device disconnected [ 1598.707846][T30956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1598.870196][T20291] IPVS: stop unused estimator thread 0... [ 1598.892520][T30769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1598.944765][ T5632] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1598.989049][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1599.003111][T12462] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1599.006283][T30769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1599.039365][ T5632] usb 9-1: USB disconnect, device number 6 [ 1599.108044][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1599.145730][T30769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1599.166165][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1599.180099][T30966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1599.189623][T30769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1599.208442][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1599.221171][T12462] usb 1-1: Using ep0 maxpacket: 16 [ 1599.239044][T12462] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1599.278997][T12462] usb 1-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1599.337944][T12462] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1599.368611][T12462] usb 1-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40 [ 1599.397859][T12462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.413372][T12462] usb 1-1: Product: 緍ᰡ퓣旁䠨떄퐺鰥ᄭ킇뼕⬃ᕣ例䋕핯ꛅॉ䬺媟ꣶừ୻晱䷋퓧憎觚㳋ꖈ觮㲿鸹鱙珉ﶢ⯺罍绬ヌ㚿넡﷼ፚ䌽乌艼속뢻䐆ꜹ膏ႅ⿱Ұ [ 1599.488298][T12462] usb 1-1: Manufacturer: ࠌ [ 1599.511946][T12462] usb 1-1: SerialNumber: 鑻㚺∓嵊抢巃튕雊㉙쮹碎狪䪖ﳡ牨즠源❗뮻쨂ണ笘囹稓ꋔ瘈笵໋穡ᣜ濄釳屖ꮭࠠ⣈䍢ଵᘪ洲窊ᗪ⥇ᦴ쉡땗䮸告鼮之夀唊耺꓁≤뉼䥋䥒⚪鮵峨쮞섾쑸뺰㴣⛚㳟靅䠍ガẐ≩溫ㄝ虃졬㪝糐ꆮ⃹¦쉧䳍鱐瞞ᱧ䝢钰淁瀍ᔌ㶈ة೶䧣 [ 1599.636379][T30983] libceph: resolve '0..' (ret=-3): failed [ 1599.785770][T30769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.998187][T12462] usbhid 1-1:1.0: can't add hid device: -71 [ 1599.999483][T30769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.052092][T12462] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1600.075366][T20177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.082616][T20177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.135101][T12462] usb 1-1: USB disconnect, device number 81 [ 1600.136347][T20177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.148315][T20177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.499665][T30769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.726176][T30769] veth0_vlan: entered promiscuous mode [ 1600.739937][T31001] loop3: detected capacity change from 0 to 7 [ 1600.775084][T30769] veth1_vlan: entered promiscuous mode [ 1600.788103][T31001] Dev loop3: unable to read RDB block 7 [ 1600.850827][T31001] loop3: AHDI p3 p4 [ 1600.897244][T31001] loop3: partition table partially beyond EOD, truncated [ 1600.924007][T30769] veth0_macvtap: entered promiscuous mode [ 1600.939642][T31001] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1600.959384][T30769] veth1_macvtap: entered promiscuous mode [ 1601.046336][T31008] libceph: resolve '0..' (ret=-3): failed [ 1601.097342][T30769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.180774][T30769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.252684][T20176] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.307364][T20176] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.356354][T20176] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.413408][T20176] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.499549][T31021] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1601.873610][T20293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.929012][T20293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.981999][ T6477] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1602.038859][T20289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.066948][T20289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.162404][ T6477] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1602.199985][ T6477] usb 3-1: not running at top speed; connect to a high speed hub [ 1602.239705][ T6477] usb 3-1: config 8 has an invalid interface number: 227 but max is 1 [ 1602.281173][ T6477] usb 3-1: config 8 has an invalid interface number: 123 but max is 1 [ 1602.323999][ T6477] usb 3-1: config 8 has no interface number 0 [ 1602.343809][ T6477] usb 3-1: config 8 has no interface number 1 [ 1602.355281][ T6477] usb 3-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1602.390160][ T6477] usb 3-1: config 8 interface 227 has no altsetting 0 [ 1602.419342][ T6477] usb 3-1: config 8 interface 123 has no altsetting 0 [ 1602.459920][ T6477] usb 3-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 1602.510858][ T6477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.545607][ T6477] usb 3-1: Product: syz [ 1602.557455][ T6477] usb 3-1: Manufacturer: syz [ 1602.591700][ T6477] usb 3-1: SerialNumber: syz [ 1602.610480][ T5362] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1602.611357][ T6477] usb 3-1: Interface #227 referenced by multiple IADs [ 1602.659997][ T6477] usb 3-1: Interface #123 referenced by multiple IADs [ 1602.830374][ T5362] usb 9-1: Using ep0 maxpacket: 16 [ 1602.859779][ T5362] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.889367][T31034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6528'. [ 1602.916438][ T5362] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1602.958689][ T5362] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1602.994120][ T5362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.995560][ T6477] cp210x 3-1:8.227: cp210x converter detected [ 1603.023966][ T5362] usb 9-1: Product: syz [ 1603.038834][ T5362] usb 9-1: Manufacturer: syz [ 1603.043426][ T6477] cp210x 3-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 1603.064517][ T5362] usb 9-1: SerialNumber: syz [ 1603.067159][ T6477] cp210x 3-1:8.227: querying part number failed [ 1603.105606][ T5362] usb 9-1: 0:2 : does not exist [ 1603.114778][ T6477] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1603.158505][ T6477] cp210x 3-1:8.123: cp210x converter detected [ 1603.187317][ T6477] cp210x 3-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 1603.208671][ T6477] cp210x 3-1:8.123: querying part number failed [ 1603.239846][ T6477] usb 3-1: cp210x converter now attached to ttyUSB1 [ 1603.284537][ T6477] usb 3-1: USB disconnect, device number 41 [ 1603.306541][T31032] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1603.345939][ T6477] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1603.362778][ T6477] cp210x 3-1:8.227: device disconnected [ 1603.384098][ T6477] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1603.408953][ T6477] cp210x 3-1:8.123: device disconnected [ 1603.420995][T12458] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1603.590381][T12458] usb 1-1: Using ep0 maxpacket: 16 [ 1603.603358][T12458] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1603.626377][T12458] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1603.649319][T12458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.664728][T31062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1603.669776][T12458] usb 1-1: Product: syz [ 1603.690126][T12458] usb 1-1: Manufacturer: syz [ 1603.698741][T12458] usb 1-1: SerialNumber: syz [ 1603.716629][T12458] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1603.724457][T12458] r8152-cfgselector 1-1: config 0 descriptor?? [ 1603.925552][ T5362] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1603.943922][ T6477] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1603.993147][T12458] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1604.019184][T12458] r8152-cfgselector 1-1: No union descriptors [ 1604.068951][T12458] r8152-cfgselector 1-1: USB disconnect, device number 82 [ 1604.103292][ T5362] usb 9-1: USB disconnect, device number 7 [ 1604.111986][ T6477] usb 3-1: Using ep0 maxpacket: 16 [ 1604.137660][ T6477] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1604.169199][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1604.203981][ T6477] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1604.220483][ T6477] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1604.239003][ T6477] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40 [ 1604.250148][ T6477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.259807][ T6477] usb 3-1: Product: 緍ᰡ퓣旁䠨떄퐺鰥ᄭ킇뼕⬃ᕣ例䋕핯ꛅॉ䬺媟ꣶừ୻晱䷋퓧憎觚㳋ꖈ觮㲿鸹鱙珉ﶢ⯺罍绬ヌ㚿넡﷼ፚ䌽乌艼속뢻䐆ꜹ膏ႅ⿱Ұ [ 1604.286115][ T6477] usb 3-1: Manufacturer: ࠌ [ 1604.291636][ T6477] usb 3-1: SerialNumber: 鑻㚺∓嵊抢巃튕雊㉙쮹碎狪䪖ﳡ牨즠源❗뮻쨂ണ笘囹稓ꋔ瘈笵໋穡ᣜ濄釳屖ꮭࠠ⣈䍢ଵᘪ洲窊ᗪ⥇ᦴ쉡땗䮸告鼮之夀唊耺꓁≤뉼䥋䥒⚪鮵峨쮞섾쑸뺰㴣⛚㳟靅䠍ガẐ≩溫ㄝ虃졬㪝糐ꆮ⃹¦쉧䳍鱐瞞ᱧ䝢钰淁瀍ᔌ㶈ة೶䧣 [ 1604.297997][T31069] netlink: 'syz.8.6532': attribute type 1 has an invalid length. [ 1604.376583][T31069] vlan2: entered allmulticast mode [ 1604.382061][T31069] virt_wifi0: entered allmulticast mode [ 1604.630291][ T6477] usbhid 3-1:1.0: can't add hid device: -71 [ 1604.637668][ T6477] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1604.669769][ T6477] usb 3-1: USB disconnect, device number 42 [ 1605.339993][T20291] tipc: Subscription rejected, illegal request [ 1605.362839][T31090] binder: 31089:31090 ioctl c00c620f 200000000200 returned -22 [ 1605.500373][T12462] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1605.634855][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1605.672435][T12462] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.697317][T31099] bridge1: entered promiscuous mode [ 1605.703053][T12462] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 24 [ 1605.713710][T12462] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1605.727466][T12462] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1605.739128][T12462] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1605.755623][T12462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.774181][T12462] usb 1-1: Product: syz [ 1605.778498][T12462] usb 1-1: Manufacturer: syz [ 1605.786300][T12462] usb 1-1: SerialNumber: syz [ 1605.797351][T12462] usb 1-1: config 0 descriptor?? [ 1605.805147][T31081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1605.853014][T31105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1605.874447][T31101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1606.052703][T28359] usb 1-1: USB disconnect, device number 83 [ 1606.180549][ T5362] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1606.342980][ T5362] usb 3-1: Using ep0 maxpacket: 16 [ 1606.354196][ T5362] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1606.373259][ T5362] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1606.387936][ T5362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.405137][ T5362] usb 3-1: Product: syz [ 1606.415233][ T5362] usb 3-1: Manufacturer: syz [ 1606.432188][ T5362] usb 3-1: SerialNumber: syz [ 1606.454325][ T5362] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1606.467216][ T5362] r8152-cfgselector 3-1: config 0 descriptor?? [ 1606.691556][ T5362] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1606.735474][ T5362] r8152-cfgselector 3-1: No union descriptors [ 1606.765904][ T5362] r8152-cfgselector 3-1: USB disconnect, device number 43 [ 1607.237624][T31116] sctp: [Deprecated]: syz.0.6548 (pid 31116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1607.237624][T31116] Use struct sctp_sack_info instead [ 1607.381492][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.388233][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.885961][T31160] loop3: detected capacity change from 0 to 7 [ 1614.907584][T31160] Dev loop3: unable to read RDB block 7 [ 1614.915458][T31160] loop3: AHDI p3 p4 [ 1614.920068][T31160] loop3: partition table partially beyond EOD, truncated [ 1614.929282][T31160] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1614.955436][T31163] FAULT_INJECTION: forcing a failure. [ 1614.955436][T31163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.028995][T31163] CPU: 1 UID: 0 PID: 31163 Comm: syz.8.6559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1615.029023][T31163] Tainted: [L]=SOFTLOCKUP [ 1615.029029][T31163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1615.029039][T31163] Call Trace: [ 1615.029135][T31163] [ 1615.029206][T31163] dump_stack_lvl+0xe8/0x150 [ 1615.029354][T31163] should_fail_ex+0x412/0x560 [ 1615.029478][T31163] _copy_from_user+0x2d/0xb0 [ 1615.029535][T31163] ___sys_recvmsg+0x175/0x590 [ 1615.029635][T31163] ? __pfx____sys_recvmsg+0x10/0x10 [ 1615.029686][T31163] ? __fget_files+0x2a/0x420 [ 1615.029746][T31163] ? __fget_files+0x3a0/0x420 [ 1615.029783][T31163] do_recvmmsg+0x334/0x800 [ 1615.029807][T31163] ? __pfx_do_recvmmsg+0x10/0x10 [ 1615.029833][T31163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1615.029957][T31163] __x64_sys_recvmmsg+0x198/0x250 [ 1615.029980][T31163] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1615.030006][T31163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.030046][T31163] do_syscall_64+0x15f/0x560 [ 1615.030088][T31163] ? trace_irq_disable+0x3b/0x140 [ 1615.030136][T31163] ? clear_bhb_loop+0x40/0x90 [ 1615.030158][T31163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.030177][T31163] RIP: 0033:0x7f4a4c19ce59 [ 1615.030203][T31163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.030252][T31163] RSP: 002b:00007f4a4cf9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1615.030279][T31163] RAX: ffffffffffffffda RBX: 00007f4a4c415fa0 RCX: 00007f4a4c19ce59 [ 1615.030291][T31163] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 0000000000000004 [ 1615.030301][T31163] RBP: 00007f4a4cf9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.030312][T31163] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 1615.030322][T31163] R13: 00007f4a4c416038 R14: 00007f4a4c415fa0 R15: 00007f4a4c53fa48 [ 1615.030348][T31163] [ 1615.361992][T31173] netlink: 'syz.0.6561': attribute type 1 has an invalid length. [ 1615.380390][T12458] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1615.405969][T31173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1615.445759][T31173] vlan4: entered allmulticast mode [ 1615.451432][T31173] bond3: entered allmulticast mode [ 1615.540536][T12458] usb 3-1: Using ep0 maxpacket: 16 [ 1615.557210][T12458] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1615.576114][T12458] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1615.593595][T12458] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1615.609466][T12458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.629744][T12458] usb 3-1: Product: syz [ 1615.639895][T12458] usb 3-1: Manufacturer: syz [ 1615.650787][T12458] usb 3-1: SerialNumber: syz [ 1615.672244][T12458] usb 3-1: config 0 descriptor?? [ 1615.909576][T12458] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input180 [ 1616.090515][T12449] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1616.222892][T12458] rc_core: IR keymap rc-imon-pad not found [ 1616.241875][T12458] Registered IR keymap rc-empty [ 1616.250455][T12449] usb 9-1: Using ep0 maxpacket: 16 [ 1616.254402][T12458] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1616.262123][T12449] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1616.280063][T12458] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1616.287898][T12449] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1616.314144][T12449] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.331482][T12449] usb 9-1: Product: syz [ 1616.333384][T12458] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1616.340720][T12449] usb 9-1: Manufacturer: syz [ 1616.355065][T12449] usb 9-1: SerialNumber: syz [ 1616.374627][T12449] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1616.379723][T12458] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input181 [ 1616.398358][T12449] r8152-cfgselector 9-1: config 0 descriptor?? [ 1616.415486][T12458] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:44> initialized [ 1616.647239][T12449] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1616.677277][T12449] r8152-cfgselector 9-1: No union descriptors [ 1616.727799][T12449] r8152-cfgselector 9-1: USB disconnect, device number 8 [ 1617.082672][T31220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.092172][T31220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.398833][T31222] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1617.407991][T31222] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1617.416787][T31222] veth0_to_bridge: entered allmulticast mode [ 1617.429862][T31222] veth0_to_bridge: entered promiscuous mode [ 1617.445339][T31222] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1617.475590][T31222] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1617.482937][T31222] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1617.770593][T12449] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1617.950751][T12449] usb 1-1: Using ep0 maxpacket: 8 [ 1617.965965][T12449] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.995893][T12449] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.028022][T12449] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1618.055668][T12449] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1618.074847][T12449] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1618.097615][T12449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.134604][T12449] usb 1-1: config 0 descriptor?? [ 1618.169117][T31236] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1618.177403][T31236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1618.189927][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1618.198620][T31024] usb 3-1: USB disconnect, device number 44 [ 1618.328323][T31236] vhci_hcd vhci_hcd.0: Device attached [ 1618.587998][T12445] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1618.615865][T31226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.646285][T31226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.673208][T31226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.707820][T31226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.757546][T31239] vhci_hcd: connection reset by peer [ 1618.793733][T20293] vhci_hcd vhci_hcd.7: stop threads [ 1618.839997][T20293] vhci_hcd vhci_hcd.7: release socket [ 1618.873017][T20293] vhci_hcd vhci_hcd.7: disconnect device [ 1619.006090][T12449] lenovo 0003:17EF:60A4.0077: unknown main item tag 0x2 [ 1619.037165][T12449] lenovo 0003:17EF:60A4.0077: unknown main item tag 0x0 [ 1619.058178][T12449] lenovo 0003:17EF:60A4.0077: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.0-1/input0 [ 1619.103645][T25323] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1619.276191][T25323] usb 3-1: device descriptor read/64, error -71 [ 1619.341521][ T6477] usb 1-1: USB disconnect, device number 84 [ 1619.562861][T25323] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1619.720633][T25323] usb 3-1: device descriptor read/64, error -71 [ 1619.863335][T25323] usb usb3-port1: attempt power cycle [ 1620.060427][T12458] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1620.190394][T12458] usb 9-1: device descriptor read/64, error -71 [ 1620.210618][T25323] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1620.256622][T25323] usb 3-1: device descriptor read/8, error -71 [ 1620.440352][T12458] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1620.500494][T25323] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1620.531288][T25323] usb 3-1: device descriptor read/8, error -71 [ 1620.580600][T12458] usb 9-1: device descriptor read/64, error -71 [ 1620.660892][T25323] usb usb3-port1: unable to enumerate USB device [ 1620.693530][T12458] usb usb9-port1: attempt power cycle [ 1621.041041][T12458] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1621.061046][T12458] usb 9-1: device descriptor read/8, error -71 [ 1621.310430][T12458] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1621.330859][T12458] usb 9-1: device descriptor read/8, error -71 [ 1621.370505][T12449] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1621.440608][T12458] usb usb9-port1: unable to enumerate USB device [ 1621.530761][T12449] usb 1-1: Using ep0 maxpacket: 16 [ 1621.537810][T12449] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.548950][T12449] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1621.556569][T12449] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1621.565755][T12449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.576548][T12449] usb 1-1: config 0 descriptor?? [ 1622.060517][T12449] nzxt-smart2 0003:1E71:2009.0078: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1622.223511][T25323] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1622.265212][T31293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.282189][T31293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.296103][T12449] usb 1-1: USB disconnect, device number 85 [ 1622.380410][T25323] usb 3-1: Using ep0 maxpacket: 32 [ 1622.387932][T25323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1622.397581][T25323] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1622.407093][T25323] usb 3-1: config 1 has no interface number 0 [ 1622.414583][T25323] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1622.424049][T25323] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1622.435306][T25323] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1622.449369][T25323] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 1622.459126][T25323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.467311][T25323] usb 3-1: Product: syz [ 1622.472093][T25323] usb 3-1: Manufacturer: ю [ 1622.477677][T25323] usb 3-1: SerialNumber: syz [ 1622.700069][T25323] usb 3-1: 1:0 : does not exist [ 1622.705334][T25323] usb 3-1: BAAD GENERIC IO: no channels? [ 1622.730980][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1622.751591][T25323] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1622.768734][T25323] usb 3-1: USB disconnect, device number 49 [ 1622.802228][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1623.010793][T31330] fuse: Bad value for 'user_id' [ 1623.016899][T31330] fuse: Bad value for 'user_id' [ 1623.260403][T31024] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1623.325582][T31340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6586'. [ 1623.357832][T31340] team1: entered promiscuous mode [ 1623.364944][T31340] team1: entered allmulticast mode [ 1623.373438][T31340] 8021q: adding VLAN 0 to HW filter on device team1 [ 1623.430403][T31024] usb 9-1: Using ep0 maxpacket: 32 [ 1623.437587][T31024] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 1623.446425][T31024] usb 9-1: config 0 has no interface number 0 [ 1623.455800][T31024] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1623.470425][T31024] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1623.479857][T31024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.500055][T31024] usb 9-1: Product: syz [ 1623.504717][T31024] usb 9-1: Manufacturer: syz [ 1623.513546][T31024] usb 9-1: SerialNumber: syz [ 1623.521249][T31024] usb 9-1: config 0 descriptor?? [ 1623.614213][T31345] libceph: resolve '0..' (ret=-3): failed [ 1623.627316][T30711] udevd[30711]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1623.680540][T12445] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1625.310535][T12445] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1625.460609][T12445] usb 3-1: Using ep0 maxpacket: 32 [ 1625.467826][T12445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.479525][T12445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.489639][T12445] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1625.498806][T12445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.510135][T12445] usb 3-1: config 0 descriptor?? [ 1625.518903][T12445] hub 3-1:0.0: USB hub found [ 1625.718575][T12445] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1625.890472][T25323] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1626.060469][T25323] usb 1-1: Using ep0 maxpacket: 16 [ 1626.067497][T25323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.081013][T25323] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.094625][T25323] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1626.103968][T25323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.115396][T25323] usb 1-1: config 0 descriptor?? [ 1626.127322][T25323] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1626.156690][T12445] usbhid 3-1:0.0: can't add hid device: -71 [ 1626.164760][T12445] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1626.193007][T12445] usb 3-1: USB disconnect, device number 50 [ 1626.327901][T12462] usb 9-1: USB disconnect, device number 13 [ 1626.625772][T31384] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6599'. [ 1626.680418][T12445] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1626.771577][T31385] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1626.827480][T12458] usb 1-1: USB disconnect, device number 86 [ 1626.860371][T12445] usb 3-1: Using ep0 maxpacket: 32 [ 1626.867479][T12445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.891609][T12445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.910748][T12445] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1626.933317][T12445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.969309][T12445] usb 3-1: config 0 descriptor?? [ 1626.996545][T12445] hub 3-1:0.0: USB hub found [ 1627.196339][T12445] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1627.240725][T12445] usbhid 3-1:0.0: can't add hid device: -71 [ 1627.255581][T12445] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1627.352778][T12445] usb 3-1: USB disconnect, device number 51 [ 1627.513521][T31398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1627.646247][T31398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1627.715677][T31400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1628.425587][T31416] libceph: resolve '0..' (ret=-3): failed [ 1628.599491][T31399] hsr0: entered promiscuous mode [ 1628.608977][T31399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1628.622562][T31399] hsr_slave_0: left promiscuous mode [ 1628.658172][T31399] hsr_slave_1: left promiscuous mode [ 1628.758778][T31399] hsr0 (unregistering): left promiscuous mode [ 1629.112517][T31392] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1629.130814][T29959] Bluetooth: hci3: command 0x0c1a tx timeout [ 1629.162730][T31392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1629.179376][T31392] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1629.227056][T31392] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1629.286648][T31392] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1629.306207][T31392] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1629.314781][T31431] netlink: 'syz.7.6612': attribute type 10 has an invalid length. [ 1629.351653][T31392] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1629.392628][T31392] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1629.411869][T31392] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1629.436734][T31392] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1629.712172][T19765] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1629.885872][T19765] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1629.912707][T31450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6618'. [ 1629.936355][T19765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.963308][T19765] usb 9-1: Product: syz [ 1629.998635][T19765] usb 9-1: Manufacturer: syz [ 1630.034774][T19765] usb 9-1: SerialNumber: syz [ 1630.289582][T19765] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 1630.300496][T19765] cdc_ncm 9-1:1.0: bind() failure [ 1630.335927][T19765] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1630.351062][T19765] cdc_ncm 9-1:1.1: bind() failure [ 1630.509832][T31462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1630.894645][T25323] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1631.060376][T25323] usb 3-1: Using ep0 maxpacket: 16 [ 1631.068524][T25323] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1631.094466][T25323] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1631.111307][T25323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.122887][T25323] usb 3-1: Product: syz [ 1631.133036][T25323] usb 3-1: Manufacturer: syz [ 1631.137731][T25323] usb 3-1: SerialNumber: syz [ 1631.162696][T25323] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1631.168991][T31475] libceph: resolve '0..' (ret=-3): failed [ 1631.175528][T25323] r8152-cfgselector 3-1: config 0 descriptor?? [ 1631.220478][T29959] Bluetooth: hci1: command 0x0c1a tx timeout [ 1631.260021][T12445] usb 9-1: USB disconnect, device number 14 [ 1631.291022][T29959] Bluetooth: hci0: command 0x0c1a tx timeout [ 1631.446306][T25323] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1631.460966][T29959] Bluetooth: hci5: command 0x0c1a tx timeout [ 1631.470755][T25323] r8152-cfgselector 3-1: No union descriptors [ 1631.511229][T25323] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 1632.575825][T31480] hsr0: entered promiscuous mode [ 1632.591330][T31480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6626'. [ 1632.603597][T31480] hsr_slave_0: left promiscuous mode [ 1632.623137][T31480] hsr_slave_1: left promiscuous mode [ 1632.679096][T31493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6629'. [ 1632.688830][T31480] hsr0 (unregistering): left promiscuous mode [ 1632.820646][T25323] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1632.868579][T31478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1632.876479][T31478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1632.883639][T31478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1632.891909][T31478] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1633.470823][T25323] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1633.614132][T29959] Bluetooth: hci3: command 0x0c1a tx timeout [ 1634.890988][T14701] Bluetooth: hci1: command 0x0c1a tx timeout [ 1634.905179][T29959] Bluetooth: hci0: command 0x0c1a tx timeout [ 1634.970496][T29959] Bluetooth: hci5: command 0x0c1a tx timeout [ 1635.600374][T25323] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1635.765893][T25323] usb 9-1: not running at top speed; connect to a high speed hub [ 1635.798993][T31548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1635.826921][T25323] usb 9-1: config 7 has an invalid interface number: 4 but max is 1 [ 1635.864279][T25323] usb 9-1: config 7 has an invalid interface number: 83 but max is 1 [ 1635.884225][T25323] usb 9-1: config 7 has no interface number 0 [ 1635.897511][T25323] usb 9-1: config 7 has no interface number 1 [ 1635.926311][T25323] usb 9-1: config 7 interface 83 altsetting 193 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1635.944488][T25323] usb 9-1: config 7 interface 83 altsetting 193 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1635.954958][T25323] usb 9-1: config 7 interface 83 has no altsetting 0 [ 1635.968808][T25323] usb 9-1: New USB device found, idVendor=2357, idProduct=0201, bcdDevice=ae.e5 [ 1635.982654][T25323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.999639][T25323] usb 9-1: Product: syz [ 1636.014847][T25323] usb 9-1: Manufacturer: syz [ 1636.026838][T25323] usb 9-1: SerialNumber: syz [ 1636.110411][T12449] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1636.258299][T25323] option 9-1:7.83: GSM modem (1-port) converter detected [ 1636.296902][T12449] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1636.350655][T12449] usb 3-1: not running at top speed; connect to a high speed hub [ 1636.358926][T25323] usb 9-1: USB disconnect, device number 15 [ 1636.374303][T12449] usb 3-1: config 8 has an invalid interface number: 227 but max is 1 [ 1636.384978][T25323] option 9-1:7.83: device disconnected [ 1636.392378][T12449] usb 3-1: config 8 has an invalid interface number: 123 but max is 1 [ 1636.412458][T12449] usb 3-1: config 8 has no interface number 0 [ 1636.420835][T12449] usb 3-1: config 8 has no interface number 1 [ 1636.443623][T12449] usb 3-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1636.502326][T12449] usb 3-1: config 8 interface 227 has no altsetting 0 [ 1636.519863][T12449] usb 3-1: config 8 interface 123 has no altsetting 0 [ 1636.537053][T12449] usb 3-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 1636.557867][T12449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.578732][T12449] usb 3-1: Product: syz [ 1636.585521][T12449] usb 3-1: Manufacturer: syz [ 1636.591853][T12449] usb 3-1: SerialNumber: syz [ 1636.607779][T12449] usb 3-1: Interface #227 referenced by multiple IADs [ 1636.616550][T12449] usb 3-1: Interface #123 referenced by multiple IADs [ 1636.905829][T12449] cp210x 3-1:8.227: cp210x converter detected [ 1636.928293][T12449] cp210x 3-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 1636.935198][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6649'. [ 1636.946868][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6649'. [ 1636.958150][T31561] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6649'. [ 1636.960405][T12449] cp210x 3-1:8.227: querying part number failed [ 1636.976407][T29959] Bluetooth: hci0: command 0x0c1a tx timeout [ 1636.983353][T14701] Bluetooth: hci1: command 0x0c1a tx timeout [ 1637.010690][T12449] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1637.023771][T12449] cp210x 3-1:8.123: cp210x converter detected [ 1637.030984][T12449] cp210x 3-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 1637.039110][T12449] cp210x 3-1:8.123: querying part number failed [ 1637.050376][T14701] Bluetooth: hci5: command 0x0c1a tx timeout [ 1637.058645][T12449] usb 3-1: cp210x converter now attached to ttyUSB1 [ 1637.071776][T12449] usb 3-1: USB disconnect, device number 53 [ 1637.082107][T12449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1637.090810][T12449] cp210x 3-1:8.227: device disconnected [ 1637.111136][T12449] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1637.122162][T12449] cp210x 3-1:8.123: device disconnected [ 1637.210601][T31024] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1637.380377][T31024] usb 9-1: Using ep0 maxpacket: 8 [ 1637.393097][T31024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1637.405485][T31024] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1637.415615][T31024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.439387][T31024] usb 9-1: config 0 descriptor?? [ 1637.441443][T31569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1637.674478][T31024] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1637.730357][T12458] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1637.892866][T12458] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1637.908197][T12458] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.931468][T12458] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1637.949196][T12458] usb 3-1: config 1 has no interface number 1 [ 1637.959599][T12458] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1637.986625][T12458] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.002736][T12458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.017488][T12458] usb 3-1: Product: syz [ 1638.026017][T12458] usb 3-1: Manufacturer: syz [ 1638.033757][T12458] usb 3-1: SerialNumber: syz [ 1638.293578][T12458] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1638.385619][T12458] usb 3-1: MIDIStreaming interface descriptor not found [ 1638.846117][T12458] usb 3-1: USB disconnect, device number 54 [ 1639.997795][T31024] usb 9-1: USB disconnect, device number 16 [ 1640.490988][ T5632] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1640.801696][ T5632] usb 1-1: Using ep0 maxpacket: 32 [ 1640.829767][ T5632] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1640.881343][ T5632] usb 1-1: config 0 has no interface number 0 [ 1641.004083][ T5632] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.105474][ T5632] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.153644][ T5632] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1641.185431][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.355796][ T5632] usb 1-1: config 0 descriptor?? [ 1644.448316][ T5632] usbhid 1-1:0.1: can't add hid device: -71 [ 1644.448435][ T5632] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1644.491874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.492302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.492798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.493226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.493569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.493985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.494320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.494724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.495027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.495444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1644.725503][ T5632] usb 1-1: USB disconnect, device number 87 [ 1648.288447][ C0] sched: DL replenish lagged too much [ 1649.500452][ C1] net_ratelimit: 18478 callbacks suppressed [ 1649.500475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.500629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1649.500773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.500923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1649.501188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.501482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.501876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.502182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1649.502262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1649.502587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.510314][ C1] net_ratelimit: 19939 callbacks suppressed [ 1654.510336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.510792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1654.510829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.511082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1654.511177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.511652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.511997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.512282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1654.512460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.512610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1659.520486][ C1] net_ratelimit: 19924 callbacks suppressed [ 1659.520508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.520976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.521288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.521358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1659.521757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1659.521831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.522155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.522579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.522934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1659.523114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1664.530337][ C0] net_ratelimit: 19688 callbacks suppressed [ 1664.530338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.530358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1664.530667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.531096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.531410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.531636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1664.531902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.531932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1664.532221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1664.532693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.417954][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.430026][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.540277][ C0] net_ratelimit: 19710 callbacks suppressed [ 1669.540299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1669.540513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.540580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1669.540957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.541270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.541709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.541805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1669.542023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1669.542085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1669.542454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.550518][ C1] net_ratelimit: 19770 callbacks suppressed [ 1674.550538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.550945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.551235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.551375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1674.551645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.551690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1674.551942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.552332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.552618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1674.553052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1679.560357][ C0] net_ratelimit: 19927 callbacks suppressed [ 1679.560367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.560378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1679.560684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.560704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1679.561124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.561435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.561946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1679.561949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1679.562291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1679.562297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.570428][ C1] net_ratelimit: 19720 callbacks suppressed [ 1684.570449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.570745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.570793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1684.571089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1684.571152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.571441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.571844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.572129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1684.572382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1684.572542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.580325][ C0] net_ratelimit: 19802 callbacks suppressed [ 1689.580347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1689.580495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.580898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.581200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.581611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.581633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1689.581907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.581942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1689.582376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1689.582667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.590449][ C1] net_ratelimit: 19190 callbacks suppressed [ 1694.590471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.590787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.591682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.591982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.592004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1694.592315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1694.592435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.592731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.593176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1694.593478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.600523][ C1] net_ratelimit: 17559 callbacks suppressed [ 1699.600546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.600987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.601302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.601636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1699.601738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.601935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1699.602048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.602510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.602820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1699.603216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.610721][ C1] net_ratelimit: 17861 callbacks suppressed [ 1704.610744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.611202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.611613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.611766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1704.611920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.612065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1704.612339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.612643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.613080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1704.613416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.620336][ C1] net_ratelimit: 17717 callbacks suppressed [ 1709.620358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.620828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.621121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.621255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1709.621574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1709.621596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.621888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.622291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.622590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1709.622996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.630380][ C0] net_ratelimit: 19190 callbacks suppressed [ 1714.630426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1714.630600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.630714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1714.630884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.631584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.631741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1714.631884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.632291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.632612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1714.632900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1719.640611][ C1] net_ratelimit: 20414 callbacks suppressed [ 1719.640633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.640931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.641091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1719.641372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.641677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.642079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.642333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1719.642376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1719.642647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1719.642788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.650555][ C1] net_ratelimit: 20312 callbacks suppressed [ 1724.650576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.650907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.650990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1724.651339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.651656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.652084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.652159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1724.652395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1724.652462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1724.652837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.660429][ C0] net_ratelimit: 20257 callbacks suppressed [ 1729.660451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1729.660589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.660907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.661330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.661516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1729.661646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.662067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.662383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1729.662696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1729.662805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.387007][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.398335][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.670363][ C1] net_ratelimit: 20300 callbacks suppressed [ 1734.670385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.670751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.671166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1734.671233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.671489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1734.671541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.671929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1734.672011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.672342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1734.672778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.680497][ C1] net_ratelimit: 20334 callbacks suppressed [ 1739.680520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.680933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.680963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1739.681220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.681702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.682038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.682173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1739.682477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1739.682477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1739.682765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.690380][ C0] net_ratelimit: 20317 callbacks suppressed [ 1744.690403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1744.690561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.690829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1744.690842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.691240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.691555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.691899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1744.691944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.692353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1744.692739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.700400][ C1] net_ratelimit: 20232 callbacks suppressed [ 1749.700422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.700869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.701188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.701247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1749.701569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1749.701617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.701930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.702048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1749.702363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1749.702671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.710558][ C1] net_ratelimit: 20090 callbacks suppressed [ 1754.710583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.710893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.711166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1754.711363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.711673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.712099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.712403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1754.712415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1754.712797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1754.712846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.720257][ C1] net_ratelimit: 20331 callbacks suppressed [ 1759.720279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.720439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1759.720715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.721028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.721460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.721724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1759.721768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.722085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1759.722225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1759.722519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1764.730458][ C1] net_ratelimit: 20223 callbacks suppressed [ 1764.730480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.730839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.731136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1764.731268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.731604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.732087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.732392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.732811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1764.733019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1764.733100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.740312][ C1] net_ratelimit: 20550 callbacks suppressed [ 1769.740334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.740636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.741050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.741138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1769.741346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.741770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.742077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.742373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1769.742483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1769.742690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1774.750334][ C1] net_ratelimit: 21191 callbacks suppressed [ 1774.750356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.750650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.750933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1774.751031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.751249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1774.751400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.751666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1774.751796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.752082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.752465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.760377][ C0] net_ratelimit: 20899 callbacks suppressed [ 1779.760398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.760493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.760774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.761172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.761450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.761696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1779.761848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.762056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.762126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.762499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1784.770247][ C1] net_ratelimit: 20691 callbacks suppressed [ 1784.770269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.770607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1784.770634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.770910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1784.771066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.771356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1784.771394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.771831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.772186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.772402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1789.780256][ C1] net_ratelimit: 20193 callbacks suppressed [ 1789.780277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.780614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.781200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1789.781320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.781603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.782168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.782472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.782564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1789.782847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1789.783113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.241080][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.251994][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.790507][ C1] net_ratelimit: 20115 callbacks suppressed [ 1794.790528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.790833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.790895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1794.791211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1794.791240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.791535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.791671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1794.791955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.792256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.792658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.800215][ C0] net_ratelimit: 20145 callbacks suppressed [ 1799.800238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1799.800623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.800746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1799.800912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.801375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.801658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.801869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1799.802064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.802483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.802889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.810241][ C1] net_ratelimit: 20513 callbacks suppressed [ 1804.810263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.810690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.810961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1804.811042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.811458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.811757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.812096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1804.812180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.812422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1804.812467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.820288][ C0] net_ratelimit: 20227 callbacks suppressed [ 1809.820309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1809.820612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.820906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.821330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.821596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1809.821619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.822014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.822318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.822715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.822814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.830306][ C1] net_ratelimit: 19776 callbacks suppressed [ 1814.830328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.830708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1814.830738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.831025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.831467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.831776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1814.831777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.832169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1814.832179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.832461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.840206][ C1] net_ratelimit: 19754 callbacks suppressed [ 1819.840228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.840517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.840904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.841194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.841243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1819.841581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.841866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.842292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1819.842527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:cd:29:80:4c:48, vlan:0) [ 1819.842579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.787109][ T30] INFO: task kworker/1:11:12458 blocked for more than 145 seconds. [ 1821.787141][ T30] Tainted: G L syzkaller #0 [ 1821.787153][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1821.787164][ T30] task:kworker/1:11 state:D stack:20984 pid:12458 tgid:12458 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1821.787225][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 1821.787365][ T30] Call Trace: [ 1821.787374][ T30] [ 1821.787390][ T30] __schedule+0x1821/0x5740 [ 1821.787452][ T30] ? __pfx___schedule+0x10/0x10 [ 1821.787490][ T30] ? schedule+0x90/0x360 [ 1821.787522][ T30] schedule+0x164/0x360 [ 1821.787554][ T30] schedule_preempt_disabled+0x13/0x30 [ 1821.787583][ T30] __mutex_lock+0x7f7/0x1550 [ 1821.787614][ T30] ? __mutex_lock+0x608/0x1550 [ 1821.787639][ T30] ? reg_check_chans_work+0x197/0x1090 [ 1821.787665][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1821.787685][ T30] ? __mutex_trylock_common+0x158/0x260 [ 1821.787739][ T30] ? look_up_lock_class+0x57/0x110 [ 1821.787760][ T30] ? register_lock_class+0x31/0x2e0 [ 1821.787791][ T30] reg_check_chans_work+0x197/0x1090 [ 1821.787826][ T30] ? lock_acquire+0x106/0x350 [ 1821.787859][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1821.787886][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1821.787921][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1821.787949][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1821.787970][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1821.787993][ T30] process_scheduled_works+0xb5d/0x1860 [ 1821.788042][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.788070][ T30] ? assign_work+0x3d5/0x5e0 [ 1821.788097][ T30] worker_thread+0xa53/0xfc0 [ 1821.788144][ T30] kthread+0x389/0x470 [ 1821.788171][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1821.788192][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.788219][ T30] ret_from_fork+0x514/0xb70 [ 1821.788261][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.788283][ T30] ? __switch_to+0xc79/0x1410 [ 1821.788316][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.788343][ T30] ret_from_fork_asm+0x1a/0x30 [ 1821.788384][ T30] [ 1821.788478][ T30] [ 1821.788478][ T30] Showing all locks held in the system: [ 1821.788489][ T30] 2 locks held by kthreadd/2: [ 1821.788584][ T30] 1 lock held by khungtaskd/30: [ 1821.788596][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1821.788786][ T30] 3 locks held by kworker/R-ipv6_/3195: [ 1821.788799][ T30] #0: ffff888031e1e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1821.788860][ T30] #1: ffffc9000cd67c00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1821.788914][ T30] #2: ffffffff8fdd1a40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1821.789061][ T30] 5 locks held by kworker/R-bat_e/3229: [ 1821.789075][ T30] 1 lock held by klogd/4985: [ 1821.789087][ T30] 2 locks held by udevd/4996: [ 1821.789099][ T30] 3 locks held by dhcpcd/5290: [ 1821.789109][ T30] 1 lock held by dhcpcd/5291: [ 1821.789121][ T30] 2 locks held by kworker/1:3/5362: [ 1821.789134][ T30] 2 locks held by getty/5385: [ 1821.789146][ T30] #0: ffff8880320cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1821.789278][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1821.789336][ T30] 1 lock held by syz-executor/5616: [ 1821.789349][ T30] 3 locks held by kworker/1:4/5632: [ 1821.789361][ T30] 4 locks held by kworker/0:5/5701: [ 1821.789374][ T30] 2 locks held by kworker/0:16/6477: [ 1821.789386][ T30] 3 locks held by kworker/u8:14/7307: [ 1821.789399][ T30] 2 locks held by kworker/1:2/11768: [ 1821.789414][ T30] 2 locks held by kworker/0:4/12448: [ 1821.789426][ T30] 2 locks held by kworker/0:6/12449: [ 1821.789438][ T30] 3 locks held by kworker/0:10/12451: [ 1821.789450][ T30] 4 locks held by kworker/1:11/12458: [ 1821.789462][ T30] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1821.789516][ T30] #1: ffffc90003f8fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1821.789569][ T30] #2: ffffffff8fdd1a40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 1821.789625][ T30] #3: ffff88805a7d0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x197/0x1090 [ 1821.789679][ T30] 3 locks held by kworker/1:15/12462: [ 1821.789691][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1821.789743][ T30] #1: ffffc90003defc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1821.789794][ T30] #2: ffffffff8fdd1a40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1821.789924][ T30] 4 locks held by kworker/0:0/19765: [ 1821.789937][ T30] 4 locks held by kworker/u8:21/20176: [ 1821.789950][ T30] 3 locks held by kworker/u8:22/20177: [ 1821.789963][ T30] 3 locks held by kworker/u8:30/20288: [ 1821.789976][ T30] 3 locks held by kworker/u8:31/20289: [ 1821.789989][ T30] 4 locks held by kworker/u8:32/20290: [ 1821.790001][ T30] 3 locks held by kworker/u8:33/20291: [ 1821.790014][ T30] 3 locks held by kworker/u8:34/20292: [ 1821.790026][ T30] 4 locks held by kworker/u8:35/20293: [ 1821.790039][ T30] 3 locks held by kworker/u8:37/20295: [ 1821.790052][ T30] 3 locks held by syz-executor/22917: [ 1821.790066][ T30] 3 locks held by kworker/0:1/25323: [ 1821.790078][ T30] 4 locks held by kworker/u8:0/26652: [ 1821.790093][ T30] 2 locks held by kworker/0:3/28359: [ 1821.790105][ T30] 3 locks held by kworker/0:7/28360: [ 1821.790118][ T30] 3 locks held by kworker/1:0/28527: [ 1821.790131][ T30] 4 locks held by kworker/u8:1/30198: [ 1821.802943][ T30] 3 locks held by kworker/u8:2/30200: [ 1821.802969][ T30] 1 lock held by syz-executor/30453: [ 1821.802980][ T30] #0: ffff888031e24ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_target+0x83/0x260 [ 1821.803141][ T30] 1 lock held by kworker/R-wg-cr/30474: [ 1821.803156][ T30] 1 lock held by kworker/R-wg-cr/30479: [ 1821.803168][ T30] #0: ffffffff8e7faf40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1821.803224][ T30] 1 lock held by kworker/R-wg-cr/30480: [ 1821.803236][ T30] 1 lock held by kworker/R-wg-cr/30481: [ 1821.803248][ T30] #0: ffffffff8e7faf40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 [ 1821.803318][ T30] 1 lock held by syz-executor/30769: [ 1821.803332][ T30] 1 lock held by kworker/R-wg-cr/30792: [ 1821.803344][ T30] 1 lock held by kworker/R-wg-cr/30793: [ 1821.803356][ T30] #0: ffffffff8e7faf40 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1821.803413][ T30] 4 locks held by kworker/1:1/31024: [ 1821.803428][ T30] 6 locks held by syz.2.6659/31600: [ 1821.803440][ T30] 3 locks held by kworker/u8:3/31604: [ 1821.803453][ T30] 4 locks held by kworker/u8:4/31605: [ 1821.803466][ T30] 4 locks held by kworker/u8:5/31607: [ 1821.803478][ T30] #0: ffff88801be8f940 ((wq_completion)wg-kex-wg1#31){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1821.803537][ T30] #1: ffffc90003c6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1821.803586][ T30] #2: ffff888080f293c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 1821.803738][ T30] #3: ffff888057067028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 1821.803801][ T30] 4 locks held by kworker/u8:6/31608: [ 1821.803813][ T30] 2 locks held by kworker/1:5/31609: [ 1821.803826][ T30] 1 lock held by kworker/u8:7/31610: [ 1821.803838][ T30] [ 1821.803845][ T30] ============================================= [ 1821.803845][ T30] [ 1821.803899][ T30] NMI backtrace for cpu 0 [ 1821.803916][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1821.803941][ T30] Tainted: [L]=SOFTLOCKUP [ 1821.803948][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.803959][ T30] Call Trace: [ 1821.803967][ T30] [ 1821.803975][ T30] dump_stack_lvl+0xe8/0x150 [ 1821.803998][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1821.804064][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1821.804094][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1821.804120][ T30] sys_info+0x135/0x170 [ 1821.804170][ T30] watchdog+0xfd3/0x1030 [ 1821.804210][ T30] ? watchdog+0x1c9/0x1030 [ 1821.804241][ T30] kthread+0x389/0x470 [ 1821.804266][ T30] ? __pfx_watchdog+0x10/0x10 [ 1821.804299][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.804324][ T30] ret_from_fork+0x514/0xb70 [ 1821.804347][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.804366][ T30] ? __switch_to+0xc79/0x1410 [ 1821.804396][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.804421][ T30] ret_from_fork_asm+0x1a/0x30 [ 1821.804457][ T30] [ 1821.804465][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1821.804498][ C1] NMI backtrace for cpu 1 [ 1821.804513][ C1] CPU: 1 UID: 0 PID: 3229 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1821.804536][ C1] Tainted: [L]=SOFTLOCKUP [ 1821.804542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.804554][ C1] Workqueue: bat_events batadv_tt_purge [ 1821.804654][ C1] RIP: 0010:mark_lock+0x0/0x190 [ 1821.804675][ C1] Code: 48 0f b9 3a 90 41 89 e9 48 89 df 48 8b 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 [ 1821.804690][ C1] RSP: 0018:ffffc90000a07b10 EFLAGS: 00000002 [ 1821.804703][ C1] RAX: 0000000000000000 RBX: ffff8880321ddc40 RCX: ffffffff93e84740 [ 1821.804715][ C1] RDX: 0000000000000002 RSI: ffff8880321de7f8 RDI: ffff8880321ddc40 [ 1821.804727][ C1] RBP: ffffc90000a07d40 R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e [ 1821.804739][ C1] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: ffff8880321de7f8 [ 1821.804751][ C1] R13: dffffc0000000000 R14: ffff8880321de7d0 R15: 0000000000000001 [ 1821.804764][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1821.804777][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1821.804795][ C1] CR2: 0000564838100450 CR3: 0000000075590000 CR4: 00000000003526f0 [ 1821.804810][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1821.804820][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1821.804831][ C1] Call Trace: [ 1821.804837][ C1] [ 1821.804842][ C1] lockdep_hardirqs_on_prepare+0x110/0x260 [ 1821.804861][ C1] ? ebt_do_table+0x2665/0x2830 [ 1821.804951][ C1] trace_hardirqs_on+0x28/0x40 [ 1821.804975][ C1] __local_bh_enable_ip+0xd0/0x130 [ 1821.804998][ C1] ebt_do_table+0x2665/0x2830 [ 1821.805018][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1821.805036][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1821.805064][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1821.805081][ C1] ? __pfx_ebt_do_table+0x10/0x10 [ 1821.805100][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1821.805138][ C1] ? lock_acquire+0x106/0x350 [ 1821.805154][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1821.805169][ C1] ? __pfx_ebt_do_table+0x10/0x10 [ 1821.805187][ C1] nf_hook_slow+0xc5/0x220 [ 1821.805248][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1821.805273][ C1] NF_HOOK+0x23e/0x3f0 [ 1821.805288][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1821.805302][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1821.805315][ C1] ? net_generic+0x1e/0x240 [ 1821.805330][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1821.805357][ C1] ? net_generic+0x1e/0x240 [ 1821.805373][ C1] br_forward_finish+0xd3/0x130 [ 1821.805387][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1821.805421][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 1821.805441][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1821.805460][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1821.805476][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1821.805490][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1821.805505][ C1] NF_HOOK+0x64e/0x6e0 [ 1821.805522][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1821.805538][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1821.805555][ C1] ? net_generic+0x1e/0x240 [ 1821.805572][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 1821.805589][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1821.805607][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1821.805623][ C1] nf_hook_slow+0xc5/0x220 [ 1821.805640][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1821.805655][ C1] NF_HOOK+0x23e/0x3f0 [ 1821.805670][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1821.805683][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1821.805697][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1821.805712][ C1] ? br_flood+0x8e0/0xb80 [ 1821.805753][ C1] ? br_handle_vlan+0x61/0x530 [ 1821.805825][ C1] __br_forward+0x397/0x540 [ 1821.805839][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1821.805855][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 1821.805873][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1821.805893][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1821.805913][ C1] ? ip6t_do_table+0x163/0x1560 [ 1821.805987][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1821.806008][ C1] ? nf_hook_slow+0x176/0x220 [ 1821.806024][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1821.806042][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1821.806061][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1821.806078][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1821.806095][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1821.806172][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1821.806197][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1821.806216][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1821.806237][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1821.806255][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1821.806273][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1821.806292][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1821.806311][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1821.806329][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1821.806345][ C1] br_handle_frame+0x1277/0x1510 [ 1821.806365][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1821.806383][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1821.806404][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1821.806420][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 1821.806504][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1821.806524][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1821.806543][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1821.806560][ C1] ? NF_HOOK+0x336/0x3c0 [ 1821.806579][ C1] ? process_backlog+0x3eb/0x1950 [ 1821.806602][ C1] ? process_backlog+0x3eb/0x1950 [ 1821.806622][ C1] ? process_backlog+0x3eb/0x1950 [ 1821.806643][ C1] ? process_backlog+0x3eb/0x1950 [ 1821.806664][ C1] process_backlog+0x76d/0x1950 [ 1821.806691][ C1] __napi_poll+0xae/0x340 [ 1821.806709][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1821.806730][ C1] net_rx_action+0x627/0xf70 [ 1821.806755][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1821.806782][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 1821.806819][ C1] handle_softirqs+0x22a/0x840 [ 1821.806836][ C1] ? do_softirq+0x76/0xd0 [ 1821.806853][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 1821.806873][ C1] do_softirq+0x76/0xd0 [ 1821.806887][ C1] [ 1821.806893][ C1] [ 1821.806899][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1821.806915][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 1821.806937][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1821.806955][ C1] process_scheduled_works+0xb5d/0x1860 [ 1821.806981][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.806997][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1821.807025][ C1] rescuer_thread+0x827/0x1130 [ 1821.807046][ C1] ? rescuer_thread+0xbb/0x1130 [ 1821.807070][ C1] kthread+0x389/0x470 [ 1821.807090][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1821.807107][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.807127][ C1] ret_from_fork+0x514/0xb70 [ 1821.807145][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.807161][ C1] ? __switch_to+0xc79/0x1410 [ 1821.807184][ C1] ? __pfx_kthread+0x10/0x10 [ 1821.807204][ C1] ret_from_fork_asm+0x1a/0x30 [ 1821.807228][ C1] [ 1821.807506][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1821.807527][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1821.807552][ T30] Tainted: [L]=SOFTLOCKUP [ 1821.807560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.807571][ T30] Call Trace: [ 1821.807579][ T30] [ 1821.807588][ T30] vpanic+0x56c/0xa60 [ 1821.807616][ T30] ? __pfx_vpanic+0x10/0x10 [ 1821.807639][ T30] ? __down_trylock_console_sem+0x6b/0x110 [ 1821.807671][ T30] panic+0xc5/0xd0 [ 1821.807692][ T30] ? __pfx_panic+0x10/0x10 [ 1821.807722][ T30] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1821.807751][ T30] watchdog+0x102c/0x1030 [ 1821.807785][ T30] ? watchdog+0x1c9/0x1030 [ 1821.807815][ T30] kthread+0x389/0x470 [ 1821.807840][ T30] ? __pfx_watchdog+0x10/0x10 [ 1821.807865][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.807891][ T30] ret_from_fork+0x514/0xb70 [ 1821.807914][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.807934][ T30] ? __switch_to+0xc79/0x1410 [ 1821.807963][ T30] ? __pfx_kthread+0x10/0x10 [ 1821.807988][ T30] ret_from_fork_asm+0x1a/0x30 [ 1821.808025][ T30] [ 1821.808332][ T30] Kernel Offset: disabled