last executing test programs: 2m10.531479026s ago: executing program 4 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28882, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="680040000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200b21e00010c00028005000100000000a5793db83d4fbc6d0104001640"], 0x68}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) recvmmsg(r3, &(0x7f0000000b40)=[{{&(0x7f0000000980)=@nl, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/73, 0x49}], 0x2, &(0x7f0000000b00)=""/62, 0x3e}, 0x8}], 0x1, 0x101, &(0x7f0000000b80)={0x0, 0x3938700}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)='W', 0x0, 0x80000000, 0x22, 0x1, 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00042f002001000000000000000000000000000200000000000000000000ffff000000002421"], 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000200)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xfffd, 0x0) 2m9.474444119s ago: executing program 4 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461bff3dc95ece981"], 0xe8}}, 0x0) r1 = socket(0x22, 0x2, 0x3) write(r1, &(0x7f0000000000)="240000001a005f02", 0x8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600156ffffffffffddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000e538114b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x5, 0xff, 0x6, 0x7}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000300)={0x0, 0x7, 0xfffffffc, 0x0, 0xf}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x20040881) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40223f0000003f0d9fdc9ce29c33ebd5ade1d4acc6d30e11b9b4ff2429c3c33732481b38b65e080a57133bcd47cb851456b8b14b79bffa22457354d529c6331d4c"], 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x60, 0x8, 0x80, 0x8, 0x7bc, 0xa}}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)={0x40, 0x2b, 0xe4, {0xe4, 0x30, "add7d03eec0eaf522df18825a569737c13d7730c4cf097b8f90c68d9b46283763a7815424d6174657bbdeaa72f07e68226c5c2fea7827604b35576de915be203dbf325aff8a135f780fee83f428b2052fce75fa90bdc364ffc6ff5a7a4c20549387375f1e5c4f3b4f76290c259cc72a06391f8d6bf292fe10485bbbb0f81b5f29e473f4ee853e6fe08f5060375b8805b8c7cd083be826ab129d2496dca250a1d0e52b1e193083054e1931237aa2cb10b662af38387d0cd845b8d23675a7eddcced59dfd4985d69a14360e8df26fe860b7ad65dca2d9742741418e7427e9cc08d73c4"}}, &(0x7f00000003c0)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "dcb185db5a950b413b70fa630768b5f7e5516d540981122ef50cf4a6331799b0b9e6c164a044051cde034171146321c5781f8eb144fd5261f3dbaf3a3d085de3cbf6e18dcf0d07c206a0c2de6808cce4c2d8f71d0bf7b900e52c92345cc906c852425fa9260b8a753f01d5895aa54acf0dcd20a9e1fd2baeaac4cf4eb1e6688880e02ba985d41afa57d34733a6e84cccefeec8cd88742c8351785589562fe6ecddcd6614e7f16ead76c43efcbf83fb3f"}}, &(0x7f0000000240)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "f9a4d456d8f65a70d8c764dd92aa5787"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x1e, 0x2, 0x4, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0x0, 0x5, [0xffc060, 0x1010000, 0xc000, 0x0, 0x0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x2, 0x2}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x15, 0x18, 0x3, 0x0, "c18238dc", "20818d49"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x1, 0x7, 0x7, 0x8}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000540)={0x20, 0x9, 0xc1, "60b8f3bf39525b7481569ee10fa9035fd6db235248eb02159accad150620496cd2a2776981ed5fd0bb5a77455b43e196fd2ee6a99ba4c00228ef93694963b0a51e714c9c5bc0e18911381c179a7739ce954fdb8da35374e7e24ee089710d7696cdd44e9b8e089835b0899e7a1ef338221a5950aad72712310c7ccc2ed9883617e28453bc8e283127e87d8bee1e3819064af683d72d6f3f83f0f588153c918f11a148364ee9406cc486e607c37238c9734d33a21c508048684837a822018c5da30f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x2, [0x0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x77a9}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "903f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "c5c1"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x854d}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect$cdc_ecm(0x1, 0x73, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0xed, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x7c, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc, 0xff94, 0x9, 0x4a}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x237, 0x3, 0x9400}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x0, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xf, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0xca, 0x80}}}}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xb0, &(0x7f0000001580)=ANY=[@ANYBLOB="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"]}, {0x54, &(0x7f0000000900)=@string={0x54, 0x3, "5beb6f95610374a243253abe64d24311398f6e7bc1dbb26e5408d5e37e50786d17492463ba192592b11dbfcfcc7f472aa7f433923e5ac83342d52961159393716ee6d56c5a28541d289b0c6996771f4d44f6"}}]}) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r9 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x40, 0x5, 0x23}, {0x9, 0x5, 0x9, 0x2, 0x40, 0x81, 0x0, 0x3}, {0x9, 0x5, 0x8, 0x3, 0xfa2a1ec7e8ba04f1, 0x9e, 0x80, 0x1}}}}}}]}}, 0x0) recvfrom$rxrpc(r1, &(0x7f00000014c0)=""/188, 0xbc, 0x12000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000001340)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x7b, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "0afc53c1194e"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2, 0x7f}, [@mdlm={0x15, 0x24, 0x12, 0x4800}, @acm={0x4, 0x24, 0x2, 0x2}, @obex={0x5, 0x24, 0x15, 0x97}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xd8, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x300, 0x0, 0x2, 0x75, 0x20}, 0x5, &(0x7f0000001400)={0x5, 0xf, 0x5}, 0x1, [{0x12, &(0x7f0000001440)=@string={0x12, 0x3, "d6eeae4fef091dd0b84b65a39520e9ce"}}]}) syz_usb_control_io$sierra_net(r9, &(0x7f0000000d80)={0x14, &(0x7f0000000d00)={0x20, 0xe, 0x2a, {0x2a, 0x0, "dd492d83466b15e4aa3f55330a5b422cae74c4435699da07780d82553f9d7da6c8260ee76889b752"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000001300)={0x1c, &(0x7f0000000dc0)={0x20, 0x8, 0xaa, "9b86594255b89005d03f43253c156b23763f94e9ad289295bedfb82233f303468d4e19d04cc92500ed1acd9d2404c8c185345abcc0981346fa2805db2a447167ace8dc2cc41727317fca48f0829a8df8fc67e9e0e84c834f592ec1c9f46ae6bbcf8d6be63e3ea14c042daae8c32aef1773b7678a3df75555ce86e15fcf41953b83ed951de4081302386d73d8700f754f47b8c73e70bdeb28c508f9d5e7ac2965eec7d0a8749997d5b2db"}, &(0x7f0000000e80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000012c0)={0x21, 0x0, 0x1, 'W'}}) 2m5.502498864s ago: executing program 4 (id=446): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x207a) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) ioctl$TCSETS(r1, 0x5433, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000580)={{0x5, 0xfe}, 'port1\x00', 0x29, 0x1825, 0x1, 0x4, 0xffffffff, 0x7fffffff, 0x8b597, 0x0, 0x5, 0x80}) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) (rerun: 64) 2m2.3646491s ago: executing program 4 (id=459): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2, 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa01, 0x0) ppoll(&(0x7f0000002140)=[{r4, 0x2162}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c30501cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) poll(&(0x7f00000000c0)=[{r7, 0x2006}], 0x1, 0x7ff) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "491e8f6fda908499", "d656798feb353f99cb53000fac69957c56001000000000000020000000001200", "94444681", '\x00\t\x00\x00\x00YZ;'}, 0x38) shutdown(r7, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x89, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0x28}], 0x1}}], 0x1, 0x4000800) 2m0.573269149s ago: executing program 4 (id=464): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x81, 0x3, 0x2, 0x6}, {0xfff9, 0x3, 0x1, 0x6}, {0x8, 0x3, 0x7f, 0x3ff}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r4 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x1a0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @hyper, 0x0, 0xfffe, 0x5e, 0xfffffffffffffff9, 0x8000}) write$cgroup_pid(r3, &(0x7f0000000c40)=r4, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 1m58.991190995s ago: executing program 4 (id=467): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0x6, r1, 0x0, 0x7, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x10, 0xb}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x0, 0x42474752, 0x27d, 0x0, 0x3, @stepwise={{0xffffffff, 0x7ffd}, {0x2000002, 0xfff}, {0x5, 0x2}}}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88300, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902900003010000000904000000010100000a24010000030201020b240800a30b00822c81fb05240400000c24027be40006000000000009040100000112000009040101010102000009050108e10000000007250101090000090402000001c84d8a6f757c8ac54d0e2402010001ca010000000000000724dbcae90657ce8a549317ec"], 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r10 = syz_open_procfs(0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) fsmount(r10, 0x0, 0x1) mknodat$loop(r10, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) 1m43.771821909s ago: executing program 32 (id=467): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0x6, r1, 0x0, 0x7, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x10, 0xb}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x0, 0x42474752, 0x27d, 0x0, 0x3, @stepwise={{0xffffffff, 0x7ffd}, {0x2000002, 0xfff}, {0x5, 0x2}}}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88300, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902900003010000000904000000010100000a24010000030201020b240800a30b00822c81fb05240400000c24027be40006000000000009040100000112000009040101010102000009050108e10000000007250101090000090402000001c84d8a6f757c8ac54d0e2402010001ca010000000000000724dbcae90657ce8a549317ec"], 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r10 = syz_open_procfs(0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) fsmount(r10, 0x0, 0x1) mknodat$loop(r10, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) 1m16.612587759s ago: executing program 2 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe}]}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m16.259466329s ago: executing program 5 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1m16.159457945s ago: executing program 5 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x605}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x24044000) 1m15.586508695s ago: executing program 2 (id=614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x301140, 0x0) syz_clone(0xc2129a80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000005c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c0300008775ca08b6518c5f34661d960aa0197b61c24b181a50042fca39bf", @ANYRES16=r5, @ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r7 = inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41040000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x80002, 0x88) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ee7, &(0x7f0000000340)={0x0, 0x891d, 0x4, 0x3, 0x1004, 0x0, r6}, 0x0, 0x0) userfaultfd(0x80801) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xfeb8, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0xe94, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x7, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x8, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10040, 0x2, 0x7fff, 0x10ffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000002, 0x14c, 0x60aa, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x4530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) 1m15.534853359s ago: executing program 3 (id=615): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xf000001e}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unshare(0x42000000) 1m14.497278417s ago: executing program 2 (id=616): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x800200001ff, 0x713242) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)=@fd={0x8000, 0x1, 0x4, 0x8, 0x0, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x7, 0xd, 0xb, "113367e0"}, 0x5, 0x4, {}, 0x8}) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1401, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011) 1m13.990735625s ago: executing program 5 (id=617): accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d8100"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x4) 1m12.508848054s ago: executing program 3 (id=622): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007080)=[{{&(0x7f0000003540)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000007340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0x20008844) 1m12.230977609s ago: executing program 3 (id=624): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x89f, &(0x7f0000000540)={0x0, 0x3bb7, 0x8000, 0xffffffff, 0x12d, 0x0, r0}, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) unshare(0x2040400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000044000000060a010400000000000000000100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000000000ae052f59d153366c6833070b9500e7afc039d34ccd9483057591f1d223c081eaa396bd998e927bd8179a1f6f2b0d4d0c14b446e0e6fd6c0ed8454926c814e52b794"], 0xb8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000180)={0x7f, 0x2000, 0x0, 0x2, 0x400, 0x9, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200052020000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r8 = fsmount(r2, 0x1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$6lowpan_enable(r0, &(0x7f0000000140)='0', 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) 1m12.125269803s ago: executing program 2 (id=625): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x110, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7ffffffffffffffd, 0x0, 0x2000000}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd2b, 0x70bd27, 0x70bd2c, 0xfffffffb, [0xfffffffc]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f0000000000)={0x40, 0x9, 0xe9, 0x1fd, 0x40, 0x5, 0x1, 0x800}, &(0x7f0000000040)={0x747d, 0xc2c, 0x60000000000000, 0x8001, 0x4, 0x7, 0x2, 0x6}, &(0x7f0000000080)={0x1, 0x30000000000, 0x3, 0x8, 0x4, 0xd1, 0x8000000000000000, 0xc7ad00}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) syz_usb_connect(0x5, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d709b630ae5b4ad6800008036042402050524060000052400ec000d240301030000000600050081052401000309050904100000050f09058203ff03060c0309050a0330"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x4, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x8, 0xb6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x81, 0x10, 0x8, 0x20, 0xa}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x32, &(0x7f00000002c0)=@string={0x32, 0x3, "bf1dd76dbe5782efdf91ac2071c00fc6fcd3f0d5ba36ef25c6e6f1a9b2189979262c0b36cca56d0ee9d5c90485f8adec"}}]}) 1m12.000632618s ago: executing program 0 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r5, r5, 0x0, 0x200000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/152, 0x98) 1m10.240008166s ago: executing program 5 (id=628): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r0, r1, 0x0, 0x201f00) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r3 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x1) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000580)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28"], &(0x7f00002bf000)='GPL\x00', 0x2, 0xb7, &(0x7f0000000040)=""/183, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r7, r8}) sendmmsg(r9, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3ed17adc49aab9f48d1c8708f76fd03eebfd0", 0x13}], 0x1}}], 0x1, 0x24004801) close_range(r6, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d440000904650001be866d0109050102400001030920a69f288bac426f6459e6177621f22317ea1819563e1f43a73e4d6d9708129ad961fa81e118922389107e5b72e873ce1449fd7983a71ce732fd0a3278e09c80c622a274337f1e497aefe41b3f41766c3684254bdc4b58228d7a291ef30e7c"], 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) 1m10.176614712s ago: executing program 0 (id=629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0x104, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0xf0, 0x1, [@m_ipt={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea"}}]}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x104}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x1a1003) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffff001, 0x1, 0x2019, 0x5, 0x6, 0x4, 0x2, 0x3}}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffff001, 0x1, 0x2019, 0x5, 0x6, 0x4, 0x2, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x8, 0x6, 0x8) sendmsg$nl_route(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={0x0, 0xfebd}, 0x1, 0x0, 0x0, 0x4000800}, 0x40811) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) sendto(r7, 0x0, 0x0, 0x0, &(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000008352244c205374dc08979feb5ba58004500002000000000002f907800000000e00000012001880b000c907895a2d012ecfe9298139dd36d104478aaec48714c46cbb1814b21df591f9ffbf5a5ff4b49beaa9d51a7a3f6776892d5a05be0f180ff7907eab7980fe03f8e1fc8a02ff11272916d38459f51831a9dc7c3da6a85d29d881526fdd728664dd8e4e2cc6ff9"], 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000008352244c205374dc08979feb5ba58004500002000000000002f907800000000e00000012001880b000c907895a2d012ecfe9298139dd36d104478aaec48714c46cbb1814b21df591f9ffbf5a5ff4b49beaa9d51a7a3f6776892d5a05be0f180ff7907eab7980fe03f8e1fc8a02ff11272916d38459f51831a9dc7c3da6a85d29d881526fdd728664dd8e4e2cc6ff9"], 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x4) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000180)={0x0, 0x81, 0x20003, 0x1}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000180)={0x0, 0x81, 0x20003, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x4, r6, 'id0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r3, r9}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000001580)=0x8) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390407000000ecfffbff00000000", @ANYBLOB="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", @ANYRES32=r8], 0x40}}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010003904020020000000000000000000", @ANYRES32=r5, @ANYBLOB="40100000004104002000128008000100677265001400028008000700ac1414aa0600030081000000050011"], 0x50}}, 0x4040000) 1m9.958684393s ago: executing program 3 (id=630): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r4 = syz_open_dev$sg(&(0x7f0000000240), 0xff, 0x1000) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000340)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffff96) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001406001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1m9.954766347s ago: executing program 2 (id=631): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r2 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x2, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x7f, &(0x7f00000000c0)={{0x12, 0x1, 0x600, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x3, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "af52161838"}, {0x5, 0x24, 0x0, 0x6e2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x101, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x58, 0x0, 0x4}, @obex={0x5, 0x24, 0x15, 0xfffb}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xc9, 0x6, 0x4}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0x8, 0xc1, 0x40, 0x7}, 0x36, &(0x7f0000000280)={0x5, 0xf, 0x36, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x0, 0xfc}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x5, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x81, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0xd, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x8, 0xf, 0x81}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xb4ea}}, {0x9f, &(0x7f0000000380)=@string={0x9f, 0x3, "f664a0ba151125f7872b0a7e72ea5d882aa47331bb608aaba8a74fec24094056a057fa3aa2b150de280bbefc54701bb2ced9f2c6d4ed0466dbae0ffc5529db5a8e1f55ec44fb096726e7bc0795f1ab33671485ea402d205304e4014ca4a2fa26292307f4e5a390402bc4f02fafa52d81a90e9515c12e6b8aafcab0c34406317c0d96634fac7f5a0b624bded87b21300e627e0c887b92bb0006aae9b0b5"}}, {0xd8, &(0x7f0000000440)=@string={0xd8, 0x3, "e7ec569a01c3f39a01e08532f433f6553b6e19cc2bd5508f12276f590538a0833e3b6968c248926fe416432f2625c05175bf2704ee2ad5cb75778f305884e5c64d61989a60aaa0315ae01174cf1fda5e1897212f25a1e13a46d00cd2e409b941529d3ee6753fb06a124f81de0ca6b19c7ac2348646637d912caa411e585a79dcbbc276acc101bee532f0e8d976b4a2d200a1037097f0e8044aefa05029e3ed623c88b758851717da91875551f19905d2f6bf66bf0cc6c99c565941b324b607c4da1bea1ba1e04de7baadc3d998e0ebd7dedf98df09cc"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) (async) syz_usb_control_io(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) 1m9.741631037s ago: executing program 2 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x80}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0xf7e, 0x7e, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000002], [0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8837, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) r4 = io_uring_setup(0x3111, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x88}) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) close(r4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000a00)={0xdb, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xb) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26e, 0x0, 0x80000000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x6cb, 0x7d, 0x2, {{0x500, 0x319, 0x0, 0x0, {0x4, 0x2}, 0x0, 0x0, 0x7, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x99, '-a\xcc\xeb\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\b\xe2\xe7H\xa2\x1dQH\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\xcf4\xd6\xa5\x99 \xc3z\x82D\x941\xbe\x81y\xbf2n#kz\xa2Bu\xd4y-\xe8\xa9QM\xe4\xe8\xc0eh:\xb8s\xd0\x1e\x0e\b\xff!20\x1a\x94\xf5K\x80\xb48E\x89T\\=\xd5\x12UT\xef\xf2\xa0B\xe3\xe1\x00d.\xc3\xc1Z>\xdd7\xbd\xa7JFq\x1fZ\xefw\xd4\xed\x9fVb~\xcc\xaa\xee\xfb\xef\xe3|\x14\xae\xe1:\xba\xbdN\v\x15[\xa8\xa2K\x00\xcf\xf3_', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x6cb) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r9, 0x0, 0x0) fsopen(&(0x7f0000000000)='udf\x00', 0x0) r10 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r10, 0x2) r11 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r11, 0x6) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 1m8.757187008s ago: executing program 1 (id=633): inotify_init() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) (async) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async, rerun: 64) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 64) r6 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) r7 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0xf0) (async, rerun: 64) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 1m8.266810027s ago: executing program 1 (id=634): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="47aec88154998847399668", 0xb, 0xc190, &(0x7f0000000200)={0x11, 0x18, r2, 0x1, 0xe0}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x10) 1m8.130253697s ago: executing program 0 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r3, 0x800799c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r4, r3, 0x0, 0xf000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66baf80cfb66bafc0c66ed3664420f08f3400f01eac443416fb500000000e048b800100000000000000f23c80f21f8350c0040000f23f866baf80cb83491cd84ef66bafc0cb8620000003434660fc734d78f0878c1ffa366bad104b80f000000ef48b801000000000000000f23d80f21f835c00000a00f23f8", 0x79}], 0x1, 0xe9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f00000000c0)={0x4, 0x0, [{0x0, 0x2, 0x0, 0x4, 0x10000, 0x4, 0xd}, {0x1, 0xb, 0x0, 0x2, 0x5, 0x8, 0x2}, {0x40000000, 0xffffcdd4, 0x0, 0x20e, 0x4, 0x8358, 0x3}, {0x40000000, 0x2, 0xa, 0x8, 0xd5a, 0xf5de, 0x100}]}) 1m7.937132626s ago: executing program 1 (id=636): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 1m7.829286818s ago: executing program 3 (id=637): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/181, 0xb5, 0x365) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c64d2, &(0x7f0000000180)={r4, 0x80000}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x40, 0xfffffffc, 0x0, {{0x3c, 0x4, 0x2, 0x3f, 0xf0, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x5e, 0x3, [{0x7, 0x10, "af98c94529e70be92ce85b10b3de"}, {0x2, 0xf, "b937b709991cc57a7635d8697c"}, {0x1, 0x5, "e66217"}, {0x0, 0x7, "a114be4978"}, {0x5, 0x11, "6d349d8c84a67e601103188eb56b5b"}, {0x5, 0x8, "a26126d2e798"}, {0x0, 0x12, "da810c4652841b904feeeb33a6cb1fa1"}, {0x7, 0x2}]}, @timestamp={0x44, 0x8, 0xe4, 0x0, 0x8, [0x6]}, @ssrr={0x89, 0x13, 0x1, [@rand_addr=0x64010101, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x0, [{@remote, 0x4}, {@remote, 0x4b94}, {@multicast2, 0x4}, {@local, 0x62}]}, @ssrr={0x89, 0x17, 0x93, [@broadcast, @loopback, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x20}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x9a, 0x3, 0xd, [{@multicast1, 0x2c2907f8}, {@private=0xa010102, 0xd}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x1000}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x7, 0x3, 0x68, @private2, @mcast1, 0x1, 0x97, 0x7, 0xfffffeff}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x10, 0x20, 0x3, 0x3, {{0xe, 0x4, 0x0, 0x3d, 0x38, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ssrr={0x89, 0x23, 0x58, [@private=0xa010100, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x44}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}]}, @end]}}}}}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r12, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0x0, 0x6, @remote, @remote, 0x20, 0x8781, 0x6, 0xe}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x4, 0x3, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @private=0xa010100, {[@generic={0x86, 0x4, "9009"}]}}}}}) (async) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r18 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) (async) sendmsg$nl_route_sched(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x168, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x40048c0) (async) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 1m7.50676656s ago: executing program 3 (id=638): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xbbe40000) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000f62000/0x1000)=nil, 0x7000) unshare(0x20000400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0xe, 0x8, 0x0, 0x9, 0x2000000000000000, 0xfffffe0000000001, 0xfa15, 0xfffdffff}, 0x0) syz_io_uring_setup(0x750, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000200), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x0, 0x2008, 0x2000007, 'syz1\x00', 0x900005}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)) ptrace$poke(0x4, r4, &(0x7f0000002040), 0x8000400000000006) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 1m7.50604133s ago: executing program 0 (id=639): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10e6, &(0x7f0000000b40)={0x0, 0xbdee, 0x10, 0x400001, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x80200000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cbaf", @ANYRES16=r2, @ANYBLOB="9b0f2abd7000ffdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x1, 0x0, 0x1000}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x414}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) 1m7.462790816s ago: executing program 1 (id=640): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_pwait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x7, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x448040, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x2010, r2}, 0x18) dup2(r3, r4) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r2, 0x0, 0x0) 1m7.048546274s ago: executing program 1 (id=641): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r5 = syz_open_dev$audion(&(0x7f00000000c0), 0x6, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x118a, &(0x7f00000000c0)={0x0, 0x5d97, 0x80, 0x0, 0xee, 0x0, r9}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x100, 0x14, 0x8, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1f, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa7, '\x00', r7, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x6, 0xffffff81}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r12, r13, r14, 0x1], &(0x7f0000000700)=[{0x7, 0x4, 0x9}, {0x4, 0x4, 0x1, 0xc}, {0x2, 0x3, 0xa, 0x7}, {0x0, 0x5, 0x7, 0xc}], 0x10, 0x6}, 0x94) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 1m6.733705061s ago: executing program 5 (id=642): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000010000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000bfe000/0x400000)=nil, 0x400000}}) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x71, 0x9, 0x80, 0xffffffffffffffff, 0x1, 0x3e, 0x3a, 0x1f, 0x38, 0x193, 0x8, 0x3, 0x20, 0x4, 0x8, 0xb735, 0x7}, [{0x1, 0x2000, 0x2, 0x1, 0xf5, 0x2, 0xca, 0x400}, {0x3, 0xe7ca, 0x5, 0xfffffff7, 0x1, 0x4, 0x6, 0x5}, {0x70000000, 0x8, 0x7ef8, 0xfffffeff, 0xfffffffa, 0x80000000, 0x9b94, 0x1}, {0x1, 0x1, 0x935, 0x4, 0x1, 0x10, 0x81, 0x8001}], "78625f369c72d3bec477ded274c3a419c637985d05763443ef76d3a5102eb6799dcf912c", ['\x00', '\x00', '\x00', '\x00']}, 0x4dc) 1m6.51223889s ago: executing program 5 (id=643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000001200"}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r6, 0x0, 0x3, 0x0) close(r6) 1m6.401880583s ago: executing program 0 (id=644): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x9}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x80000001}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc0000", @ANYRES32=r2, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r9, 0x5405, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, 0x0, 0x0, 0x4000001) 1m2.905157802s ago: executing program 0 (id=645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200300, 0x126) recvfrom$rxrpc(r2, &(0x7f00000001c0)=""/170, 0xaa, 0x40012002, &(0x7f0000000300)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private2, 0x5}}, 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40004041, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581"], 0x0) 1m2.319276351s ago: executing program 1 (id=646): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000000), 0x7f, 0x2}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfffffffffffffeff, r0, 0x80000}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="6fd00efffbe3ba6565635c3f89852f7e5162ce7847ec5c35aa710f5cd0c8b6dce7797feb94f9a3f19fb793f3bc1abfd8832b84bab1ea37a28fa000ed") r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000140)=0x34) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000001c0)={{0xf}, {0x80, 0x5}, 0x98c93a0, 0x2, 0x9}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000240)=0x10001) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000300)={0x3007000, 0x3136564e, 0x3, @stepwise={0x0, 0x42, 0x3ff, 0x401, 0x25, 0x4}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000340)={0x1, 0x5, 0xe, 0xb5b1, 0x4, 0x2, 0x6fa, 0x4, 0x7, 0x3ff, 0x1, 0x2}) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) syncfs(r2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x400001, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000004c0)=@hopopts={0x29, 0x19, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x4f, 0xfff2, [0x6, 0x2000000000000, 0x1, 0xf, 0x0, 0x5, 0x4, 0x5, 0x4]}}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x7fff}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7fff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x10, 0x2, [0x401, 0x9, 0x39, 0x0, 0x498f, 0x4, 0x80000000, 0x56, 0x2]}}, @pad1]}, 0xd8) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f00000005c0)={0x7, 0x9}) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x19c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xc5, 0x7, 0x1, 0x0, "bb0d02dc11b9edb7d24a22978a9ac797b72c93da924e0c862563a182f8a0756b2702b41a67c8635175ad6b5a69346b65d8f7e0933d090daeb4d8cb04ee8b44feea12bf72e84fd551f0145c273fad54498af0061b48cf26ec83f3dc95f07dd936cb0f632c2c145c9b6b244095fdca035eee7fed9763524fe7cd73930d1de3bb23217fd82bddacfab7b4673d309c0ad7aa6dd63511bbc4a23efad9346e80d4168628555b044e5cfc6646e7ef3c6b9bd5d604a902b046eb528d0896583977c620b51b"}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_USERDATA={0x5a, 0x7, 0x1, 0x0, "2a12f42dba152e9815e15cdef9379d30775013fed310116f4443d5cae93b3d833171930964906fd5e7c1d173172347daf3b32380640a1c9490b24a384c9ddb2dbf926f8417d2fece3b1624a67479a45ce1ae8479fb6a"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "51131cac9aae139b35a4e67d88777c6bb1ef9a6d730b5650ba"}]}, @NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xcf, 0xd, 0x1, 0x0, "13c410fd7445b1342bcf230bee27e51bbe790d3ccc9cd21955930467bd167291c4d2e125c226e3dea27d13a6a29a9aa63d6f3b3c272aa53c3080b66fe5afaf4f6625e1fe84d2da689660a206465c165eb8c95f357811f65e1afab88ea3e5285935cf9767e903e966f39cd99e2f6d32c1f0c6ef1969497a6c31d2041aa7b230b3ac5f7744bfb2ba490c2a7e3d0474d89fc9e49c0a2e99c32f59de2783c230dca79b6ed4cbdf795762bac3720d30f67afad76bfe5ff6dd66e6063f8050f9e13080daf7ecf6866b2ad2ea8b49"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x10100, &(0x7f0000000980)="f20e77b338e4581a93cce98530ddf55b149901e8b03fdefb14e64f64590e5c6b7d78557817ec360748", 0x29, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="ae4510de9e8825d6bdf0e63ec12e4b2473a04816049119873ea1c18a24f59d39494d647293062f887a44d1dcb5393a1898336b79b1b4334c70748d017372eb2acd9bcecf15cb3b835d832c93ce2fead8a35e38ae743416347236b242a772e0d3a5a89825cfc3bb6b21c33150e83694726b3a155fef9c380ba36c22034cddddd176e3cfdd76507546ec9684913b9fc992dfd3ee85015eb08f297081e0bbd4d69e8437b6d164f7b540914a3c30cb5154") ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000b00)={0x1, 0x3, 0x4, 0x9, 0x3, 0x81}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x1, 0x7889, 0x0, 0x1593c, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@ssrr={0x89, 0x17, 0xd3, [@remote, @loopback, @private=0xa010102, @multicast1, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'syztnl2\x00', r7, 0x29, 0x10, 0x4, 0x1, 0x24, @mcast2, @local, 0x8000, 0x40, 0x9, 0x7}}) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000cc0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="7e6a3a0ba2b83588b2799aba4c84eef2ad1e650483c2708999d8a74023501fe6f89587241d492cfd192d28d91e9cb9c8dfba13fb0b07c7888621593a0e0cbfcdce40d5461bc4e347cfbf4d60607a4a4434d52529d68fecaf10a4c9c6171213db66d537514bbf51513d607290ab7b75cbd0643494d2b98306f90db1", 0x7b}, {&(0x7f0000000d80)="f53a86ceafa1130b5e1af03b7c6a1e05d6822e9fcd096c639619f5653898cf0b86f85eb8ceab8504068d6663df", 0x2d}], 0x2, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x63}}], 0x38}}, {{&(0x7f0000000e40)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000e80)="e6b109af21223f00cc25", 0xa}, {&(0x7f0000000ec0)="3276f8059ba6ed9b5f686208fdf72625b18c02e4c25212510f7d8527b9db04100fb74c574e6df03c6953485ff83459568f2322732a63f0cafc380302d4d608729178b63054b65106e9e439b2cbbe439618a43fc720db91758f94f066921796bb50cfc7b7fba9ec1381cb0b5d82932e6b684ce9e8593f77", 0x77}, {&(0x7f0000000f40)="32d760ca5def13137f5f77ce902267501b2bdd4c108d83f6530d9fb74d5dd8e53ee34856a69f7e77e01c411650ff07ee51c46ef02402baaa10b998e0c22511c359a817d2f71aceb5164896ae1bdebef7475319a8a901de5ec2c3f39d98298adfe017e816bca35b99402ada9624e40e9cfd7846d731d07dac0c53601f43b0f52d5e0d404ce3", 0x85}], 0x3, &(0x7f0000001040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@end, @lsrr={0x83, 0xf, 0x95, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xa9, [@local]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0x9, "9e79821f838dd0"}, {0x6, 0x3, "a7"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001100)="98b4cab748d967878375c84b452236b48eccb754bed61d4e7af0573e9607bf44fb7b8b0fccaf080b804033fa78f5fff3ae6b934d355906262e293dbe32c7b2b35965a06ec404a291b5ab3e44af5d175d6bc3ea352183bc51847d05ee448fbe0a99b4fe73694ce1980e2de2917c1dceff679d104884b38b39547d5429922828316be20de5da259af166d050d4c6f9893738ef6cb7edb3c34250", 0x99}, {&(0x7f00000011c0)="3bf22d29af138b47547379e4b2d40504781711750c89a6c3c8f5ae5e78d91608000b9bcf1198f3c6bf9910b49f3a", 0x2e}, {&(0x7f0000001200)="6712ba04d213c057dec282e71831bf8fe476a6ddecdb1c", 0x17}, {&(0x7f0000001240)}, {&(0x7f0000001280)="98b7dc9cab9de4b36074c07666da0461f23175edac9cd8eac0577304fcca437eca6a45130f4da8153af27123dd78973bc21f9ab212731ee214174df23074de9d12ca69faf78a40337f8ee3a2b77b9cf9f7634f2f4605dd92a54518f39c9c3ed26904df0d582742ed550600db9a5de18472f540584a2bdf37cf48b7b4b227b9d066ee48830776241fe7d6d334a9", 0x8d}], 0x5, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa0}}], 0x48}}], 0x3, 0x20000000) ioctl$TCSETS(r5, 0x5402, &(0x7f0000001500)={0xb9, 0x802, 0xe, 0x4, 0xd, "fadc719fb03dd69cdafc9da4c45af1790aafd5"}) 0s ago: executing program 33 (id=645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"3c6c070169763fe7521feaaf2876c190f87bee78758071c670bd590228740da67ca012caddbd867a700a2cd473e85e9e8011a9c41d7c01abbe2f548512c995abe66c083b6f88546daa7c8171ba1c32b7667065731712c5f703aec7b7632c117da74eed0aa2f7c0081a6cb5b14ed8eb53a944ccb48630dc87fa6629a8205016ffe81438b671fc611753c673b8f3786ac4744a20a77d44b8c9677a507697dc231b8714555437e697a17b95d15d3e41b875d83ed28a6d57bb28f13c1fa88e6cd42c4d534788b7fad1926565578bb5db44c60077a25691bf4eb9132ff038240200f2a0dd3d44ed1dd077c35aaa7b98d3d6a374272b4f3dca66950a7b265a3e90dca08942efd5bde49a0a1fa468d2a1bd63c3b13bfd425677127334ff04acd0fd9815a8cc2116216835364f8698d21e81505ba4d74c916a585a8ffb579bbf09174dc5567f25890ad5f356e31c41a9144d62a393867af514997bd783b24eed3c3320ad767e17cde09498725baaa4a429100aa6961d40eaf0b7de17f51a1061d6032a94b45077cae5a4c959f548ff3364c90d01a9ccff9e985994398d9908eb55f9ba393d7159a9eca0018a7a78ffb1f48cff874d8ce7c9e7674697b04fc56295ce4a4cdf11f66f6e3bb10778289e61d78c6c54a1462160cb6e3d216b21006cdff8c5a27cf64abdc5c4ddc3531c0096fcf089a8189976b76feafa0f29b15f6cce4bb3c4cb765b6d68aebb2631c3d8301ae3ec0fa11d5246712be1aa35d8fcc38b816faec202f47e512eb1d35e13a1cfdce54f67e94ac22d0e96f5c76238b191a5d0910f795d366db049fbebcd0a5851badac19a1542712ada5d3c43965dc9dc4304a19e109a88e46c5481cdf76e617764fdc3192965f78c4d525b0830b4accd1837b68746a8e81ea776314f2121ef834a35a1aaa65d159546e65087884acd12fcf974f36db1076f26ecc63fb60f0bc20787b021aaa2e570bbb1980538413062de0609a7d53b978ac1a76f60046500143a8121f490acc67d9f4bc2ab6da2d1beb2ed8b5569d9fd925c2d8590e8ded9f4e44abd39ed9d9ec7017e8d453ea49297731f0c11bc6dedad9e068c75a4fb0e9eae86c18b039e01c9c423d6ac63516b679def0f3963e8a60a4042bd46108c64b19fcf476f256458863d9fe7c5034f4bc6d2dcd8ef45268faf4adf0eb8210cb44a657c740536a4ad743816df0666f36596e1977b4add04182e0f74675be8ff306a9aa6c852d90dddde5b7ec8b5cdfb1a3174fc136ce54b7b18f48388ab8fc887cb4e68925a5e9339527601052ca7bde1f99b97fbf82acbe6206a393c33a4caf3e25f5f9d087ae8a71b09a1c44af105fc47f6283526a0c170c5055424f3afdde65a72e9ada0c516258741a0bf647b14c6d7176415d5450876ac2268a4b8f46dd63588bfef3421697795ecf167132af1c92eed9f84faab46468a68030907be3d56872473a65a9da437d514e49e3cc4695da46cf8d3a09dfa0d7004752a4fd501b242f30a44b17f844971787d63296811f943aa6572c4666f211e4a1b633be104e547b75b85f088bbdeff9944ee386a817982951841407c92121522f33d11ca3f248079cda61c68304b895af01f9c34e4c3bbeb09548a54ce8c2f0d0d5226c96fcbf717c464fdb6a7788aafe94aebe341592d9ce0780cb89500ea9c72edd337ff0e9bd45c31103a9cf6c07da67dd3916da636e601feada302cc13708b6fbbb9537c6045b9415e8c974ebd17615d54a85cabfe912870f348ae34cdfe73f0e1866a98100db90fbc335a9ebd9272f02d03c27fd32ffdb25de628d99e82b3301d2235b3d1b69dc02e9d90b7023c00094149ee9f358e2d1a7c95352ff97d8444a2a1c57e97258eed644d6477acbbc72198f2a7c064307e5fad8a7c17a59ffe0e4c084106dd8e689f60620436239dd861a1e0749b5967c36d425e76687c0525ba9233791f280956a444de7d5bd638f99fa16235a6c26f890609050e3a8bcc183730299895628b337979eead55cacff4d3567514369ed4efb3a9244657c369bea26cf8978bbea910e5aeb1650938007c7954c79c95f0334fa70f1553cb0535e50265d2c2d841ddaf53d8bb81e1289238403db7d484f05d592527aa07af4341a00ced1c2f27f9672383ce868201aacf04a0979e676333a808b13a88197b08f6cfa695f7f6a4df32cc052c458e44e23f46fe22221e7daaf9ecc461f00d55bd5760f4b91f2f48111e3bcee092bbbc709a3ce9bfb7689d95fc3b64326cc410991560801605c8dd482320b38016021203960611383dd270f47c12624aa6a88f9e26a6e01fde37fbbfcc0d1d0ae7964c7d61a4627efc901e8b21dcf7423eecee604c624875a314789accb43a868e4e80b30830429f4122db3fc7fef8e0e910cba0e53230b45a5b5cedfa59e03c640345f10857f60ded721921d7eb516241c37a2b2b3e8d4394eb1c0fbed96c0f3f60dc26f554823649957dc34b313aa8a647b0ee36e55f0aac82cb9bb4c156dcce22925f2d8b8bf02e765cc4dadf303b63876c9d1dbcd7d797ad03388fda19ecd67edaf9af74a337029d2d8be0307aa92f12a1b46daf02b7759e7fc2643b4b50f83ecb6c1eb4b59c15ca2eda3a8e2f178ec789bbe48a1d6f2a4f79aa4e0cf7978d0b81a30c068d83d8859b0d45d67d9aa8efa094b7c724336ef1a327913d4100da5eabcb9f30e8290d7e6c8aede789b3401690c901a54703447a2843190e4044a7b699a9276efb3a1c6379a9192b61c503a5f420b2177c4ae147ff6aa7675e5ae51f34687846d41028f5b5c3b0679c3eb3cd804b17c2ea29860d9a23777c2f2fe09d99b225cbdfef793bad8c99c4e3721e7aeca83e2d84abcfdff809f7c5ab2855fc117fe3093bd51fe3209f8b686a7a2326e6fb1dd0f88388ba3506d4c08ee1a06dc06d1a96119e742c9e368736e92e3fa28310deb2d976f9dadf0a3a3308352a103a34edaeecb98bf98fdc1b8962f558a8820c0c2ba1d2cc3dc495fdbd5db5998f7258bf8522bcd78e8221b3ff467fb109137873b29b847a7d64ceda4b03c328ecd2e0dbb5e94652eb9b9c13569e310e2f1b022c93e90759568f8ac5bcc71c6efd872a05eb65fe6be110247f7d41ad08b74fae0aa8840003faab9dc9ccab78c716a98b26c34fb91c513b7c7c0ab1050374be5b0f5866b24824b581d1ce7283d5ff4ae1ef7941e6baa498bbff6fbe6e1ccefee6156d418204f1d57a40d44b71c19e2ef4d881ccc6cdab1fc008efa59439219cf7b213bd95317bd01af96ca5cf7d6917ee5313dde6f6a2db0cf12522cfa41a99ecaba7d9a58a913c5c10f346298f1bc8786560e9230c779e2a3c74dcaf7cdbff70194cb8983b5795449d72663018ea07af98981bd04829019f752ef9c13d062d8f15975cb96adbc612fbcdec1dfe8c02c3ec16ea9e22a70844ff54f432d5c9a1408fdd6c5fe5d1aeffd85ea79770da9c39b6e130fed28730ca19f4d356e3f7b86bb5235a904de48c5e307715cfb88a5b5bb5972b5d869e07f1744666536768ab60524bf7beaabf78cdbabe0b8b63af405e8bf7827331b4aea3695b81b29965c94c86377c8560e2e8b2c940b36624b577255410a85ee57e9beea5a2994f17b5bfe00c55cbad0ecd15c727674a8ab46e8a143e8624e68be63f818196aa599cfdb52eb13d3d63f390c553882155026d3ecdbeb88b9753e0381ed621f36564a47bc407a6ea0cb802048196efe79d31ac8e5be27a5422d77c5cf721ad08ed8a56fee6257f911ca48a7d2fd55f030f9a2efd7447252636d1e608114e48e5fb2bbf819ce076c68ce47901b2437808891e4310fe8eee7b96f85975aec9893a54003ff2e7a86558b3fc3b971d2e8876aa6de6554f78f0d7e0321ed006405e77f7c6d8cc02ce0e501ca6daea6ce13c770a8f40394886153c914aa9465c8b2458ef1aba7eb16cf274fedccac03f745f3177f0af2190cf37ec35e866710768300beebc1e736481cdd911ab58911b64bb501a6165c140e6a45c0ee7ff4a4a92d1d86c4eff73c9996da4396d0b40681050f3198059e6dfa5a8f223f7078c4bc5c2478f72d06b24e32bf90d9c45b5b25faa6c652603d2709d8873b0d96321c58a85947cd75248850df637e953534d76f08d53d86af36eec39395c771246668a21fb81d3b3b5c7ea20efffcbc062226422418e0e8b4787fa01415fe9995c182ceeb754b705f9428117dba714d24fefb94c3cf06a6ceb47a180418028fb253c36925c8138e77414e4650f4d904a0de5e2010d4a94f552da90eee4f8ee3e4ee32f6b3531aadf58e17ad763829c771b584534eacbef5ff556b8684d2272d164fa8b596933875ae7678c46f2917c83cdf3cf38df45daa74679cf1919f936984a5f838fab22a482c9102193319c1ab9a777170450dd64cffd40d15490f0186a21bae4d16bd2a6b3e6223366dc247884daf03f150576adb327489179f3d457f31ae0a4570143bc7ddcc2b37cf35320bea779e8edf1d01f3145dc5dc4941b1e753993cef88738ac7468a99d9e7676c06ba20bb91242518340f18285a2ab8653acf880f88515a7f3b3060c8ea0eb4d18ec9edeae1bd6558663945425fb6cfd7f902e46106754297ac16ad16c21115d24b379551295956b1b66e5e85c0a8b451f76521f332be709765476efbb06b471dc68400026a874be50edef57706852fa7af5ecca21cf6e3ecc2f51dcff1dc1011fae68812813d013a06eb037df7d1dd2c49b54d3332eafd70cb3744848de69359f1183b640c007b5b1e4bc119737d0c2e6c4ff04033c5d3ff81e4eafacc3c98fcce22b612e4402e3c255d476f16a52120ddef5e1587021f432cc278bca5f52057faf85364460a81ca5213e1da858d8013b2008f10bbac65d1e1fa40f75ca68ce882ab6a1a31feca0b9055b474e45909a6ec8f8eed07b5ad1c354ac1665b19bb9229862abe0a3f27bcef78577aa16139b277c0d636834b0522cd8ac1a621c335550d2dda4379eba2d946e30570ba57d89706b1903760e16691fd02ecf084b0a57068199b74175baf694bddb71f0fc669d0a39806cefdefd2bc44930716e4b1066cccae4a5165ebfd9aab777f35d419eeafc44eb9e14859408fb1482959cefcbae1dd18037d5407944cd5f8d04372cd65874edf4b22275f1b1950ac636e9fbb96c39021c4539ee084d9fed750618fae63c6030dcb6ba97778a3eaabd61bde3fccf95dad2c51a38b5fb9b7945f6a5e358899dca0e08c5ef824d9e6f3260b1d9f4f3bbe39820f65c982a2d1c5f766306ba8039aae49a730ff192549f288ead2a6a081f48b83704d6f10885eb9c3e8f5986f3ad3d780602e1e7aff8abb938f39d6a345acff5f6515904d08472b509def73851cb8a66ac9dbed667a2fd17cdf5821c3ef51376d316b9609aaa1053b371b4d25d03ff02923d561daea99bc96a11db4a7f8aa8172e88c533838f589e566cda498ff6fa10f50d6a87399b1589e4146f9ec29d769afe34aaf0b06fe0fddea02834ea2570f0b462bc4aef98444e480beb9eb3c0b5ee1b5b9734419f8561369e3bf5346226cc3e14a82dd47cf1ca7523d9fb05eac9b205ca8aab18f9eee19ddfdab6c06aeaad05f4ca0fc2ae10c28dd40f19f89b20814fc8cca534325a81c997829cdbb7bae89c5d539c90497bcb0c3a2d958762650c13df76f3b3e8281619f9003c77e7152a11a725cb24d4ac77669de25f05a23273bd67abfd8cd136c86290cc9fa55463c001b117b723f028812bd346c5c07b812c09cb8a5f8f6dfe456512861d8b06ed02474e708b24ee56", 0x1000}}, 0x1006) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200300, 0x126) recvfrom$rxrpc(r2, &(0x7f00000001c0)=""/170, 0xaa, 0x40012002, &(0x7f0000000300)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private2, 0x5}}, 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40004041, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581"], 0x0) kernel console output (not intermixed with test programs): 7][ T5912] usb 2-1: USB disconnect, device number 32 [ 194.234891][ T7409] fido_id[7409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 194.288898][ T7417] FAULT_INJECTION: forcing a failure. [ 194.288898][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.334755][ T7417] CPU: 0 UID: 0 PID: 7417 Comm: syz.2.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.334789][ T7417] Tainted: [L]=SOFTLOCKUP [ 194.334797][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.334808][ T7417] Call Trace: [ 194.334816][ T7417] [ 194.334824][ T7417] dump_stack_lvl+0xe8/0x150 [ 194.334857][ T7417] should_fail_ex+0x412/0x560 [ 194.334886][ T7417] _copy_from_user+0x2d/0xb0 [ 194.334915][ T7417] video_usercopy+0x36f/0x14b0 [ 194.334940][ T7417] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 194.334973][ T7417] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.334999][ T7417] ? __pfx_video_usercopy+0x10/0x10 [ 194.335031][ T7417] ? __fget_files+0x2a/0x420 [ 194.335062][ T7417] ? __fget_files+0x2a/0x420 [ 194.335087][ T7417] ? __fget_files+0x3a0/0x420 [ 194.335126][ T7417] v4l2_ioctl+0x18d/0x1e0 [ 194.335148][ T7417] ? __pfx_v4l2_ioctl+0x10/0x10 [ 194.335169][ T7417] __se_sys_ioctl+0xfc/0x170 [ 194.335192][ T7417] do_syscall_64+0x14d/0xf80 [ 194.335219][ T7417] ? trace_irq_disable+0x3b/0x150 [ 194.335248][ T7417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.335268][ T7417] ? clear_bhb_loop+0x40/0x90 [ 194.335292][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.335312][ T7417] RIP: 0033:0x7f445519c629 [ 194.335331][ T7417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.335348][ T7417] RSP: 002b:00007f445611b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.335370][ T7417] RAX: ffffffffffffffda RBX: 00007f4455415fa0 RCX: 00007f445519c629 [ 194.335383][ T7417] RDX: 0000200000000040 RSI: 00000000c034564b RDI: 0000000000000003 [ 194.335396][ T7417] RBP: 00007f445611b090 R08: 0000000000000000 R09: 0000000000000000 [ 194.335409][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.335420][ T7417] R13: 00007f4455416038 R14: 00007f4455415fa0 R15: 00007f445553fa48 [ 194.335449][ T7417] [ 194.950232][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.956823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.136941][ T7435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 195.158415][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 195.177768][ T7433] sch_fq: defrate 64 ignored. [ 195.234593][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 195.316818][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 195.324351][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.335744][ T24] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 195.377150][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.402340][ T24] usb 5-1: config 0 descriptor?? [ 195.487453][ T7445] openvswitch: netlink: Missing key (keys=40, expected=100) [ 195.868405][ T24] hid-generic 0003:0DFC:0101.0007: unknown main item tag 0x0 [ 195.900427][ T24] hid-generic 0003:0DFC:0101.0007: unknown main item tag 0x0 [ 195.926684][ T24] hid-generic 0003:0DFC:0101.0007: unknown main item tag 0x0 [ 195.989273][ T24] hid-generic 0003:0DFC:0101.0007: unknown main item tag 0x0 [ 196.013601][ T24] hid-generic 0003:0DFC:0101.0007: unknown main item tag 0x0 [ 196.037116][ T24] hid-generic 0003:0DFC:0101.0007: unexpected long global item [ 196.072599][ T24] hid-generic 0003:0DFC:0101.0007: probe with driver hid-generic failed with error -22 [ 196.149144][ T24] usb 5-1: USB disconnect, device number 26 [ 196.737271][ T7488] FAULT_INJECTION: forcing a failure. [ 196.737271][ T7488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.758340][ T7488] CPU: 0 UID: 0 PID: 7488 Comm: syz.3.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.758375][ T7488] Tainted: [L]=SOFTLOCKUP [ 196.758383][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.758394][ T7488] Call Trace: [ 196.758403][ T7488] [ 196.758411][ T7488] dump_stack_lvl+0xe8/0x150 [ 196.758447][ T7488] should_fail_ex+0x412/0x560 [ 196.758477][ T7488] _copy_to_user+0x31/0xb0 [ 196.758508][ T7488] simple_read_from_buffer+0xe1/0x170 [ 196.758540][ T7488] proc_fail_nth_read+0x1bb/0x230 [ 196.758569][ T7488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.758599][ T7488] ? rw_verify_area+0x2a6/0x4d0 [ 196.758617][ T7488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.758646][ T7488] vfs_read+0x20c/0xa70 [ 196.758663][ T7488] ? fdget_pos+0x246/0x320 [ 196.758696][ T7488] ? __pfx___mutex_lock+0x10/0x10 [ 196.758717][ T7488] ? __pfx_vfs_read+0x10/0x10 [ 196.758739][ T7488] ? __fget_files+0x2a/0x420 [ 196.758769][ T7488] ? __fget_files+0x3a0/0x420 [ 196.758795][ T7488] ? __fget_files+0x2a/0x420 [ 196.758841][ T7488] ksys_read+0x150/0x270 [ 196.758865][ T7488] ? __pfx_ksys_read+0x10/0x10 [ 196.758885][ T7488] ? __pfx_v4l2_ioctl+0x10/0x10 [ 196.758918][ T7488] do_syscall_64+0x14d/0xf80 [ 196.758946][ T7488] ? trace_irq_disable+0x3b/0x150 [ 196.758974][ T7488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.758996][ T7488] ? clear_bhb_loop+0x40/0x90 [ 196.759020][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.759041][ T7488] RIP: 0033:0x7f8a3335cece [ 196.759061][ T7488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.759078][ T7488] RSP: 002b:00007f8a34264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.759100][ T7488] RAX: ffffffffffffffda RBX: 00007f8a342656c0 RCX: 00007f8a3335cece [ 196.759115][ T7488] RDX: 000000000000000f RSI: 00007f8a342650a0 RDI: 0000000000000004 [ 196.759127][ T7488] RBP: 00007f8a34265090 R08: 0000000000000000 R09: 0000000000000000 [ 196.759139][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.759150][ T7488] R13: 00007f8a33616038 R14: 00007f8a33615fa0 R15: 00007f8a3373fa48 [ 196.759183][ T7488] [ 196.817054][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 196.955286][ T7495] xt_hashlimit: size too large, truncated to 1048576 [ 197.555659][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.806921][ T24] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 197.825849][ T24] usb 3-1: config 0 has no interface number 0 [ 197.835582][ T24] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 197.849401][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.907723][ T24] usb 3-1: config 0 descriptor?? [ 197.925815][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 198.121334][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.431'. [ 198.270010][ T5882] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 198.436726][ T5912] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 198.484471][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.539837][ T5882] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 198.552232][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.568670][ T5882] usb 4-1: config 0 descriptor?? [ 198.598332][ T5882] option 4-1:0.0: GSM modem (1-port) converter detected [ 198.616752][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 198.632928][ T5912] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.709623][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.784845][ T5912] usb 5-1: config 0 descriptor?? [ 199.326568][ T5912] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 199.356948][ T5912] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input14 [ 199.426344][ T24] gspca_ov534_9: reg_r err -32 [ 199.581625][ T5912] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 199.686500][ T24] gspca_ov534_9: Unknown sensor 0000 [ 199.686614][ T24] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 199.875046][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.884805][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.308471][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.343853][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.435567][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.485646][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.496201][ T982] usb 3-1: USB disconnect, device number 26 [ 200.529125][ T5912] usb 4-1: USB disconnect, device number 30 [ 200.547394][ T5912] option 4-1:0.0: device disconnected [ 200.954105][ T7556] netlink: 'syz.3.441': attribute type 12 has an invalid length. [ 200.962149][ T7556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.441'. [ 201.126142][ T7556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.441'. [ 201.656862][ T982] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 201.860221][ T5912] usb 5-1: USB disconnect, device number 27 [ 202.020466][ T982] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 202.043182][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.073058][ T7568] PM: Enabling pm_trace changes system date and time during resume. [ 202.073058][ T7568] PM: Correct system time has to be restored manually after resume. [ 202.112428][ T982] usb 3-1: config 0 has no interface number 0 [ 202.126179][ T982] usb 3-1: config 0 interface 126 has no altsetting 0 [ 202.155864][ T982] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 202.182132][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.203938][ T982] usb 3-1: Product: syz [ 202.217275][ T982] usb 3-1: Manufacturer: syz [ 202.222189][ T982] usb 3-1: SerialNumber: syz [ 202.292471][ T982] usb 3-1: config 0 descriptor?? [ 202.315862][ T982] zaurus 3-1:0.126: More than one union descriptor, skipping ... [ 202.342906][ T982] zaurus 3-1:0.126: skipping garbage [ 202.358346][ T982] usb 3-1: bad CDC descriptors [ 202.387000][ T5912] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 202.414284][ T29] audit: type=1804 audit(1771930861.941:135): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.448" name="/newroot/93/file1" dev="fuse" ino=1 res=1 errno=0 [ 202.546500][ T5912] usb 5-1: device descriptor read/64, error -71 [ 202.819218][ T5912] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 202.826842][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 202.967171][ T5912] usb 5-1: device descriptor read/64, error -71 [ 202.986589][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 202.998387][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 203.008371][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.019790][ T24] usb 4-1: Product: syz [ 203.024099][ T24] usb 4-1: Manufacturer: syz [ 203.029382][ T24] usb 4-1: SerialNumber: syz [ 203.036842][ T24] usb 4-1: config 0 descriptor?? [ 203.044905][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 203.076797][ T982] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 203.088561][ T5912] usb usb5-port1: attempt power cycle [ 203.238318][ T982] usb 1-1: No LPM exit latency info found, disabling LPM. [ 203.247878][ T24] gspca_sonixj: reg_r err -32 [ 203.252664][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 203.264049][ T982] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.266642][ T5882] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 203.274730][ T982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.291791][ T982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.302751][ T982] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 203.315489][ T982] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 203.427644][ T5912] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 203.462046][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 203.470270][ T5912] usb 5-1: device descriptor read/8, error -71 [ 203.477099][ T5882] usb 2-1: can't read configurations, error -61 [ 203.606546][ T5882] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 203.740526][ T5912] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 203.777261][ T5912] usb 5-1: device descriptor read/8, error -71 [ 203.838879][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 203.856481][ T5882] usb 2-1: can't read configurations, error -61 [ 203.864453][ T5882] usb usb2-port1: attempt power cycle [ 203.887902][ T5912] usb usb5-port1: unable to enumerate USB device [ 204.105896][ T5912] usb 4-1: USB disconnect, device number 31 [ 204.184674][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.199757][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.236750][ T5882] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 204.260181][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.268280][ T5882] usb 2-1: can't read configurations, error -61 [ 204.396542][ T5882] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 204.423937][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.427107][ T24] usb 3-1: USB disconnect, device number 27 [ 204.432220][ T5882] usb 2-1: can't read configurations, error -61 [ 204.459001][ T5882] usb usb2-port1: unable to enumerate USB device [ 204.516525][ T5912] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 204.686502][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 204.694801][ T5912] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 204.704598][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.715825][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.730615][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.741429][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.758315][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.769949][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.784109][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.796881][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.812171][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.822753][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.838144][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.849062][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.863654][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.874628][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.889526][ T5912] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.901776][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.918070][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=5866, bcdDevice=28.4b [ 204.927622][ T5912] usb 4-1: New USB device strings: Mfr=233, Product=218, SerialNumber=220 [ 204.936350][ T5912] usb 4-1: Product: syz [ 204.941194][ T5912] usb 4-1: Manufacturer: syz [ 204.945905][ T5912] usb 4-1: SerialNumber: syz [ 204.955162][ T5912] usb 4-1: config 0 descriptor?? [ 205.177815][ T5912] usb 4-1: USB disconnect, device number 32 [ 206.037539][ T982] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.065390][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.135031][ T982] usb 1-1: can't set config #1, error -71 [ 206.165355][ T982] usb 1-1: USB disconnect, device number 14 [ 206.290091][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 206.356507][ T798] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 206.515677][ T7627] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 206.571533][ T798] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 206.581759][ T798] usb 4-1: can't read configurations, error -22 [ 206.641092][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 206.658458][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.689976][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.737724][ T24] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 206.741068][ T798] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 206.755375][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.783614][ T24] usb 3-1: Product: syz [ 206.791903][ T24] usb 3-1: Manufacturer: syz [ 206.804210][ T24] usb 3-1: SerialNumber: syz [ 206.823652][ T24] usb 3-1: config 0 descriptor?? [ 206.849658][ T24] redrat3 3-1:0.0: Couldn't find all endpoints [ 206.919960][ T798] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 206.928256][ T798] usb 4-1: can't read configurations, error -22 [ 206.951267][ T798] usb usb4-port1: attempt power cycle [ 207.556939][ T798] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 207.704213][ T798] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 207.742506][ T798] usb 4-1: can't read configurations, error -22 [ 207.956498][ T798] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 208.009306][ T798] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 208.036913][ T798] usb 4-1: can't read configurations, error -22 [ 208.057078][ T798] usb usb4-port1: unable to enumerate USB device [ 208.549818][ T798] usb 3-1: USB disconnect, device number 28 [ 208.913576][ T7650] program syz.2.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.075948][ T7650] bridge0: port 3(bond0) entered blocking state [ 209.108990][ T7650] bridge0: port 3(bond0) entered disabled state [ 209.141909][ T7650] bond0: entered allmulticast mode [ 209.248562][ T7650] bond_slave_0: entered allmulticast mode [ 209.254723][ T7650] bond_slave_1: entered allmulticast mode [ 209.314235][ T7650] bond0: entered promiscuous mode [ 209.366506][ T7650] bond_slave_0: entered promiscuous mode [ 209.401629][ T7650] bond_slave_1: entered promiscuous mode [ 209.419188][ T7650] bridge0: port 3(bond0) entered blocking state [ 209.425820][ T7650] bridge0: port 3(bond0) entered forwarding state [ 209.826347][ T7664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.146529][ T798] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 210.273836][ T7671] netlink: 388 bytes leftover after parsing attributes in process `syz.2.475'. [ 210.357488][ T7672] IPv6: Can't replace route, no match found [ 210.389211][ T798] usb 4-1: not running at top speed; connect to a high speed hub [ 210.439827][ T982] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 210.440856][ T798] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.483125][ T798] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.492883][ T798] usb 4-1: config 1 has no interface number 1 [ 210.502128][ T798] usb 4-1: config 1 interface 2 has no altsetting 0 [ 210.515432][ T798] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.527962][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.536332][ T798] usb 4-1: Product: syz [ 210.542775][ T798] usb 4-1: Manufacturer: syz [ 210.547778][ T798] usb 4-1: SerialNumber: syz [ 210.636742][ T982] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 210.645715][ T982] usb 1-1: config 0 has no interface number 0 [ 210.655898][ T982] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 210.679838][ T982] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 210.715131][ T982] usb 1-1: config 0 interface 200 has no altsetting 0 [ 210.733561][ T982] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 210.743294][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.752253][ T982] usb 1-1: Product: syz [ 210.757041][ T982] usb 1-1: Manufacturer: syz [ 210.762006][ T982] usb 1-1: SerialNumber: syz [ 210.777057][ T798] usb 4-1: selecting invalid altsetting 0 [ 210.786305][ T798] usb 4-1: failed to enable PITCH for EP 0x82 [ 210.792782][ T798] usb 4-1: selecting invalid altsetting 0 [ 210.823470][ T982] usb 1-1: config 0 descriptor?? [ 210.878334][ T7676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.478'. [ 210.960776][ T7676] syz_tun: entered promiscuous mode [ 210.997968][ T798] usb 4-1: USB disconnect, device number 37 [ 211.011311][ T7676] vlan3: entered promiscuous mode [ 211.096998][ T982] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input15 [ 211.384616][ T982] usb 1-1: USB disconnect, device number 15 [ 211.747135][ T5860] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 211.876688][ T798] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 211.929330][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.944521][ T5860] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.955178][ T5860] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 211.967706][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.979919][ T5860] usb 2-1: config 0 descriptor?? [ 212.056840][ T798] usb 4-1: Using ep0 maxpacket: 32 [ 212.066310][ T798] usb 4-1: config 0 has no interfaces? [ 212.072457][ T798] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 212.082008][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.095960][ T798] usb 4-1: config 0 descriptor?? [ 212.176492][ T5882] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 212.311192][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.320365][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.334444][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.343678][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.354005][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.362300][ T5882] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.374085][ T5882] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.376125][ T5860] usb 4-1: USB disconnect, device number 38 [ 212.391861][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.404219][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.413275][ T5882] usb 3-1: Product: syz [ 212.418711][ T5882] usb 3-1: Manufacturer: syz [ 212.423610][ T5882] usb 3-1: SerialNumber: syz [ 212.636294][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.639612][ T5882] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 212.645425][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.691378][ T5882] usb 3-1: USB disconnect, device number 29 [ 212.711024][ T5882] usblp0: removed [ 213.138469][ T5882] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 213.196490][ T5890] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 213.276711][ T5882] usb 3-1: device descriptor read/64, error -71 [ 213.366533][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 213.375705][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.384107][ T5890] usb 4-1: config 0 has no interface number 0 [ 213.396185][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.405684][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.414000][ T5890] usb 4-1: Product: syz [ 213.419541][ T5890] usb 4-1: Manufacturer: syz [ 213.424368][ T5890] usb 4-1: SerialNumber: syz [ 213.431667][ T5890] usb 4-1: config 0 descriptor?? [ 213.439677][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.516618][ T5882] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 213.644884][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.663306][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 213.673026][ T5882] usb 3-1: device descriptor read/64, error -71 [ 213.797246][ T5882] usb usb3-port1: attempt power cycle [ 213.844689][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 214.047268][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.058360][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.069181][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.080206][ T798] usb 4-1: USB disconnect, device number 39 [ 214.089628][ T798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.105133][ T798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.122422][ T798] quatech2 4-1:0.51: device disconnected [ 214.148193][ T5882] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 214.167210][ T5882] usb 3-1: device descriptor read/8, error -71 [ 214.426512][ T5882] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 214.447280][ T5882] usb 3-1: device descriptor read/8, error -71 [ 214.450559][ T982] usb 2-1: USB disconnect, device number 37 [ 214.568445][ T5882] usb usb3-port1: unable to enumerate USB device [ 214.673175][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'. [ 214.780053][ T7708] loop6: detected capacity change from 0 to 524288000 [ 215.161589][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.237165][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.386772][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.502462][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.492'. [ 215.619216][ T7726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.626716][ T7726] IPv6: NLM_F_CREATE should be set when creating new route [ 215.634312][ T7726] IPv6: NLM_F_CREATE should be set when creating new route [ 215.641649][ T7726] IPv6: NLM_F_CREATE should be set when creating new route [ 216.066897][ T24] usb 1-1: device descriptor read/64, error -71 [ 216.276963][ T5860] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 216.306820][ T798] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 216.388556][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 216.472360][ T5860] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 216.492065][ T5860] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 216.516581][ T798] usb 3-1: Using ep0 maxpacket: 32 [ 216.533443][ T5860] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 216.556709][ T5930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 216.576567][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 216.580225][ T798] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 216.598255][ T24] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 216.613582][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.681408][ T24] usb 1-1: config 0 has no interface number 0 [ 216.696271][ T798] usb 3-1: config 0 descriptor?? [ 216.733228][ T5860] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 216.785007][ T24] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 216.795148][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.805751][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.815076][ T24] usb 1-1: Product: syz [ 216.819979][ T24] usb 1-1: Manufacturer: syz [ 216.832122][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 216.840830][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 216.849396][ T5930] usb 2-1: can't read configurations, error -61 [ 216.855750][ T24] usb 1-1: SerialNumber: syz [ 216.866289][ T798] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 216.881537][ T7726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 216.897977][ T798] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 217.002692][ T798] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 217.036607][ T5930] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 217.069847][ T798] usb 3-1: USB disconnect, device number 34 [ 217.113432][ T24] usb 1-1: config 0 descriptor?? [ 217.136304][ T24] as10x_usb: device has been detected [ 217.143137][ T24] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 217.160193][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 217.190342][ T24] as10x_usb: error during firmware upload part1 [ 217.197403][ T24] Registered device PCTV Systems picoStick (74e) [ 217.256628][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 217.295838][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 217.345403][ T5930] usb 2-1: can't read configurations, error -61 [ 217.376803][ T5930] usb usb2-port1: attempt power cycle [ 217.525041][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.532304][ T7725] Bluetooth: hci0: command 0x0406 tx timeout [ 217.540698][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.544385][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 217.546976][ T7725] Bluetooth: hci4: command 0x0406 tx timeout [ 217.828276][ T5930] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 217.867950][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 217.955786][ T7747] netlink: 68 bytes leftover after parsing attributes in process `syz.2.496'. [ 218.020289][ T7747] vlan2: entered allmulticast mode [ 218.026102][ T7747] bridge0: port 4(vlan2) entered blocking state [ 218.036787][ T7747] bridge0: port 4(vlan2) entered disabled state [ 218.047118][ T7747] vlan2: entered promiscuous mode [ 218.111718][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.119589][ T5930] usb 2-1: can't read configurations, error -61 [ 218.306802][ T5930] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 218.337216][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 218.352863][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.381830][ T5930] usb 2-1: can't read configurations, error -61 [ 218.419970][ T5930] usb usb2-port1: unable to enumerate USB device [ 219.117014][ T5860] usb 4-1: string descriptor 0 read error: -71 [ 219.292457][ T5860] usb 4-1: USB disconnect, device number 40 [ 219.316796][ T5930] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 219.365822][ T6245] udevd[6245]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 219.414705][ T6245] udevd[6245]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 219.467056][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 219.474520][ T5930] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.589358][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.602359][ T982] usb 1-1: USB disconnect, device number 17 [ 219.650594][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.672773][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.694008][ T982] Unregistered device PCTV Systems picoStick (74e) [ 219.699493][ T982] as10x_usb: device has been disconnected [ 219.719461][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.745741][ T5930] usb 3-1: Product: syz [ 219.755540][ T5930] usb 3-1: Manufacturer: syz [ 219.765444][ T5930] usb 3-1: SerialNumber: syz [ 220.116586][ T982] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 220.201384][ T5930] usb 3-1: 0:2 : does not exist [ 220.276698][ T42] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 220.298642][ T982] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 220.307924][ T982] usb 1-1: config 0 has no interface number 0 [ 220.318703][ T982] usb 1-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 220.333743][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.362307][ T982] usb 1-1: config 0 descriptor?? [ 220.379245][ T982] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 220.436639][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 220.446004][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.461352][ T42] usb 2-1: config 14 has an invalid interface number: 77 but max is 0 [ 220.470320][ T42] usb 2-1: config 14 has no interface number 0 [ 220.477351][ T42] usb 2-1: config 14 interface 77 altsetting 138 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 220.490079][ T42] usb 2-1: config 14 interface 77 altsetting 138 has an invalid descriptor for endpoint zero, skipping [ 220.523104][ T42] usb 2-1: config 14 interface 77 has no altsetting 0 [ 220.545954][ T42] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=75.da [ 220.569203][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.590603][ T42] usb 2-1: Product: syz [ 220.599159][ T42] usb 2-1: Manufacturer: syz [ 220.611736][ T42] usb 2-1: SerialNumber: syz [ 220.836125][ T42] ipw 2-1:14.77: IPWireless converter converter detected [ 220.911363][ T42] usb 2-1: USB disconnect, device number 42 [ 220.935857][ T42] ipw 2-1:14.77: device disconnected [ 221.026053][ T5930] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 221.219080][ T5930] usb 3-1: USB disconnect, device number 35 [ 221.419833][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 221.806214][ T982] gspca_ov534_9: reg_r err -71 [ 221.829456][ T5930] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 221.986677][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 221.996147][ T5930] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 222.004953][ T5930] usb 2-1: config 2 has no interface number 0 [ 222.011584][ T5930] usb 2-1: config 2 interface 88 has no altsetting 0 [ 222.020626][ T5930] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 222.030257][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.038488][ T5930] usb 2-1: Product: syz [ 222.043126][ T5930] usb 2-1: Manufacturer: syz [ 222.048196][ T5930] usb 2-1: SerialNumber: syz [ 222.076512][ T982] gspca_ov534_9: Unknown sensor 0000 [ 222.076590][ T982] ov534_9 1-1:0.111: probe with driver ov534_9 failed with error -22 [ 222.097759][ T982] usb 1-1: USB disconnect, device number 18 [ 222.462240][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.475525][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.557058][ T5930] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 222.558655][ T7801] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 222.581454][ T5930] asix 2-1:2.88: probe with driver asix failed with error -71 [ 222.622450][ T5930] usb 2-1: USB disconnect, device number 43 [ 222.816536][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 222.980916][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 223.000938][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 223.025296][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.037518][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 223.052382][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.069021][ T24] usb 1-1: config 0 descriptor?? [ 223.079347][ T7801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.422131][ T24] usb 1-1: string descriptor 0 read error: -71 [ 223.455162][ T24] usb 1-1: USB disconnect, device number 19 [ 223.920567][ T7826] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 224.176536][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.187662][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.213025][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.222276][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.232625][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.410864][ T7832] FAULT_INJECTION: forcing a failure. [ 224.410864][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.596034][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.1.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.596068][ T7832] Tainted: [L]=SOFTLOCKUP [ 224.596075][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.596086][ T7832] Call Trace: [ 224.596094][ T7832] [ 224.596104][ T7832] dump_stack_lvl+0xe8/0x150 [ 224.596139][ T7832] should_fail_ex+0x412/0x560 [ 224.596167][ T7832] _copy_from_user+0x2d/0xb0 [ 224.596193][ T7832] kstrtouint_from_user+0xd6/0x180 [ 224.596220][ T7832] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 224.596255][ T7832] proc_fail_nth_write+0x8e/0x210 [ 224.596280][ T7832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 224.596311][ T7832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 224.596337][ T7832] vfs_write+0x29a/0xb90 [ 224.596371][ T7832] ? __pfx_vfs_write+0x10/0x10 [ 224.596392][ T7832] ? __fget_files+0x2a/0x420 [ 224.596422][ T7832] ? __fget_files+0x3a0/0x420 [ 224.596447][ T7832] ? __fget_files+0x2a/0x420 [ 224.596483][ T7832] ksys_write+0x150/0x270 [ 224.596507][ T7832] ? __pfx_ksys_write+0x10/0x10 [ 224.596538][ T7832] do_syscall_64+0x14d/0xf80 [ 224.596567][ T7832] ? trace_irq_disable+0x3b/0x150 [ 224.596594][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.596612][ T7832] ? clear_bhb_loop+0x40/0x90 [ 224.596647][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.596666][ T7832] RIP: 0033:0x7fb666d5cece [ 224.596685][ T7832] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.596702][ T7832] RSP: 002b:00007fb667c19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.596724][ T7832] RAX: ffffffffffffffda RBX: 00007fb667c1a6c0 RCX: 00007fb666d5cece [ 224.596738][ T7832] RDX: 0000000000000001 RSI: 00007fb667c1a0a0 RDI: 0000000000000005 [ 224.596749][ T7832] RBP: 00007fb667c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.596760][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.596771][ T7832] R13: 00007fb667016038 R14: 00007fb667015fa0 R15: 00007fb66713fa48 [ 224.596803][ T7832] [ 225.371533][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 225.394290][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 225.403916][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 225.461472][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.537403][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 225.568738][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 225.583438][ T5882] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 225.595979][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.604876][ T5882] usb 1-1: Product: syz [ 225.625013][ T5882] usb 1-1: Manufacturer: syz [ 225.635241][ T5882] usb 1-1: SerialNumber: syz [ 225.643582][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.672439][ T5882] usb 1-1: config 0 descriptor?? [ 225.862452][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.298671][ T5144] Bluetooth: hci5: command tx timeout [ 226.328536][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.361120][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.233904][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.376611][ T5144] Bluetooth: hci5: command tx timeout [ 228.396601][ T798] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 228.688557][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.766880][ T798] usb 2-1: Using ep0 maxpacket: 8 [ 228.778550][ T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.791961][ T798] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 228.805065][ T7888] netlink: 88 bytes leftover after parsing attributes in process `syz.3.532'. [ 228.816242][ T7888] syzkaller1: entered promiscuous mode [ 228.821857][ T7888] syzkaller1: entered allmulticast mode [ 228.851754][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.856224][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.889316][ T5882] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 228.902010][ T5882] gspca_sunplus: reg_w_riv err -71 [ 228.904280][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.918960][ T798] usb 2-1: config 0 descriptor?? [ 228.923110][ T7830] bridge_slave_0: entered allmulticast mode [ 228.939622][ T5882] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 228.961962][ T798] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 228.965849][ T7830] bridge_slave_0: entered promiscuous mode [ 228.985233][ T5882] usb 1-1: USB disconnect, device number 20 [ 229.017680][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.045046][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.070915][ T7830] bridge_slave_1: entered allmulticast mode [ 229.090861][ T7830] bridge_slave_1: entered promiscuous mode [ 229.232670][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 229.496825][ T798] gspca_vc032x: reg_r err -110 [ 229.501838][ T798] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 229.561752][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.570839][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.584597][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.594411][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.848110][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.905518][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.098946][ T7830] team0: Port device team_slave_0 added [ 230.115874][ T7830] team0: Port device team_slave_1 added [ 230.131115][ T35] bridge_slave_1: left allmulticast mode [ 230.140953][ T35] bridge_slave_1: left promiscuous mode [ 230.155441][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.180160][ T35] bridge_slave_0: left allmulticast mode [ 230.194845][ T35] bridge_slave_0: left promiscuous mode [ 230.206398][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.469168][ T5144] Bluetooth: hci5: command tx timeout [ 230.765930][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'. [ 230.978447][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.000223][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.121195][ T35] bond0 (unregistering): Released all slaves [ 231.632061][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.641540][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.705499][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.778687][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.812400][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.842180][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.944209][ T798] usb 2-1: USB disconnect, device number 44 [ 232.176146][ T29] audit: type=1326 audit(1771930891.701:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.274806][ T29] audit: type=1326 audit(1771930891.731:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.352142][ T29] audit: type=1326 audit(1771930891.751:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.477052][ T29] audit: type=1326 audit(1771930891.751:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.512728][ T7830] hsr_slave_0: entered promiscuous mode [ 232.545346][ T7830] hsr_slave_1: entered promiscuous mode [ 232.545699][ T5144] Bluetooth: hci5: command tx timeout [ 232.591575][ T7830] debugfs: 'hsr0' already exists in 'hsr' [ 232.622008][ T29] audit: type=1326 audit(1771930891.751:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.652708][ T7830] Cannot create hsr debugfs directory [ 232.713301][ T29] audit: type=1326 audit(1771930891.751:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.715803][ T7938] fuse: Bad value for 'fd' [ 232.736562][ T29] audit: type=1326 audit(1771930891.751:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.765448][ T29] audit: type=1326 audit(1771930891.751:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.788510][ T29] audit: type=1326 audit(1771930891.841:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.796576][ T982] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 232.811855][ T29] audit: type=1326 audit(1771930891.841:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb666d9c629 code=0x7ffc0000 [ 232.869262][ T35] hsr_slave_0: left promiscuous mode [ 232.887349][ T35] hsr_slave_1: left promiscuous mode [ 232.920635][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.940105][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.961561][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.978873][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.036029][ T35] veth1_macvtap: left promiscuous mode [ 233.038970][ T982] usb 1-1: Using ep0 maxpacket: 8 [ 233.043816][ T35] veth0_macvtap: left promiscuous mode [ 233.057099][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.069976][ T982] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 233.078955][ T35] veth1_vlan: left promiscuous mode [ 233.081996][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.084956][ T35] veth0_vlan: left promiscuous mode [ 233.103762][ T982] usb 1-1: config 0 descriptor?? [ 234.103812][ T35] team0 (unregistering): Port device team_slave_1 removed [ 234.147195][ T35] team0 (unregistering): Port device team_slave_0 removed [ 234.550839][ T982] usbhid 1-1:0.0: can't add hid device: -71 [ 234.557317][ T982] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 234.638894][ T982] usb 1-1: USB disconnect, device number 21 [ 235.326459][ T5882] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 235.447982][ T7830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.483502][ T7830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.519733][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 235.532290][ T7830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.539603][ T5882] usb 4-1: config index 0 descriptor too short (expected 39403, got 36) [ 235.557389][ T5882] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 235.563901][ T7830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.572981][ T5882] usb 4-1: can't read configurations, error -22 [ 235.646458][ T5912] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 235.727927][ T5882] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 235.819156][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 235.850576][ T5912] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 235.857842][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.876343][ T5912] usb 3-1: config 0 has no interface number 0 [ 235.883485][ T5912] usb 3-1: config 0 interface 92 has no altsetting 0 [ 235.913563][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 235.931808][ T5882] usb 4-1: config index 0 descriptor too short (expected 39403, got 36) [ 235.942553][ T5882] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 235.953817][ T5912] usb 3-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=f0.d6 [ 235.979565][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.989265][ T5882] usb 4-1: can't read configurations, error -22 [ 235.999791][ T5882] usb usb4-port1: attempt power cycle [ 236.009614][ T5912] usb 3-1: Product: syz [ 236.013983][ T5912] usb 3-1: Manufacturer: syz [ 236.030542][ T5912] usb 3-1: SerialNumber: syz [ 236.032796][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.043688][ T5912] usb 3-1: config 0 descriptor?? [ 236.061433][ T5912] usb 3-1: bad CDC descriptors [ 236.070878][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.078116][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.131907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.139237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.216483][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 236.366817][ T5882] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 236.381438][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.402009][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 236.410977][ T5890] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.420587][ T5882] usb 4-1: config index 0 descriptor too short (expected 39403, got 36) [ 236.446419][ T5882] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 236.466421][ T5890] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 236.695737][ T5912] usb 3-1: USB disconnect, device number 36 [ 236.725558][ T7830] veth0_vlan: entered promiscuous mode [ 236.733168][ T5882] usb 4-1: can't read configurations, error -22 [ 236.761697][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.789810][ T7830] veth1_vlan: entered promiscuous mode [ 236.800814][ T5890] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.850298][ T5890] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.876431][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.884672][ T5890] usb 1-1: Product: syz [ 236.892206][ T5890] usb 1-1: Manufacturer: syz [ 236.919018][ T5882] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 236.933631][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 236.948724][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 236.954823][ T5890] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.959694][ T7830] veth0_macvtap: entered promiscuous mode [ 236.977506][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 236.990631][ T5882] usb 4-1: config index 0 descriptor too short (expected 39403, got 36) [ 236.993346][ T7830] veth1_macvtap: entered promiscuous mode [ 237.020274][ T5882] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 108 [ 237.031521][ T5882] usb 4-1: can't read configurations, error -22 [ 237.050256][ T5882] usb usb4-port1: unable to enumerate USB device [ 237.105332][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.151368][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.200732][ T3556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.247080][ T3556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.273201][ T3556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.313107][ T3556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.703435][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.747491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.933566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.962015][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.723378][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 238.723409][ T29] audit: type=1326 audit(1771930898.251:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.3.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a3339c629 code=0x0 [ 238.877339][ T8068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.562'. [ 238.930062][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.942613][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 239.226495][ T5890] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 239.246573][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 239.255781][ T5930] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.278353][ T5930] usb 6-1: config 0 has no interface number 0 [ 239.301323][ T5930] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.318476][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.345251][ T5930] usb 6-1: Product: syz [ 239.363268][ T5930] usb 6-1: Manufacturer: syz [ 239.396097][ T5930] usb 6-1: SerialNumber: syz [ 239.412618][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 239.431054][ T5930] usb 6-1: config 0 descriptor?? [ 239.433188][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 239.468871][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.561294][ T5890] usb 3-1: Product: syz [ 239.591149][ T5890] usb 3-1: Manufacturer: syz [ 239.596171][ T5890] usb 3-1: SerialNumber: syz [ 239.662894][ T5890] r8152-cfgselector 3-1: Unknown version 0x0000 [ 239.680772][ T5890] r8152-cfgselector 3-1: config 0 descriptor?? [ 239.861822][ T5930] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 239.905181][ T5930] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.126296][ T8066] i2c i2c-0: Invalid block write size 252 [ 240.150350][ T5930] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 240.194119][ T5930] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 240.667798][ T5930] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 240.836844][ T982] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 240.856949][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 240.864537][ T5930] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 240.873270][ T5930] usb 4-1: config 2 has no interface number 0 [ 240.886496][ T5930] usb 4-1: config 2 interface 88 has no altsetting 0 [ 240.908114][ T5930] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 240.926824][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.942968][ T5930] usb 4-1: Product: syz [ 240.952369][ T5930] usb 4-1: Manufacturer: syz [ 240.961788][ T5930] usb 4-1: SerialNumber: syz [ 241.006548][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 241.012830][ T982] usb 2-1: no configurations [ 241.026490][ T982] usb 2-1: can't read configurations, error -22 [ 241.176632][ T982] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 241.236883][ T5930] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.262016][ T5930] asix 4-1:2.88: probe with driver asix failed with error -71 [ 241.297798][ T5930] usb 4-1: USB disconnect, device number 45 [ 241.298970][ T8105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'. [ 241.337224][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 241.348946][ T982] usb 2-1: no configurations [ 241.367017][ T982] usb 2-1: can't read configurations, error -22 [ 241.376898][ T982] usb usb2-port1: attempt power cycle [ 241.415115][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.423037][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.579804][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 241.589969][ T8110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.622096][ T8110] syzkaller1: entered promiscuous mode [ 241.628159][ T8110] syzkaller1: entered allmulticast mode [ 241.726537][ T982] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 241.749564][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 241.765559][ T982] usb 2-1: no configurations [ 241.766985][ T5912] usb 1-1: USB disconnect, device number 22 [ 241.775766][ T982] usb 2-1: can't read configurations, error -22 [ 241.783889][ T42] usb 6-1: USB disconnect, device number 2 [ 241.874865][ T5890] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 241.938066][ T982] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 241.992013][ T8113] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 242.005380][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 242.014839][ T982] usb 2-1: no configurations [ 242.027315][ T982] usb 2-1: can't read configurations, error -22 [ 242.042796][ T982] usb usb2-port1: unable to enumerate USB device [ 242.307679][ T5890] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 242.472168][ T5890] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.485935][ T5890] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.497680][ T5890] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.511352][ T5890] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 242.520880][ T5890] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 242.538346][ T5890] usb 1-1: Manufacturer: syz [ 242.549638][ T5890] usb 1-1: SerialNumber: syz [ 242.556727][ T5912] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 242.746581][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 242.778229][ T5912] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 242.796581][ T5912] usb 3-1: config 11 has no interface number 0 [ 242.803797][ T5912] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.817609][ T5912] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.846435][ T5912] usb 3-1: config 11 interface 95 has no altsetting 0 [ 242.864589][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.867324][ T5912] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 242.873753][ T982] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 242.899663][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.912307][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.916435][ T5912] usb 3-1: Product: syz [ 242.936190][ T5912] usb 3-1: Manufacturer: syz [ 242.952369][ T5912] usb 3-1: SerialNumber: syz [ 243.066603][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 243.074713][ T982] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 243.083108][ T982] usb 4-1: config 0 has no interface number 0 [ 243.093198][ T982] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 243.103029][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.111873][ T982] usb 4-1: Product: syz [ 243.116158][ T982] usb 4-1: Manufacturer: syz [ 243.121154][ T982] usb 4-1: SerialNumber: syz [ 243.137134][ T982] usb 4-1: config 0 descriptor?? [ 243.180751][ T5912] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 243.204599][ T5912] usb 3-1: USB disconnect, device number 38 [ 243.227057][ T5882] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 243.411872][ T5882] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 243.422768][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.431617][ T5882] usb 6-1: Product: syz [ 243.436745][ T5882] usb 6-1: Manufacturer: syz [ 243.441671][ T5882] usb 6-1: SerialNumber: syz [ 243.460312][ T5882] usb 6-1: config 0 descriptor?? [ 243.473083][ T5882] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 243.552573][ T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 243.576555][ T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.084312][ T5882] gspca_stk1135: reg_w 0x2 err -110 [ 244.101950][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.111213][ T5882] gspca_stk1135: Sensor write failed [ 244.121361][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.128705][ T5882] gspca_stk1135: Sensor write failed [ 244.135727][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.201360][ T5882] gspca_stk1135: Sensor read failed [ 244.207557][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.221346][ T5882] gspca_stk1135: Sensor read failed [ 244.279326][ T5882] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.286661][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.293839][ T5882] gspca_stk1135: Sensor read failed [ 244.304007][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.316559][ T5882] gspca_stk1135: Sensor read failed [ 244.325191][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.331767][ T5882] gspca_stk1135: Sensor write failed [ 244.337385][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 244.345695][ T5882] gspca_stk1135: Sensor write failed [ 244.465697][ T8155] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 244.485724][ T5882] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 244.488202][ T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 244.507487][ T982] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 244.715382][ T5930] usb 4-1: USB disconnect, device number 46 [ 245.608089][ T5930] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 245.770876][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.783744][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.828932][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.871702][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.935905][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.962940][ T5930] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.026501][ T5930] usb 3-1: Manufacturer: syz [ 246.056603][ T5930] usb 3-1: config 0 descriptor?? [ 246.366942][ T5930] rc_core: IR keymap rc-hauppauge not found [ 246.379008][ T5930] Registered IR keymap rc-empty [ 246.384635][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.618486][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.664752][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 246.686531][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 246.736584][ T5882] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 246.796825][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 246.808948][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 246.824054][ T8201] syzkaller0: entered promiscuous mode [ 246.829789][ T8201] syzkaller0: entered allmulticast mode [ 246.911987][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 246.937851][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 246.951190][ T5882] usb 4-1: config 0 has no interfaces? [ 246.966932][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.998472][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.024943][ T5882] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.026661][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.089508][ T5882] usb 4-1: Manufacturer: syz [ 247.101754][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.146684][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.206639][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.222793][ T5882] usb 4-1: config 0 descriptor?? [ 247.240763][ T24] usb 6-1: USB disconnect, device number 3 [ 247.247117][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.305643][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.318389][ T8205] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 247.357675][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.385738][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.416790][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.455837][ T5930] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 247.631724][ T5890] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 247.641018][ T5930] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 247.662284][ T5930] usb 3-1: USB disconnect, device number 39 [ 247.674974][ T5890] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input18 [ 247.994705][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -32 [ 248.003004][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -32 [ 248.010930][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -32 [ 248.018633][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 248.026455][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 248.033493][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 248.040767][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 248.048188][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 248.055178][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 248.138495][ T5890] usb 1-1: USB disconnect, device number 23 [ 249.068849][ T42] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 249.077170][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 249.238894][ T5930] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 249.256745][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.279363][ T5930] usb 6-1: config 0 descriptor?? [ 249.301827][ T42] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 249.315967][ T5930] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 249.326465][ T5890] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 249.326530][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.366602][ T42] usb 3-1: config 0 has no interface number 0 [ 249.387546][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 249.407502][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.418740][ T42] usb 3-1: Product: syz [ 249.423281][ T42] usb 3-1: Manufacturer: syz [ 249.431402][ T24] usb 4-1: USB disconnect, device number 47 [ 249.454197][ T42] usb 3-1: SerialNumber: syz [ 249.480241][ T42] usb 3-1: config 0 descriptor?? [ 249.540863][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.544484][ T42] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 249.559855][ T42] uvcvideo 3-1:0.105: No valid video chain found. [ 249.566466][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.566501][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.566527][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.566554][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.615177][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.644673][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.676485][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.696696][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.709227][ T42] usb 3-1: USB disconnect, device number 40 [ 249.739339][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.769156][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.777430][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.806664][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.827496][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.848742][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.886962][ T5890] usb 2-1: string descriptor 0 read error: -22 [ 249.893782][ T5890] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.906447][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.935504][ T5890] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.977064][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 250.147364][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 250.179163][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.191308][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.230251][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.251806][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.269510][ T5930] gspca_cpia1: usb_control_msg 02, error -71 [ 250.276131][ T5930] gspca_cpia1: usb_control_msg 05, error -71 [ 250.283487][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.294073][ T5930] gspca_cpia1: usb_control_msg 04, error -71 [ 250.301465][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.309875][ T5930] cpia1 6-1:0.0: probe with driver cpia1 failed with error -71 [ 250.322008][ T24] usb 4-1: config 0 descriptor?? [ 250.329400][ T5930] usb 6-1: USB disconnect, device number 4 [ 250.341654][ T8250] ªªªªª: renamed from veth0_vlan (while UP) [ 250.417392][ T24] hub 4-1:0.0: USB hub found [ 250.450362][ T8252] netlink: 'syz.2.608': attribute type 8 has an invalid length. [ 250.497975][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 250.625215][ T24] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 251.029844][ T24] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 251.051429][ T24] hid-generic 0003:046D:C31C.0009: probe with driver hid-generic failed with error -22 [ 251.123502][ T8260] netlink: 'syz.5.611': attribute type 1 has an invalid length. [ 251.380318][ T982] usb 4-1: USB disconnect, device number 48 [ 251.680772][ T982] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 251.869418][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.881688][ T982] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 251.988270][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.056198][ T982] usb 1-1: config 0 descriptor?? [ 252.645462][ T982] hid_parser_main: 181 callbacks suppressed [ 252.645484][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.674757][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.728964][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.771570][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.947060][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.966118][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 252.985114][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 253.008726][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 253.083847][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 253.109808][ T982] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 253.282762][ T982] elecom 0003:056E:00FE.000A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 254.036511][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 254.149233][ T5890] usb 2-1: USB disconnect, device number 49 [ 254.240895][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 254.281554][ T42] usb 1-1: USB disconnect, device number 24 [ 254.316296][ T5897] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 254.344570][ T5897] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 254.386713][ T5897] usb 6-1: config 179 has no interface number 0 [ 254.444569][ T5897] usb 6-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 254.565327][ T5897] usb 6-1: config 179 interface 65 has no altsetting 0 [ 254.599612][ T5897] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 254.646530][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.780175][ T8313] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 255.121115][ T8323] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 255.334167][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 255.717307][ T42] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 255.780074][ T5930] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 255.937941][ T5897] usb 6-1: USB disconnect, device number 5 [ 255.968846][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.977761][ T42] usb 4-1: config 0 has no interface number 0 [ 255.984225][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.046618][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 256.062479][ T42] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.088714][ T5930] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 256.316447][ T5930] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 256.338168][ T42] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.347987][ T5930] usb 3-1: config 2 has no interface number 0 [ 256.354225][ T5930] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 256.365994][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.387492][ T42] usb 4-1: config 0 descriptor?? [ 256.388824][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.401825][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.413343][ T5930] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 256.498405][ T5930] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 256.536854][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.792472][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.804901][ T42] usbhid 4-1:0.1: can't add hid device: -71 [ 256.814283][ T42] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 256.823099][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.840991][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 256.850741][ T42] usb 4-1: USB disconnect, device number 49 [ 256.860129][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.278443][ T5930] usb 3-1: USB disconnect, device number 41 [ 257.438150][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 257.557251][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 257.754903][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 257.790774][ T24] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 257.802290][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.835075][ T24] usb 6-1: config 0 has no interface number 0 [ 257.867954][ T24] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 257.885202][ T24] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 257.927490][ T8374] input: syz0 as /devices/virtual/input/input19 [ 257.961213][ T24] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 258.069060][ T24] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 258.110085][ T24] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 258.126470][ T24] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 258.146651][ T24] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 258.168139][ T24] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 258.195643][ T24] usb 6-1: config 0 interface 239 has no altsetting 0 [ 258.233525][ T24] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 258.276907][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.294723][ T24] usb 6-1: Product: syz [ 258.299945][ T24] usb 6-1: Manufacturer: syz [ 258.472369][ T24] usb 6-1: SerialNumber: syz [ 258.487970][ T5897] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 258.493107][ T24] usb 6-1: config 0 descriptor?? [ 258.514061][ T8353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 258.523049][ T8353] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 258.563440][ T5144] Bluetooth: hci2: urb ffff8880506d7500 submission failed (90) [ 258.735400][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 258.782583][ T5912] usb 6-1: USB disconnect, device number 6 [ 258.816602][ T5897] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 258.870269][ T5897] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 258.916405][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 258.978364][ T5897] usb 3-1: config 1 has no interface number 0 [ 259.007288][ T5897] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.046787][ T5897] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 259.130842][ T5897] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 259.155864][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.194412][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 259.306818][ T5912] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 259.411253][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 259.525102][ T5912] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 259.566284][ T5912] usb 6-1: config 7 has no interface number 0 [ 259.582321][ T8401] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 259.610557][ T5912] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 259.645231][ T8399] binder: 8395:8399 ioctl c008aec1 2000000000c0 returned -22 [ 259.656491][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.665731][ T5912] usb 6-1: Product: syz [ 259.686146][ T5912] usb 6-1: Manufacturer: syz [ 259.698486][ T5912] usb 6-1: SerialNumber: syz [ 260.178458][ T29] audit: type=1326 audit(1771930919.711:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.230753][ T29] audit: type=1326 audit(1771930919.711:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.324585][ T29] audit: type=1326 audit(1771930919.711:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.421997][ T29] audit: type=1326 audit(1771930919.711:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.459678][ T5897] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 260.530314][ T29] audit: type=1326 audit(1771930919.711:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.601462][ T5912] as10x_usb: device has been detected [ 260.608879][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 260.617392][ T29] audit: type=1326 audit(1771930919.711:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.714393][ T5912] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 260.752398][ T29] audit: type=1326 audit(1771930919.711:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 260.814105][ T5912] as10x_usb: error during firmware upload part1 [ 260.834526][ T5912] Registered device Elgato EyeTV DTT Deluxe [ 260.837803][ T5912] usb 6-1: USB disconnect, device number 7 [ 260.911313][ T29] audit: type=1326 audit(1771930919.711:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6f59c629 code=0x7ffc0000 [ 261.124792][ T5912] Unregistered device Elgato EyeTV DTT Deluxe [ 261.143744][ T5912] as10x_usb: device has been disconnected [ 261.267490][ T8445] bridge0: port 3(veth0_to_bridge) entered blocking state [ 261.277197][ T8445] bridge0: port 3(veth0_to_bridge) entered disabled state [ 261.285792][ T8445] veth0_to_bridge: entered allmulticast mode [ 261.313289][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'. [ 261.334416][ T8446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.341880][ T8446] IPv6: NLM_F_CREATE should be set when creating new route [ 261.349451][ T8446] IPv6: NLM_F_CREATE should be set when creating new route [ 261.356922][ T8446] IPv6: NLM_F_CREATE should be set when creating new route [ 261.515454][ T8445] veth0_to_bridge: entered promiscuous mode [ 261.524150][ T8445] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.827066][ T8445] bridge0: port 3(veth0_to_bridge) entered blocking state [ 261.834953][ T8445] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 262.604909][ T42] IPVS: starting estimator thread 0... [ 262.642458][ T29] audit: type=1326 audit(1771930922.121:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66919c629 code=0x7ffc0000 [ 262.746833][ T29] audit: type=1326 audit(1771930922.131:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66915cece code=0x7ffc0000 [ 262.806642][ T8454] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.704021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.717286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.730699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.744338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.757878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.771580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.785461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.799289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.813289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 264.826600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 269.706579][ C0] net_ratelimit: 10979 callbacks suppressed [ 269.706604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 269.706600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.706922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.714094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.725589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.737980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 269.750420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.763487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.774823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.787173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 273.646714][ C1] sched: DL replenish lagged too much [ 274.716444][ C1] net_ratelimit: 16884 callbacks suppressed [ 274.716468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.716664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.723378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.735518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 274.748170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.761546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.773499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.787205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 274.798735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.812378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.726394][ C0] net_ratelimit: 17322 callbacks suppressed [ 279.726418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 279.726442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.733940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.745536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.757998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 279.770280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.783420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.795673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.809933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 279.822824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.736666][ C1] net_ratelimit: 16929 callbacks suppressed [ 284.736689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.736881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.743006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.755620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 284.767970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.781030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.793019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.805385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 284.817688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.830709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.746433][ C1] net_ratelimit: 16691 callbacks suppressed [ 289.746456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.746624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 289.752982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.766911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.778570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.793082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 289.805498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.819527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.831030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.845542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 294.756474][ C1] net_ratelimit: 14996 callbacks suppressed [ 294.756497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.756687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.763020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.776167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 294.788529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.802085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 294.814585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.829919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.839480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.853214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 299.766688][ C1] net_ratelimit: 15763 callbacks suppressed [ 299.766712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.767744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 299.773174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.785912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 299.798041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.812753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.824637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.837169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.849276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.867784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 304.776710][ C1] net_ratelimit: 17266 callbacks suppressed [ 304.776734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.777703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.783378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.796477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.808572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.823487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 304.835805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.848780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 304.861459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.877913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.786461][ C1] net_ratelimit: 17352 callbacks suppressed [ 309.786485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.787612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.793568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.806290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.819339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.833590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 309.845014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.857602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 309.870017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.883507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.796454][ C1] net_ratelimit: 17196 callbacks suppressed [ 314.796478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.797368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.803843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.816212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.828331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.842137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 314.852958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.865135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 314.877509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.890530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.989694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.009897][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.806460][ C1] net_ratelimit: 17251 callbacks suppressed [ 319.806461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 319.806484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.812818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 319.825512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.838851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.851048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.863620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.875980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.889690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 319.901126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.816378][ C0] net_ratelimit: 16767 callbacks suppressed [ 324.816402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.816607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.822916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.835505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.848935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 324.860113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.872248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 324.884921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.898274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.909545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.826425][ C1] net_ratelimit: 17039 callbacks suppressed [ 329.826449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.826833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 329.832890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.845839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 329.857775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.871215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.883418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.895910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.908036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.921201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 334.836449][ C1] net_ratelimit: 17121 callbacks suppressed [ 334.836473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.837382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 334.842885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.855386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 334.867633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.881142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.893253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.905521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.918207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.932567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 339.846415][ C1] net_ratelimit: 16555 callbacks suppressed [ 339.846439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.847234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.853119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.865500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.877725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.890774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 339.902134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.914685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 339.928003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.941701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.856778][ C1] net_ratelimit: 16661 callbacks suppressed [ 344.856803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.856922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 344.863730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.877358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 344.888386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.901596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.913331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.925436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.937936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.951082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 349.866737][ C1] net_ratelimit: 15919 callbacks suppressed [ 349.866770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.867414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 349.873134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.886203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 349.897406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.910302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.923442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.935348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.947489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.960502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 351.032018][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 354.876487][ C1] net_ratelimit: 16049 callbacks suppressed [ 354.876509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.876722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 354.882957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.896006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.907149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.919400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.931517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.944120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 354.955936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.968877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 359.886423][ C0] net_ratelimit: 16928 callbacks suppressed [ 359.886446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 359.886473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.894013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.905339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.917578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.929534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.942835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 359.954499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.967242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 359.978829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.896449][ C1] net_ratelimit: 17049 callbacks suppressed [ 364.896473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.897488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 364.902951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.915775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 364.927766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.940676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.951835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.963922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 364.975854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.988843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.906596][ C0] net_ratelimit: 17366 callbacks suppressed [ 369.906621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 369.906693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.914088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.925258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.937866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.949771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.962945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 369.974655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.997482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 370.000069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.916362][ C0] net_ratelimit: 17161 callbacks suppressed [ 374.916386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 374.916508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.923849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.935012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.947835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 374.960044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.973183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.984565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.006676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.008606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.926382][ C0] net_ratelimit: 17219 callbacks suppressed [ 379.926407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 379.926614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.933659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.944954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.957445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.969395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.982393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 379.994341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.007148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 380.018955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.936672][ C1] net_ratelimit: 17381 callbacks suppressed [ 384.936697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.937007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.943236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.955739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.967832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.980789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 384.993199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.005599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 385.017265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.030696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.946604][ C1] net_ratelimit: 17497 callbacks suppressed [ 389.946630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.947697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.953391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.965461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 389.977706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.991079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.002530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.014991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.027093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.039621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 394.956455][ C0] net_ratelimit: 17430 callbacks suppressed [ 394.956478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.956623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.962937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.975105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.988218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 394.999803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.012413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 395.024316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.037403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.048813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.306300][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 399.313404][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8465/1:b..l [ 399.322328][ C1] rcu: (detected by 1, t=10503 jiffies, g=38265, q=1373 ncpus=2) [ 399.330366][ C1] task:syz.0.645 state:R running task stack:28832 pid:8465 tgid:8463 ppid:5830 task_flags:0x400040 flags:0x00080000 [ 399.345381][ C1] Call Trace: [ 399.348790][ C1] [ 399.351741][ C1] __schedule+0x1585/0x5340 [ 399.356266][ C1] ? __pfx___schedule+0x10/0x10 [ 399.361166][ C1] preempt_schedule_irq+0x4d/0xa0 [ 399.366226][ C1] irqentry_exit+0x599/0x620 [ 399.370848][ C1] ? trace_irq_disable+0x3b/0x150 [ 399.375924][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.382178][ C1] RIP: 0010:kasan_check_range+0x7b/0x2c0 [ 399.388027][ C1] Code: 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc <49> 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c [ 399.408361][ C1] RSP: 0018:ffffc90004fff7c0 EFLAGS: 00000202 [ 399.414953][ C1] RAX: ffffc90004fffb01 RBX: dffffc0000000001 RCX: ffffffff8176884e [ 399.423570][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90004fff938 [ 399.431843][ C1] RBP: 0000000000000000 R08: ffffc90004fff947 R09: 1ffff920009fff28 [ 399.440218][ C1] R10: dffffc0000000000 R11: fffff520009fff27 R12: 0000000000000002 [ 399.448408][ C1] R13: 1ffff920009fff1f R14: fffff520009fff29 R15: 1ffff920009fff27 [ 399.456764][ C1] ? unwind_next_frame+0xeae/0x23c0 [ 399.462222][ C1] __asan_memset+0x22/0x50 [ 399.466724][ C1] unwind_next_frame+0xeae/0x23c0 [ 399.471804][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 399.477163][ C1] ? save_stack+0x122/0x230 [ 399.482048][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 399.488412][ C1] arch_stack_walk+0x11b/0x150 [ 399.493461][ C1] ? __reset_page_owner+0x71/0x1f0 [ 399.498694][ C1] stack_trace_save+0xa9/0x100 [ 399.503522][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 399.509188][ C1] save_stack+0x122/0x230 [ 399.513727][ C1] ? __pfx_save_stack+0x10/0x10 [ 399.518891][ C1] ? page_ext_put+0x97/0xc0 [ 399.523511][ C1] __reset_page_owner+0x71/0x1f0 [ 399.528744][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 399.533906][ C1] __slab_free+0x263/0x2b0 [ 399.538361][ C1] ? qlist_free_all+0x8c/0x100 [ 399.543357][ C1] qlist_free_all+0x97/0x100 [ 399.548146][ C1] ? sock_alloc_inode+0x28/0xc0 [ 399.553024][ C1] kasan_quarantine_reduce+0x148/0x160 [ 399.558689][ C1] __kasan_slab_alloc+0x22/0x80 [ 399.563570][ C1] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 399.569499][ C1] ? sock_alloc_inode+0x28/0xc0 [ 399.574649][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 399.580753][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 399.586260][ C1] sock_alloc_inode+0x28/0xc0 [ 399.591144][ C1] alloc_inode+0x6a/0x1b0 [ 399.595531][ C1] __sock_create+0x12d/0x9d0 [ 399.600338][ C1] __sys_socket+0xd6/0x1b0 [ 399.605062][ C1] __x64_sys_socket+0x7a/0x90 [ 399.609773][ C1] do_syscall_64+0x14d/0xf80 [ 399.614403][ C1] ? trace_irq_disable+0x3b/0x150 [ 399.619468][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.625584][ C1] ? clear_bhb_loop+0x40/0x90 [ 399.630482][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.636524][ C1] RIP: 0033:0x7f9f6f59c629 [ 399.641427][ C1] RSP: 002b:00007f9f703cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 399.650433][ C1] RAX: ffffffffffffffda RBX: 00007f9f6f815fa0 RCX: 00007f9f6f59c629 [ 399.658794][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 399.667070][ C1] RBP: 00007f9f6f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 399.675512][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.683693][ C1] R13: 00007f9f6f816038 R14: 00007f9f6f815fa0 R15: 00007f9f6f93fa48 [ 399.691992][ C1] [ 399.695172][ C1] rcu: rcu_preempt kthread starved for 4530 jiffies! g38265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 399.706487][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 399.716570][ C1] rcu: RCU grace-period kthread stack dump: [ 399.722669][ C1] task:rcu_preempt state:R running task stack:28128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 399.736562][ C1] Call Trace: [ 399.739869][ C1] [ 399.742839][ C1] __schedule+0x1585/0x5340 [ 399.747402][ C1] ? __pfx___schedule+0x10/0x10 [ 399.752823][ C1] ? schedule+0x90/0x360 [ 399.757225][ C1] schedule+0x164/0x360 [ 399.761525][ C1] schedule_timeout+0x158/0x2c0 [ 399.766517][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 399.772101][ C1] ? __pfx_process_timeout+0x10/0x10 [ 399.777523][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.783389][ C1] ? prepare_to_swait_event+0x340/0x370 [ 399.788981][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 399.794053][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 399.800423][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 399.805910][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 399.811496][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.817523][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 399.822415][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.827645][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.833501][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 399.838665][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 399.843909][ C1] kthread+0x388/0x470 [ 399.848105][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.853421][ C1] ? __pfx_kthread+0x10/0x10 [ 399.858403][ C1] ret_from_fork+0x51e/0xb90 [ 399.863241][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 399.868467][ C1] ? __switch_to+0xc7d/0x1450 [ 399.873229][ C1] ? __pfx_kthread+0x10/0x10 [ 399.878002][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.883071][ C1] [ 399.886107][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 399.892623][ C1] Sending NMI from CPU 1 to CPUs 0: [ 399.898122][ C0] NMI backtrace for cpu 0 [ 399.898139][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.898160][ C0] Tainted: [L]=SOFTLOCKUP [ 399.898166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.898175][ C0] RIP: 0010:lock_acquire+0x117/0x2e0 [ 399.898199][ C0] Code: 02 00 00 48 83 c4 28 48 c7 c7 7b 29 16 8e e8 b0 c1 0b 0a b8 ff ff ff ff 65 0f c1 05 93 59 7a 11 83 f8 01 0f 85 b0 00 00 00 9c <58> a9 00 02 00 00 0f 85 c3 00 00 00 f7 c3 00 02 00 00 0f 85 c8 00 [ 399.898212][ C0] RSP: 0018:ffffc90000006958 EFLAGS: 00000046 [ 399.898228][ C0] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000101 [ 399.898239][ C0] RDX: 000000007f45ee1d RSI: ffffffff8e16297b RDI: ffffffff8c27a880 [ 399.898250][ C0] RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 399.898260][ C0] R10: ffffc90000006af8 R11: ffffffff81b0b0d0 R12: 0000000000000002 [ 399.898272][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 399.898282][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 399.898295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.898306][ C0] CR2: 000056097b7f00e8 CR3: 0000000048974000 CR4: 00000000003526f0 [ 399.898322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.898332][ C0] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 399.898342][ C0] Call Trace: [ 399.898348][ C0] [ 399.898356][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 399.898379][ C0] ? common_startup_64+0x13e/0x147 [ 399.898396][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 399.898416][ C0] unwind_next_frame+0xc2/0x23c0 [ 399.898436][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 399.898460][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 399.898481][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 399.898497][ C0] ? common_startup_64+0x13e/0x147 [ 399.898513][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 399.898530][ C0] arch_stack_walk+0x11b/0x150 [ 399.898555][ C0] ? common_startup_64+0x13e/0x147 [ 399.898572][ C0] stack_trace_save+0xa9/0x100 [ 399.898587][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 399.898605][ C0] ? fib_rules_lookup+0x9b/0xea0 [ 399.898627][ C0] kasan_save_track+0x3e/0x80 [ 399.898642][ C0] ? kasan_save_track+0x3e/0x80 [ 399.898656][ C0] ? kasan_save_free_info+0x46/0x50 [ 399.898675][ C0] ? __kasan_slab_free+0x5c/0x80 [ 399.898690][ C0] ? kmem_cache_free+0x187/0x630 [ 399.898705][ C0] ? skb_release_head_state+0x270/0x360 [ 399.898726][ C0] ? __kfree_skb+0x24/0x210 [ 399.898744][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 399.898765][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 399.898781][ C0] ? nf_hook_slow+0xc5/0x220 [ 399.898798][ C0] ? NF_HOOK+0x21f/0x3c0 [ 399.898818][ C0] ? netif_receive_skb+0x278/0xc50 [ 399.898834][ C0] ? NF_HOOK+0xa4/0x3a0 [ 399.898849][ C0] ? br_handle_frame_finish+0x14b2/0x1b40 [ 399.898865][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 399.898880][ C0] ? br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 399.898898][ C0] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 399.898914][ C0] ? br_handle_frame+0x1277/0x1510 [ 399.898931][ C0] ? __netif_receive_skb_core+0x98f/0x31a0 [ 399.898948][ C0] ? process_backlog+0x76d/0x1950 [ 399.898964][ C0] ? __napi_poll+0xae/0x340 [ 399.898980][ C0] ? net_rx_action+0x627/0xf70 [ 399.898997][ C0] ? handle_softirqs+0x22a/0x870 [ 399.899015][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 399.899033][ C0] ? irq_exit_rcu+0x9/0x30 [ 399.899058][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.899079][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.899096][ C0] ? pv_native_safe_halt+0xf/0x20 [ 399.899116][ C0] ? default_idle+0x9/0x20 [ 399.899130][ C0] ? default_idle_call+0x72/0xb0 [ 399.899144][ C0] ? do_idle+0x1bd/0x500 [ 399.899162][ C0] ? cpu_startup_entry+0x43/0x60 [ 399.899181][ C0] ? rest_init+0x2de/0x300 [ 399.899197][ C0] ? start_kernel+0x385/0x3d0 [ 399.899215][ C0] ? x86_64_start_reservations+0x24/0x30 [ 399.899232][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 399.899247][ C0] ? common_startup_64+0x13e/0x147 [ 399.899273][ C0] kasan_save_free_info+0x46/0x50 [ 399.899292][ C0] __kasan_slab_free+0x5c/0x80 [ 399.899309][ C0] kmem_cache_free+0x187/0x630 [ 399.899324][ C0] ? __skb_ext_put+0x221/0x2f0 [ 399.899343][ C0] ? skb_release_head_state+0x270/0x360 [ 399.899365][ C0] skb_release_head_state+0x270/0x360 [ 399.899386][ C0] __kfree_skb+0x24/0x210 [ 399.899407][ C0] ip6_mc_input+0x8de/0xbd0 [ 399.899430][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 399.899455][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 399.899476][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 399.899497][ C0] ip_sabotage_in+0x1e1/0x270 [ 399.899512][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 399.899529][ C0] nf_hook_slow+0xc5/0x220 [ 399.899550][ C0] NF_HOOK+0x21f/0x3c0 [ 399.899569][ C0] ? skb_orphan+0xaf/0xd0 [ 399.899591][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 399.899611][ C0] ? NF_HOOK+0x9e/0x3c0 [ 399.899631][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 399.899652][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 399.899676][ C0] ? netif_receive_skb+0x102/0xc50 [ 399.899693][ C0] netif_receive_skb+0x278/0xc50 [ 399.899711][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 399.899729][ C0] ? br_netif_receive_skb+0x126/0x190 [ 399.899748][ C0] NF_HOOK+0xa4/0x3a0 [ 399.899764][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 399.899781][ C0] ? NF_HOOK+0xfa/0x3a0 [ 399.899796][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 399.899814][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 399.899834][ C0] ? br_pass_frame_up+0x275/0x420 [ 399.899851][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 399.899868][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 399.899892][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 399.899913][ C0] ? ip6t_do_table+0x173/0x1560 [ 399.899933][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 399.899952][ C0] ? nf_hook_slow+0x176/0x220 [ 399.899971][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 399.899987][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 399.900008][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 399.900025][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 399.900041][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 399.900068][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 399.900086][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 399.900108][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 399.900126][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 399.900143][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 399.900162][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 399.900179][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 399.900199][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 399.900214][ C0] br_handle_frame+0x1277/0x1510 [ 399.900235][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 399.900254][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 399.900275][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 399.900291][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 399.900310][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 399.900334][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 399.900357][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 399.900377][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 399.900395][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 399.900416][ C0] ? NF_HOOK+0x336/0x3c0 [ 399.900441][ C0] ? lock_acquire+0xf0/0x2e0 [ 399.900461][ C0] ? process_backlog+0x3eb/0x1950 [ 399.900479][ C0] ? process_backlog+0x3eb/0x1950 [ 399.900496][ C0] ? process_backlog+0x3eb/0x1950 [ 399.900514][ C0] process_backlog+0x76d/0x1950 [ 399.900540][ C0] __napi_poll+0xae/0x340 [ 399.900556][ C0] ? skb_defer_free_flush+0x233/0x260 [ 399.900575][ C0] net_rx_action+0x627/0xf70 [ 399.900592][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 399.900618][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 399.900648][ C0] handle_softirqs+0x22a/0x870 [ 399.900669][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 399.900691][ C0] __irq_exit_rcu+0x5f/0x150 [ 399.900709][ C0] irq_exit_rcu+0x9/0x30 [ 399.900726][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.900747][ C0] [ 399.900752][ C0] [ 399.900758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.900774][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 399.900795][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 399.900808][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 399.900821][ C0] RAX: 0000000000ecff37 RBX: ffffffff819a80ad RCX: 0000000080000001 [ 399.900831][ C0] RDX: 0000000000000001 RSI: ffffffff8def225c RDI: ffffffff8c27a880 [ 399.900842][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 399.900853][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90117db0 [ 399.900864][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 399.900877][ C0] ? do_idle+0x1bd/0x500 [ 399.900900][ C0] default_idle+0x9/0x20 [ 399.900915][ C0] default_idle_call+0x72/0xb0 [ 399.900930][ C0] do_idle+0x1bd/0x500 [ 399.900952][ C0] ? __pfx_do_idle+0x10/0x10 [ 399.900972][ C0] ? do_idle+0x4d0/0x500 [ 399.900993][ C0] cpu_startup_entry+0x43/0x60 [ 399.901013][ C0] rest_init+0x2de/0x300 [ 399.901031][ C0] start_kernel+0x385/0x3d0 [ 399.901058][ C0] x86_64_start_reservations+0x24/0x30 [ 399.901075][ C0] x86_64_start_kernel+0x143/0x1c0 [ 399.901092][ C0] common_startup_64+0x13e/0x147 [ 399.901113][ C0] [ 399.966604][ C0] net_ratelimit: 15493 callbacks suppressed [ 399.966622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 399.972942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.981672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 399.989556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.998843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.006164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.015609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 400.022155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.031266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.038220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.118307][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.139529][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.976497][ C1] net_ratelimit: 14367 callbacks suppressed [ 404.976523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.977110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.982940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.995596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0) [ 405.007745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.026460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.032698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.044843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.057168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.069827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:f5:34:ba:b0:46, vlan:0)