last executing test programs: 6m26.811734889s ago: executing program 3 (id=1675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) epoll_pwait2(r3, &(0x7f0000000180)=[{}, {}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x200]}, 0x8) (async) r4 = dup(r2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b0000000116aaff49be382dc804d8fd46d97091ef9dcf079cb", @ANYRES16=r5, @ANYBLOB="000027bd7000fddbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x48, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x34, 0x18, 0x0, 0x0, @binary="d4b5d895002b5897d0a928b277d27fc64a5f2844ce17bb27929832f12426b160310ca227257ccecadac32ca399dc611a"}]}, 0x48}}, 0x84) 6m26.383539691s ago: executing program 3 (id=1676): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0x9) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0x9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) (async) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 6m25.724393933s ago: executing program 3 (id=1677): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 6m25.648167643s ago: executing program 3 (id=1679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 6m25.244680836s ago: executing program 3 (id=1680): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) 6m25.118828116s ago: executing program 3 (id=1682): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x1, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e, 0x0, 0x0, 0x0, 0x6}}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000e48000/0x4000)=nil, 0x4000, 0x5}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x42880) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000480)={r7, 0x55, {0x0, 0x0, 0x0, 0x7, 0xf2, 0x0, 0x1000000, 0x1d, 0x300, "4180c5678f95e4d772a873329bdc62c190ae0b25c3d1bfaa404f86315cb5740b81a29a8c125274dc95c824a6a04ec5cfe016b25d36a4f287e0d74920226d2f5a", "8146bf9188dc9350b59a7432dd228a4ac66a78557d13e5655c41340521c30e0b77345cef57a751fe720546a9638b258d55f2b3f012e62cfc37c63b9b25186489", "27c3af0e46f669b57de260a48bf3547634b8d8d19965887cc8e634bd87365ea0", [0x9, 0x3]}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000300)={{0x2f, @rand_addr=0x64010101, 0x4e24, 0x3, 'dh\x00', 0xa, 0x101, 0x29}, {@remote, 0x4e23, 0x0, 0x1, 0x4e, 0x1}}, 0x44) 6m10.030515236s ago: executing program 32 (id=1682): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x1, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e, 0x0, 0x0, 0x0, 0x6}}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000e48000/0x4000)=nil, 0x4000, 0x5}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x42880) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000480)={r7, 0x55, {0x0, 0x0, 0x0, 0x7, 0xf2, 0x0, 0x1000000, 0x1d, 0x300, "4180c5678f95e4d772a873329bdc62c190ae0b25c3d1bfaa404f86315cb5740b81a29a8c125274dc95c824a6a04ec5cfe016b25d36a4f287e0d74920226d2f5a", "8146bf9188dc9350b59a7432dd228a4ac66a78557d13e5655c41340521c30e0b77345cef57a751fe720546a9638b258d55f2b3f012e62cfc37c63b9b25186489", "27c3af0e46f669b57de260a48bf3547634b8d8d19965887cc8e634bd87365ea0", [0x9, 0x3]}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000300)={{0x2f, @rand_addr=0x64010101, 0x4e24, 0x3, 'dh\x00', 0xa, 0x101, 0x29}, {@remote, 0x4e23, 0x0, 0x1, 0x4e, 0x1}}, 0x44) 11.728009756s ago: executing program 4 (id=3063): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x2e, 0x40, 0x68, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0x17, 0x13, [@local, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}]}]}}, @timestamp={0xd, 0x0, 0x0, 0xf8, 0x2, 0xb, 0xc, 0x2}}}}}, 0x0) 10.190085522s ago: executing program 4 (id=3068): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f00000001c0)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) unshare(0x40600) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000000)) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) 9.108363517s ago: executing program 5 (id=3075): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b010000000000407e050e2000000000000109022400010000100309040000010300000009210000080122070009058103f0"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', './file1/../file0', [{0x20, '\x00\x85\x95\xf1#R7\x9f~\xfe\x91\x8d\xc9>\x8a\'\xb6\xc8\xe5\xa8\x00\xeeU\xa4\xf4'}, {0x20, '@\x1d$.%{'}, {}], 0xa, "0000783348b29e910024000029f50a8993360100000000000000137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44cec7543fb562146903f434b5d6957398b43841d87d000e28863c057abb20db364524f96af9fabc4777fc7aeb7cb194e16c00007ff4d8c1549b48eb44ad378a000000000000"}, 0xaf) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x80}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07000000f01a12a2c3c3622d098d2a00000000000002000000380006800800060000000000060005004e220000070001000a0000001400040020010000000000000000000000000002080003000a010100"], 0x4c}}, 0x0) 6.693303495s ago: executing program 4 (id=3082): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0x7ffc, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) 5.829835139s ago: executing program 5 (id=3083): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x4, 0x2, 0x0, 0x46}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c001980080002000c080000180002"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x24302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 64) r9 = dup(r8) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$inet6(0xa, 0x2, 0x5) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8927, &(0x7f0000000080)={@loopback}) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x16) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="440f20c0663505000000440f22c02636660f17732c260fc719660f3ace88008004f36e66b8c40000000f23d00f21f866353000000d0f23f8660f3817d165660f3882ad21000fdaf266b9090900000f32", 0x50}], 0x1, 0x36, &(0x7f0000000080), 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, 0x0) (async, rerun: 32) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 5.584745101s ago: executing program 1 (id=3086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000f63c31e5fdf8c000000000000400000000000000000000000000000000000000000000000200000000000000080000000080000000000000000000000000000000000000040000000000"], 0xb8}}, 0x40) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000002b0e29d8135489b1e02e2fbd951765c48175ddab085d"], 0xb8}, 0x1, 0x0, 0x0, 0x2c040000}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}}, 0x0) close(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000006c00013228bd7000ffdbdf0500000000f5088f92e904d9db3e661bcf0f24082454f29529f2a138592360b2fb9246b75b6c94650a6df7d4deda9322504403e5c5ba7b6db19491cf8bbac8c9d10d0524804573b9dc4c6626a12ce6e0261203a088fbaab1f19d4423f5c8f76f146f65e1ec7a893fe413f5", @ANYRES32=0x0, @ANYBLOB="d00800000000000024000e000a000000000000000a0000000000000005000000000000000200078300000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 5.488181721s ago: executing program 5 (id=3087): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 4.114245811s ago: executing program 1 (id=3088): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffd}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB="08000ac3", @ANYRES32=r4], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 3.991937007s ago: executing program 5 (id=3090): clock_settime(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1, 0xe2, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x9, 0xe0, 0xa8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa5, 0x5}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x5, 0xa, 0x1], 0x8}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x1, "06519b3f"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x3, 0x62, "398496"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x6, 0x9, 0xd, 0x1}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x28, "e6d3f568"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x4d, 0x41, 0x8, 0xe5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x6, 0x7, "090d5d926abdf707d9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xf8, 0x2, "13", "7ad5a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x4, 0x5, {0x7, 0x25, 0x1, 0x81, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfb, 0x1, 0xd, 0x2, "955cad"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xf7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x7, 0x3, {0x7, 0x25, 0x1, 0x83, 0x40, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x301, 0xfe, 0x3, 0x9, 0x40, 0x2}, 0x64, &(0x7f0000000200)={0x5, 0xf, 0x64, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x3ff, 0x0, 0x0, [0xff3f00, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x9, 0x81, 0x1, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x8, 0xf000, 0x3, [0x0, 0xff0f, 0xff3f30, 0x3f00, 0x1f80, 0x3f00]}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x100, 0xf00f, 0xf001, [0xc0, 0xc0, 0xc0ff, 0xff0030]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x404}}, {0x13, &(0x7f00000002c0)=@string={0x13, 0x3, "6d69c2eadb9c676b60687f78d7e81ec3ba"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x416}}, {0x9b, &(0x7f0000000340)=ANY=[@ANYBLOB="9b03df4bc54343704086ddcc2c94772b3b94e94258c722a16cfc0f3ebe097ff8c7bdfec4302c0a5b8cce10b3a725c9dcc648f1806f283f3c4997e45aba0428a3c3b16e36fdc46524e4c1b35ab59b03d283810dfdabcac1a5f5c40e968311de9a5e86e57a856f21052f2ee95979aed937fa010f389bb8ae21a6bf762e79e286a71a05"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000500)) 3.991283988s ago: executing program 2 (id=3091): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0x1, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfd}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 3.946800959s ago: executing program 0 (id=3092): memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r3, @ANYBLOB="ed"], 0x20) 3.54719606s ago: executing program 4 (id=3093): r0 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) ftruncate(r0, 0x4) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip6gretap0\x00', 0x2}, 0x18) 3.407422743s ago: executing program 1 (id=3094): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f00000001c0)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1}, 0x0]) (async) io_submit(r1, 0x3, &(0x7f00000001c0)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1}, 0x0]) 3.33607328s ago: executing program 4 (id=3095): syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000100000280812800b000100657273bc845f5b00000000000000120008001500000010000500160001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x40) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x0, 0x40400c0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={r8, 0x0, 0x0, 0x0, 0x0, [], [0x9, 0xfffffffe, 0xfffffffd, 0xfffffffc], [0x0, 0x9, 0xfffffffc, 0x2]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000500)=[0x0, r11, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x335, 0xffffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x1, 0x8000, 0x8], 0x0, 0x4a07}) 3.248140526s ago: executing program 1 (id=3096): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030303030a92099e669c00b5c9e3cb0c58c"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) listen(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @pid}]}, 0x1c}}, 0x84) io_setup(0x9, &(0x7f0000000100)=0x0) io_destroy(r6) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d12", 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x60, 0x116, 0x5, "2436a1b5c5b24765552b49ccc57d3457ef918a0664aa1247bd76d11497230db97adb78a91e872289f2b983f957346cb7d8a8160f6165966cda822ae84a1f54f16bdce5b3013767a0a584cd5df9849e32"}, {0x98, 0x109, 0x2, "f413582941e06f6e34e65913e2ef6eb92c289fe9f801a3e63029eab3f2813d1a61556181b03a65057469ece6004e1b1e756345e955cb8dad236f2bd0d216bc6531b9f07fee6bd15f28ac664f317278d6bbf3a638a8f467d2079719ef86a96f72c4d9d99b0a92a4fbf288492e268e4e051778b0df3f0a5de02cd8b82114f30ffa8593"}, {0xa0, 0x131, 0x9, "72dc60dc774e1d0a5685c0c6582193eadb5ebec5c263eb93fb4e2e054b016d04698fe22a30946da07a8988e1f3fe2ff891393b9311c276f475e96007335cb83e377ddde70d69e25436d9fc70c0cfa0388a4aa4e9690962996645a8194b8aca79ad9932bab0c7c04ecd952f0da2e806879b7e160c2a96fd0406b1c25e964106ee18c023ae1daee17a3a"}], 0x198}, 0x10) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x4000) write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 2.967768281s ago: executing program 0 (id=3097): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x181203, 0x40) r3 = gettid() ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x434}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x5b1f1000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) socketpair$tipc(0x1e, 0xf78fdea8acf4843, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/ip_tables_names\x00') fcntl$notify(r4, 0x402, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x400, @local, 0x8823}, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x8}, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}], 0xa0) r7 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000300)={0x0, 0xa, [@multicast, @local, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @random="12e93a2b6ed3", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local]}) prctl$PR_SET_DUMPABLE(0x4, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x281, 0x0) close_range(r4, r8, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x79, &(0x7f0000000380)="0cba1806074d79b9b95afdcb2e2a4955ecd854f486411802ac62ee831a4b77e41804dd3b2782069948f06b56c00a6302902a20e8a2cbb72493aba8778af6f2be400c2a4271ac2e1e24cd815ce73aaf60a5e3bb211beb5288129dc0ae995aef167a2c416c666d7b137568a9c810adcc610e359afbb4569df448", 0x2d, 0x0, &(0x7f0000000400)="3584e11d8e845d4f4b98e0cdfd0e2f33175aac3940aac233b7086aa8bc9f5b34ccf24329beb8749bc6ea9743ea"}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000004c0)=0x1ff) ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000500)=0x7) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x70, "5031e84623d04dea4818371c2feeff68f08034807e6aa0b720026b63b84077bc31e7a71af2bc39e71677dc0a1f1af012c8703e8b94805a3d2b27f260e867e3635874394800439626087dfa290146569de4a56bb685b373a0ada644e77d7fa4119f54150ca7d86863ca1e61d4cda92fb6"}, &(0x7f0000000600)=0x94) fsopen(&(0x7f0000000640)='binder\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r7) rt_sigqueueinfo(r3, 0x2d, &(0x7f00000006c0)={0x7, 0x9, 0x9}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000740)=0x93) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0xf}}, './file0\x00'}) close_range(0xffffffffffffffff, r5, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000007c0)={0x9, 0x0, 0x201c, 0x3, 0x10000, 0xc00000, 0x8}) 2.832213818s ago: executing program 0 (id=3098): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf1ff, 0x0, 0x20040004}, 0x0) 2.753430743s ago: executing program 0 (id=3099): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) 2.50459948s ago: executing program 2 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) 2.347979162s ago: executing program 2 (id=3101): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x7, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x407f) readahead(r0, 0x90, 0xc0b) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000480)={0x0, 0xd, 0x1000, 0xf30, 0x3ff}) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x13, r4, 0xc835000) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000016c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001780), 0x90100, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f00000017c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000001800), 0x802, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002abd7000ffdbdf254300001008000300c33370031e4beeed4781b73383b93a78d28165dc4bddd38a59698e4cd1497a759468ba64305ddc45f6fdd1572ebd97faa6455bb05ecb6100be1a4317b3b1eca328b4cc618f3e098ab8c96327f917b707947d3b0a92a3e623ac92b00a", @ANYRES32=0x0, @ANYBLOB="0c00580071000000000000000c00580000000000000000000c00580005000000000000000c00580073000000000000000c00580064000000000000000c00580069000000000000000c0058004a00000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000080) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000001c0)=0x3f0f) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r8 = syz_open_pts(r7, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x2) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001a40)={'wlan0\x00'}) 2.254757142s ago: executing program 2 (id=3102): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x3231564e}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x1, 0x0) socket(0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x7) 1.977143959s ago: executing program 1 (id=3103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xf0, 0x0, 0xb47, 0x9, 0x0, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000884) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000000c0)={0x10000, 0x2000, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000200)=0xfc, 0x4) recvmmsg(r6, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x82) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.816089511s ago: executing program 0 (id=3104): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4, 0x0, 0x0, 0x0, 0x3000000}) 916.72044ms ago: executing program 5 (id=3105): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="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", 0x1000) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500a1000c0400070280000f00cee2d28c0e0aa0dc5dd7aadb97095ad7d4834a6e0a927653a220be1f7987d856b477f13a60fb07728d558afdb55264ae258a11f826f79a9b9ec7df9233a80f4269f1d7b78824b19acef8cc2d32a696ae021206c993778f79833a38e0e75ad61696269a94d75fd1cc9f456b65938200de5a4de79a494def42b825048fe7031fa31aa1ae8de21e6935a7862d5ebf2f9695d6", 0xb5) 868.884107ms ago: executing program 2 (id=3106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x10, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xe, 0xa}, {0x9, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 716.141321ms ago: executing program 2 (id=3107): r0 = getgid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000280)=[r1, r0]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x2) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)='_', 0x1}], 0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 715.732832ms ago: executing program 5 (id=3108): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 543.556265ms ago: executing program 0 (id=3109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240b42, 0x1cd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x439b, 0x4) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x45}}, 0x1c, 0x0}}], 0x1, 0x4004000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xe, 0x4e, 0x0, 0x7, 0x6, 0xff}, {0x100000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xf, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x4, 0x5, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2, 0x7}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x2, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xe, 0x0, 0x80, 0xef, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0xdddd0000, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x6d, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x0, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x9173}, 0x14, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioprio_set$pid(0x2, 0x0, 0x4) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) 215.363028ms ago: executing program 4 (id=3110): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 0s ago: executing program 1 (id=3111): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4058011) (async, rerun: 64) sched_setattr(0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r6, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x3, 0x1, 0x3fff}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x4, 0xfffffffd, @mcast2, 0x1}}}, &(0x7f0000000180)=0x84) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="46a6587805", 0x5}], 0x1}}], 0x1, 0xc841) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000109022400010700000009049406612e038344e9b065004000090003090505000002040905"], 0x0) kernel console output (not intermixed with test programs): 6-1: device descriptor read/64, error -71 [ 879.615544][ T5912] usb usb6-port1: attempt power cycle [ 879.676550][T16796] netlink: 'syz.1.2888': attribute type 4 has an invalid length. [ 879.979889][ T5912] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 880.041649][T11543] usb 5-1: USB disconnect, device number 87 [ 880.062303][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 880.081262][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.115411][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.139978][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 880.144070][ T5912] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 880.227831][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.264773][ T5912] usb 6-1: config 0 descriptor?? [ 880.338599][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 880.363394][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 880.381830][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 880.444577][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 880.459015][ T24] usb 2-1: Product: syz [ 880.463433][ T24] usb 2-1: Manufacturer: syz [ 880.477181][ T24] usb 2-1: SerialNumber: syz [ 880.488699][ T24] usb 2-1: config 0 descriptor?? [ 880.622194][ T24] usb 2-1: selecting invalid altsetting 0 [ 880.763350][ T5912] ft260 0003:0403:6030.0044: unbalanced collection at end of report description [ 880.792229][ T5912] ft260 0003:0403:6030.0044: failed to parse HID [ 880.811743][ T5912] ft260 0003:0403:6030.0044: probe with driver ft260 failed with error -22 [ 880.959018][T16794] netlink: 'syz.5.2887': attribute type 21 has an invalid length. [ 880.977402][T16794] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2887'. [ 881.001261][T16794] netlink: 'syz.5.2887': attribute type 5 has an invalid length. [ 881.064905][T16794] netlink: 'syz.5.2887': attribute type 6 has an invalid length. [ 881.113599][T16794] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2887'. [ 881.185660][T16816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.200330][T16816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.216928][T16816] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2890'. [ 881.227938][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 881.401464][T11532] usb 6-1: USB disconnect, device number 70 [ 881.706127][T16824] x_tables: ip_tables: osf match: only valid for protocol 6 [ 881.933830][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.949311][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.975818][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.994631][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.135142][ T5912] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 882.339180][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 882.350388][ T5912] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 882.365459][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.454086][ T5912] usb 3-1: Product: syz [ 882.484686][ T5912] usb 3-1: Manufacturer: syz [ 882.493731][ T5912] usb 3-1: SerialNumber: syz [ 882.512619][ T5912] usb 3-1: config 0 descriptor?? [ 883.156221][ T5912] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 883.166684][ T5912] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 883.232568][T16847] binder_alloc: 16839: pid 16839 spamming oneway? 1 buffers allocated for a total size of 4096 [ 883.244073][ T5912] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 883.594206][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.867563][ T5912] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 884.074302][ T5912] usb 3-1: USB disconnect, device number 70 [ 884.195772][T11543] usb 2-1: USB disconnect, device number 81 [ 884.334663][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 884.534203][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 884.564920][ T24] usb 5-1: config 129 has an invalid interface number: 181 but max is 0 [ 884.587346][ T24] usb 5-1: config 129 has an invalid descriptor of length 90, skipping remainder of the config [ 884.611573][ T24] usb 5-1: config 129 has no interface number 0 [ 884.635090][ T24] usb 5-1: config 129 interface 181 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 884.684367][ T24] usb 5-1: config 129 interface 181 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 884.857903][ T24] usb 5-1: string descriptor 0 read error: -22 [ 884.870402][ T24] usb 5-1: New USB device found, idVendor=0461, idProduct=0815, bcdDevice=72.09 [ 884.886408][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.931744][ T24] gspca_main: spca561-2.14.0 probing 0461:0815 [ 884.954576][ T5980] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 885.074657][T11532] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 885.111243][ T5980] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 885.126616][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.204596][T11532] usb 3-1: device descriptor read/64, error -71 [ 885.792821][ T24] spca561 5-1:129.181: probe with driver spca561 failed with error -22 [ 885.810094][ T5980] usb 6-1: Product: syz [ 885.832104][ T5980] usb 6-1: Manufacturer: syz [ 885.837922][ T5980] usb 6-1: SerialNumber: syz [ 885.851133][ T5980] usb 6-1: config 0 descriptor?? [ 885.929991][T16876] input: syz1 as /devices/virtual/input/input63 [ 886.058262][T16876] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 886.083532][T11532] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 886.095855][ T24] IPVS: starting estimator thread 0... [ 886.240011][ T5980] hso 6-1:0.0: Failed to find INT IN ep [ 886.246028][T11532] usb 3-1: device descriptor read/64, error -71 [ 886.255470][T16878] IPVS: using max 32 ests per chain, 76800 per kthread [ 886.263792][ T5980] usb-storage 6-1:0.0: USB Mass Storage device detected [ 886.367617][T11532] usb usb3-port1: attempt power cycle [ 886.478713][ T5980] usb 6-1: USB disconnect, device number 71 [ 886.624829][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 886.765366][T11532] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 886.785441][T11532] usb 3-1: device descriptor read/8, error -71 [ 886.793527][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.805576][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 886.824657][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 886.855680][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.884126][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.904582][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 886.930957][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 886.966172][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 886.977782][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.997380][ T5980] usb 5-1: USB disconnect, device number 88 [ 887.006201][ T24] usb 2-1: Product: syz [ 887.029660][T11532] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 887.074495][ T24] usb 2-1: Manufacturer: syz [ 887.079591][ T24] usb 2-1: SerialNumber: syz [ 887.090661][T11532] usb 3-1: device descriptor read/8, error -71 [ 887.116416][ T24] usb 2-1: config 0 descriptor?? [ 887.215926][T11532] usb usb3-port1: unable to enumerate USB device [ 887.559063][ T24] usb 2-1: ucan: probing device on interface #0 [ 887.559709][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.565973][ T24] usb 2-1: ucan: invalid endpoint configuration [ 887.586127][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 887.592475][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.602796][ T24] usb 2-1: USB disconnect, device number 82 [ 887.794374][T11543] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 887.960255][T11543] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 887.971476][T11543] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 887.989965][T11543] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.023790][T11543] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 888.034053][T11543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.058033][T11543] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 888.149576][T11543] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 888.247979][T15906] udevd[15906]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.319402][T16895] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 888.325973][T16895] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 888.346565][T16895] vhci_hcd vhci_hcd.0: Device attached [ 888.614208][ T24] usb 42-1: SetAddress Request (22) to port 0 [ 888.621029][ T24] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 888.924728][T11542] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 889.600436][T11542] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 889.609627][T11542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.732321][T11542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 889.746344][T11542] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.761161][T11542] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.775064][T11542] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 889.797418][T11542] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 889.807674][T11542] usb 2-1: Product: syz [ 889.814615][T11542] usb 2-1: Manufacturer: syz [ 889.840545][T11542] cdc_wdm 2-1:1.0: skipping garbage [ 890.309667][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'. [ 890.322742][T11542] cdc_wdm 2-1:1.0: skipping garbage [ 890.401984][T11542] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 890.423013][T11542] cdc_wdm 2-1:1.0: Unknown control protocol [ 890.425033][T16924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.460382][T16924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.464801][T11542] usb 2-1: USB disconnect, device number 83 [ 890.554973][T16924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.573422][T16924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.140665][T16933] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2926'. [ 891.296398][T16938] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2927'. [ 891.414704][T11532] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 891.463775][T16902] vhci_hcd: connection reset by peer [ 891.469630][ T4412] vhci_hcd: stop threads [ 891.470815][T11543] usb 5-1: USB disconnect, device number 89 [ 891.473903][ T4412] vhci_hcd: release socket [ 891.476933][ T4412] vhci_hcd: disconnect device [ 891.544724][T11532] usb 2-1: device descriptor read/64, error -71 [ 891.638674][T16943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2928'. [ 891.683211][T16943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2928'. [ 891.711006][T16945] FAULT_INJECTION: forcing a failure. [ 891.711006][T16945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.737325][T16945] CPU: 1 UID: 0 PID: 16945 Comm: syz.0.2929 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 891.737350][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.737360][T16945] Call Trace: [ 891.737368][T16945] [ 891.737376][T16945] dump_stack_lvl+0x189/0x250 [ 891.737400][T16945] ? __pfx____ratelimit+0x10/0x10 [ 891.737423][T16945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.737442][T16945] ? __pfx__printk+0x10/0x10 [ 891.737476][T16945] should_fail_ex+0x414/0x560 [ 891.737504][T16945] _copy_to_user+0x31/0xb0 [ 891.737524][T16945] simple_read_from_buffer+0xe1/0x170 [ 891.737552][T16945] proc_fail_nth_read+0x1df/0x250 [ 891.737574][T16945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.737595][T16945] ? rw_verify_area+0x258/0x650 [ 891.737615][T16945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.737633][T16945] vfs_read+0x200/0x980 [ 891.737658][T16945] ? __pfx___mutex_lock+0x10/0x10 [ 891.737681][T16945] ? __pfx_vfs_read+0x10/0x10 [ 891.737702][T16945] ? __fget_files+0x2a/0x420 [ 891.737730][T16945] ? __fget_files+0x3a0/0x420 [ 891.737751][T16945] ? __fget_files+0x2a/0x420 [ 891.737783][T16945] ksys_read+0x145/0x250 [ 891.737807][T16945] ? __pfx_ksys_read+0x10/0x10 [ 891.737825][T16945] ? rcu_is_watching+0x15/0xb0 [ 891.737849][T16945] ? do_syscall_64+0xbe/0x3b0 [ 891.737875][T16945] do_syscall_64+0xfa/0x3b0 [ 891.737896][T16945] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.737917][T16945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.737934][T16945] ? clear_bhb_loop+0x60/0xb0 [ 891.737954][T16945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.737970][T16945] RIP: 0033:0x7f61e8d8d3bc [ 891.737985][T16945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 891.738000][T16945] RSP: 002b:00007f61e9bf1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 891.738018][T16945] RAX: ffffffffffffffda RBX: 00007f61e8fb5fa0 RCX: 00007f61e8d8d3bc [ 891.738031][T16945] RDX: 000000000000000f RSI: 00007f61e9bf10a0 RDI: 0000000000000004 [ 891.738041][T16945] RBP: 00007f61e9bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 891.738051][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.738062][T16945] R13: 0000000000000000 R14: 00007f61e8fb5fa0 R15: 00007f61e90dfa28 [ 891.738091][T16945] [ 891.985905][T11532] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 892.030194][T16943] netlink: 'syz.2.2928': attribute type 12 has an invalid length. [ 892.096281][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 892.110571][T16953] vlan3: entered promiscuous mode [ 892.204535][T11532] usb 2-1: device descriptor read/64, error -71 [ 892.315072][T11532] usb usb2-port1: attempt power cycle [ 892.654984][T11532] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 892.675623][T11532] usb 2-1: device descriptor read/8, error -71 [ 892.901641][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2940'. [ 892.914252][T11532] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 892.965189][T11532] usb 2-1: device descriptor read/8, error -71 [ 893.075715][T11532] usb usb2-port1: unable to enumerate USB device [ 893.611835][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.629658][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.668368][ T24] usb 42-1: device descriptor read/8, error -110 [ 893.694540][T11532] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 893.844695][T11532] usb 5-1: Using ep0 maxpacket: 32 [ 893.853809][T11532] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 893.870877][T16993] FAULT_INJECTION: forcing a failure. [ 893.870877][T16993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.884932][T16993] CPU: 1 UID: 0 PID: 16993 Comm: syz.2.2944 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 893.884955][T16993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 893.884966][T16993] Call Trace: [ 893.884974][T16993] [ 893.884981][T16993] dump_stack_lvl+0x189/0x250 [ 893.885005][T16993] ? __pfx____ratelimit+0x10/0x10 [ 893.885028][T16993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.885054][T16993] ? __pfx__printk+0x10/0x10 [ 893.885076][T16993] ? __might_fault+0xb0/0x130 [ 893.885108][T16993] should_fail_ex+0x414/0x560 [ 893.885135][T16993] _copy_from_user+0x2d/0xb0 [ 893.885154][T16993] ___sys_sendmsg+0x158/0x2a0 [ 893.885177][T16993] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.885232][T16993] ? __fget_files+0x2a/0x420 [ 893.885254][T16993] ? __fget_files+0x3a0/0x420 [ 893.885285][T16993] __x64_sys_sendmsg+0x19b/0x260 [ 893.885308][T16993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.885338][T16993] ? __pfx_ksys_write+0x10/0x10 [ 893.885356][T16993] ? rcu_is_watching+0x15/0xb0 [ 893.885380][T16993] ? do_syscall_64+0xbe/0x3b0 [ 893.885406][T16993] do_syscall_64+0xfa/0x3b0 [ 893.885426][T16993] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.885447][T16993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.885463][T16993] ? clear_bhb_loop+0x60/0xb0 [ 893.885483][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.885499][T16993] RIP: 0033:0x7fca1978e9a9 [ 893.885515][T16993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.885529][T16993] RSP: 002b:00007fca1a543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.885547][T16993] RAX: ffffffffffffffda RBX: 00007fca199b5fa0 RCX: 00007fca1978e9a9 [ 893.885560][T16993] RDX: 0000000020000000 RSI: 0000200000001b00 RDI: 0000000000000003 [ 893.885571][T16993] RBP: 00007fca1a543090 R08: 0000000000000000 R09: 0000000000000000 [ 893.885582][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.885592][T16993] R13: 0000000000000000 R14: 00007fca199b5fa0 R15: 00007fca19adfa28 [ 893.885619][T16993] [ 893.914722][T11532] usb 5-1: config 0 has no interface number 0 [ 893.942158][T11532] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 893.942186][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.942205][T11532] usb 5-1: Product: syz [ 893.942218][T11532] usb 5-1: Manufacturer: syz [ 893.942232][T11532] usb 5-1: SerialNumber: syz [ 893.950781][T11532] usb 5-1: config 0 descriptor?? [ 893.958538][T11532] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 894.105388][ T24] usb usb42-port1: attempt power cycle [ 894.818406][ T24] usb usb42-port1: unable to enumerate USB device [ 894.952496][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'. [ 895.018229][T11532] gspca_topro: reg_w err -71 [ 895.039155][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 895.053362][T17020] vlan3: entered promiscuous mode [ 895.058881][T11532] gspca_topro: Sensor soi763a [ 895.092061][T11532] usb 5-1: USB disconnect, device number 90 [ 895.983369][T17030] program syz.4.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.244638][T17039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2955'. [ 896.606325][T17043] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2957'. [ 896.854486][T11542] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 897.077109][T11542] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 897.108504][T11542] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.272966][T11542] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.364467][T11542] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 897.454046][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.507862][T11542] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.644573][T11542] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 897.677621][T15229] udevd[15229]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.747820][T17049] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 897.754502][T17049] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 897.775345][T17049] vhci_hcd vhci_hcd.0: Device attached [ 897.976654][T17065] fuse: Unknown parameter 'user_i00000000000000000000' [ 898.064978][T11542] usb 44-1: SetAddress Request (6) to port 0 [ 898.107164][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 898.124112][T11542] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 899.190413][T17092] binder: 17087:17092 unknown command 1851878518 [ 899.200621][T17092] binder: 17087:17092 ioctl c0306201 200000000180 returned -22 [ 899.209422][T17090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 899.251599][T17090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 899.263367][T17090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 899.286969][T17090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 899.313940][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 899.338626][T17090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 899.547181][T17076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.808672][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 899.953546][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.243398][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.456807][T17059] vhci_hcd: connection reset by peer [ 900.462479][ T49] vhci_hcd: stop threads [ 900.484763][T11543] usb 6-1: USB disconnect, device number 72 [ 900.524923][ T49] vhci_hcd: release socket [ 900.654501][ T49] vhci_hcd: disconnect device [ 900.763296][T17103] macvlan2: entered allmulticast mode [ 900.823198][T17103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.872728][T17103] bridge0: port 3(macvlan2) entered blocking state [ 900.901789][T17103] bridge0: port 3(macvlan2) entered disabled state [ 900.913646][T17103] macvlan2: entered promiscuous mode [ 900.919269][T17103] bond0: entered promiscuous mode [ 901.310089][T17095] chnl_net:caif_netlink_parms(): no params data found [ 901.471181][T17122] FAULT_INJECTION: forcing a failure. [ 901.471181][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 901.491099][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.1.2976 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 901.491125][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 901.491136][T17122] Call Trace: [ 901.491143][T17122] [ 901.491151][T17122] dump_stack_lvl+0x189/0x250 [ 901.491174][T17122] ? __pfx____ratelimit+0x10/0x10 [ 901.491197][T17122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.491216][T17122] ? __pfx__printk+0x10/0x10 [ 901.491242][T17122] ? __pfx___might_resched+0x10/0x10 [ 901.491266][T17122] should_fail_ex+0x414/0x560 [ 901.491292][T17122] should_failslab+0xa8/0x100 [ 901.491317][T17122] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 901.491338][T17122] ? security_capable+0x7e/0x2e0 [ 901.491357][T17122] ? __alloc_skb+0x112/0x2d0 [ 901.491379][T17122] __alloc_skb+0x112/0x2d0 [ 901.491409][T17122] netlink_sendmsg+0x5c6/0xb30 [ 901.491438][T17122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.491458][T17122] ? __lock_acquire+0xab9/0xd20 [ 901.491473][T17122] ? aa_sock_msg_perm+0x94/0x160 [ 901.491495][T17122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 901.491511][T17122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.491530][T17122] __sock_sendmsg+0x21c/0x270 [ 901.491556][T17122] ____sys_sendmsg+0x505/0x830 [ 901.491582][T17122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.491610][T17122] ? import_iovec+0x74/0xa0 [ 901.491632][T17122] ___sys_sendmsg+0x21f/0x2a0 [ 901.491655][T17122] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.491710][T17122] ? __fget_files+0x2a/0x420 [ 901.491733][T17122] ? __fget_files+0x3a0/0x420 [ 901.491765][T17122] __x64_sys_sendmsg+0x19b/0x260 [ 901.491788][T17122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.491818][T17122] ? __pfx_ksys_write+0x10/0x10 [ 901.491836][T17122] ? rcu_is_watching+0x15/0xb0 [ 901.491859][T17122] ? do_syscall_64+0xbe/0x3b0 [ 901.491885][T17122] do_syscall_64+0xfa/0x3b0 [ 901.491906][T17122] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.491926][T17122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.491942][T17122] ? clear_bhb_loop+0x60/0xb0 [ 901.491962][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.491978][T17122] RIP: 0033:0x7fee93f8e9a9 [ 901.491994][T17122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.492008][T17122] RSP: 002b:00007fee94e8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.492026][T17122] RAX: ffffffffffffffda RBX: 00007fee941b5fa0 RCX: 00007fee93f8e9a9 [ 901.492038][T17122] RDX: 0000000020000000 RSI: 0000200000001b00 RDI: 0000000000000003 [ 901.492050][T17122] RBP: 00007fee94e8b090 R08: 0000000000000000 R09: 0000000000000000 [ 901.492060][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.492070][T17122] R13: 0000000000000000 R14: 00007fee941b5fa0 R15: 00007fee942dfa28 [ 901.492096][T17122] [ 901.584887][T17090] Bluetooth: hci2: command tx timeout [ 901.829958][T17137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.992060][T17137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.043366][ T12] bridge_slave_1: left allmulticast mode [ 902.051041][ T12] bridge_slave_1: left promiscuous mode [ 902.070042][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.106803][ T12] bridge_slave_0: left allmulticast mode [ 902.123798][ T12] bridge_slave_0: left promiscuous mode [ 902.144066][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.225033][ T5912] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 902.407107][ T5912] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 902.434307][ T5912] usb 6-1: config 0 interface 0 has no altsetting 0 [ 902.458606][ T5912] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 902.484364][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 902.497673][ T5912] usb 6-1: Product: syz [ 902.501880][ T5912] usb 6-1: Manufacturer: syz [ 902.518162][ T5912] usb 6-1: SerialNumber: syz [ 902.546968][ T5912] usb 6-1: config 0 descriptor?? [ 902.562819][ T5912] usb 6-1: selecting invalid altsetting 0 [ 902.766636][T17141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.776545][T17141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.791983][ T5912] usb 6-1: USB disconnect, device number 73 [ 902.915216][ T12] bond5 (unregistering): (slave geneve2): Releasing active interface [ 903.184697][T11542] usb 44-1: device descriptor read/8, error -110 [ 903.244526][T11532] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 903.498768][T11532] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 903.514540][T11532] usb 2-1: config 0 interface 0 has no altsetting 0 [ 903.563782][T11532] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 903.575832][T11542] usb usb44-port1: attempt power cycle [ 903.593390][T11532] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 903.603017][T11532] usb 2-1: Product: syz [ 903.624498][T11532] usb 2-1: Manufacturer: syz [ 903.629154][T11532] usb 2-1: SerialNumber: syz [ 903.657742][T11532] usb 2-1: config 0 descriptor?? [ 903.664525][T17090] Bluetooth: hci2: command tx timeout [ 903.684709][T11532] usb 2-1: selecting invalid altsetting 0 [ 903.886095][T11543] usb 2-1: USB disconnect, device number 88 [ 903.999546][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.009780][ T12] bond_slave_0: left promiscuous mode [ 904.019297][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.030719][ T12] bond_slave_1: left promiscuous mode [ 904.038442][ T12] bond0 (unregistering): Released all slaves [ 904.062450][ T12] bond1 (unregistering): Released all slaves [ 904.088445][ T12] bond2 (unregistering): Released all slaves [ 904.094252][ T5912] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 904.135580][T11542] usb usb44-port1: unable to enumerate USB device [ 904.265969][ T5912] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 904.284133][ T5912] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 904.300335][ T5912] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.314547][ T5912] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.324559][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.354772][ T5912] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 904.393678][ T12] bond3 (unregistering): Released all slaves [ 904.450588][ T12] bond4 (unregistering): Released all slaves [ 904.467381][ T5912] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 904.582809][T17176] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 904.589405][T17176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 904.647324][T17176] vhci_hcd vhci_hcd.0: Device attached [ 904.858730][ T12] bond5 (unregistering): Released all slaves [ 904.897554][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.914271][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.926986][ T5912] usb 44-1: SetAddress Request (10) to port 0 [ 904.947647][T17095] bridge_slave_0: entered allmulticast mode [ 904.955974][ T5912] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 904.978857][T17095] bridge_slave_0: entered promiscuous mode [ 905.004896][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.038795][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.061712][T17095] bridge_slave_1: entered allmulticast mode [ 905.096887][T17095] bridge_slave_1: entered promiscuous mode [ 905.371815][T17194] FAULT_INJECTION: forcing a failure. [ 905.371815][T17194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.424063][T17194] CPU: 0 UID: 0 PID: 17194 Comm: syz.0.2991 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 905.424087][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 905.424097][T17194] Call Trace: [ 905.424105][T17194] [ 905.424113][T17194] dump_stack_lvl+0x189/0x250 [ 905.424137][T17194] ? __pfx____ratelimit+0x10/0x10 [ 905.424161][T17194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.424178][T17194] ? __pfx__printk+0x10/0x10 [ 905.424200][T17194] ? __might_fault+0xb0/0x130 [ 905.424232][T17194] should_fail_ex+0x414/0x560 [ 905.424259][T17194] _copy_from_user+0x2d/0xb0 [ 905.424278][T17194] __sys_bpf+0x1ed/0x860 [ 905.424302][T17194] ? __pfx___sys_bpf+0x10/0x10 [ 905.424337][T17194] ? ksys_write+0x22a/0x250 [ 905.424360][T17194] ? __pfx_ksys_write+0x10/0x10 [ 905.424388][T17194] __x64_sys_bpf+0x7c/0x90 [ 905.424411][T17194] do_syscall_64+0xfa/0x3b0 [ 905.424433][T17194] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.424454][T17194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.424470][T17194] ? clear_bhb_loop+0x60/0xb0 [ 905.424491][T17194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.424507][T17194] RIP: 0033:0x7f61e8d8e9a9 [ 905.424522][T17194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.424537][T17194] RSP: 002b:00007f61e9bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 905.424555][T17194] RAX: ffffffffffffffda RBX: 00007f61e8fb5fa0 RCX: 00007f61e8d8e9a9 [ 905.424568][T17194] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000008 [ 905.424578][T17194] RBP: 00007f61e9bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 905.424589][T17194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.424599][T17194] R13: 0000000000000000 R14: 00007f61e8fb5fa0 R15: 00007f61e90dfa28 [ 905.424628][T17194] [ 905.824674][T17090] Bluetooth: hci2: command tx timeout [ 906.105157][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.402137][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.699980][T17095] team0: Port device team_slave_0 added [ 906.723940][T17095] team0: Port device team_slave_1 added [ 907.019654][ T12] hsr_slave_0: left promiscuous mode [ 907.061498][ T12] hsr_slave_1: left promiscuous mode [ 907.098723][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 907.163816][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 907.324978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.372650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.753095][T11532] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 907.926876][T17090] Bluetooth: hci2: command tx timeout [ 907.946940][T11532] usb 5-1: Using ep0 maxpacket: 32 [ 907.954564][T11532] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 907.974720][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 908.028873][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 908.070092][T11532] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.151025][T17235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.160492][T17235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.227156][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 908.251417][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 908.288453][T11532] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 908.318478][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.328882][T11532] usb 5-1: Product: syz [ 908.333223][T11532] usb 5-1: Manufacturer: syz [ 908.343155][T11532] usb 5-1: SerialNumber: syz [ 908.360494][T11532] usb 5-1: config 0 descriptor?? [ 908.362592][ T12] team0 (unregistering): Port device vlan0 removed [ 908.576999][T17179] vhci_hcd: connection reset by peer [ 908.602537][T11543] usb 6-1: USB disconnect, device number 74 [ 908.614778][ T458] vhci_hcd: stop threads [ 908.647784][ T458] vhci_hcd: release socket [ 908.653331][ T458] vhci_hcd: disconnect device [ 909.544412][T11532] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 909.717443][T11532] usb 6-1: Using ep0 maxpacket: 8 [ 909.731215][ T12] team_slave_1 (unregistering): left promiscuous mode [ 909.738856][T11532] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 909.753298][T11532] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 909.756707][ T12] team0 (unregistering): Port device team_slave_1 removed [ 909.780919][T11532] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.792750][T11532] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.809146][T11532] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 909.818761][T11532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.914831][ T12] team_slave_0 (unregistering): left promiscuous mode [ 909.932273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 910.065271][ T5912] usb 44-1: device descriptor read/8, error -110 [ 910.082865][T11532] usb 6-1: GET_CAPABILITIES returned 0 [ 910.095804][T11532] usbtmc 6-1:16.0: can't read capabilities [ 910.289732][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 910.303869][T17243] usbtmc 6-1:16.0: Unable to send data, error -71 [ 910.462626][ T5912] usb usb44-port1: attempt power cycle [ 911.057871][T17245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.068111][ T5912] usb usb44-port1: unable to enumerate USB device [ 911.090684][T17245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.177768][T17245] vlan3: entered promiscuous mode [ 911.228998][T11532] usb 5-1: USB disconnect, device number 91 [ 911.246005][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.253369][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.336424][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.351360][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.359461][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.388239][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.594695][T17095] hsr_slave_0: entered promiscuous mode [ 911.610445][T17095] hsr_slave_1: entered promiscuous mode [ 911.924716][T11532] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 912.040281][T17267] netlink: 'syz.4.3005': attribute type 9 has an invalid length. [ 912.061005][T17267] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.3005'. [ 912.079385][T11532] usb 2-1: Using ep0 maxpacket: 32 [ 912.100617][T11532] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.118626][T11532] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.147302][T11532] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.254961][T11532] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.278496][T11532] usb 2-1: config 0 interface 0 has no altsetting 0 [ 912.303090][T11532] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 912.337665][T11532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.362761][T11542] usb 6-1: USB disconnect, device number 75 [ 912.443680][T11532] usb 2-1: config 0 descriptor?? [ 913.154112][T11542] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 913.251966][T11532] usbhid 2-1:0.0: can't add hid device: -71 [ 913.272217][T11532] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 913.362168][T11542] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.379490][T11542] usb 6-1: config 0 has no interface number 0 [ 913.397833][T11532] usb 2-1: USB disconnect, device number 89 [ 913.478590][T11542] usb 6-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 913.534575][T11542] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 913.584457][T11542] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.624960][T11542] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 913.674056][T11542] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 913.739017][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.799490][T11542] usb 6-1: config 0 descriptor?? [ 914.049623][T11542] uclogic 0003:28BD:0935.0045: interface is invalid, ignoring [ 914.643610][T17095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 914.659782][T17095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 914.672292][T17095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 914.693762][T17095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 914.754099][T11542] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 914.930999][T17095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.941493][T11542] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.980927][T11542] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.999711][T11542] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 915.010789][T11542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 915.020544][T11542] usb 5-1: SerialNumber: syz [ 915.062772][T17095] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.091206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.098390][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.148130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.155324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.283865][T17304] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 915.720661][T16595] usb 6-1: USB disconnect, device number 76 [ 915.830547][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.892358][T11542] usb 5-1: 0:2 : does not exist [ 915.900873][T11542] usb 5-1: unit 5: unexpected type 0x0a [ 915.983085][T11542] usb 5-1: USB disconnect, device number 92 [ 916.091862][T17095] veth0_vlan: entered promiscuous mode [ 916.147151][T17095] veth1_vlan: entered promiscuous mode [ 916.236452][T17329] FAULT_INJECTION: forcing a failure. [ 916.236452][T17329] name failslab, interval 1, probability 0, space 0, times 0 [ 916.268711][T17329] CPU: 0 UID: 0 PID: 17329 Comm: syz.5.3015 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 916.268735][T17329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 916.268752][T17329] Call Trace: [ 916.268759][T17329] [ 916.268766][T17329] dump_stack_lvl+0x189/0x250 [ 916.268789][T17329] ? __pfx____ratelimit+0x10/0x10 [ 916.268811][T17329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 916.268828][T17329] ? __pfx__printk+0x10/0x10 [ 916.268851][T17329] ? __pfx___might_resched+0x10/0x10 [ 916.268869][T17329] ? fs_reclaim_acquire+0x7d/0x100 [ 916.268889][T17329] should_fail_ex+0x414/0x560 [ 916.268916][T17329] should_failslab+0xa8/0x100 [ 916.268941][T17329] __kmalloc_noprof+0xcb/0x4f0 [ 916.268961][T17329] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 916.268977][T17329] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 916.269006][T17329] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 916.269037][T17329] genl_family_rcv_msg_doit+0xb8/0x300 [ 916.269067][T17329] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 916.269089][T17329] ? rcu_is_watching+0x15/0xb0 [ 916.269110][T17329] ? apparmor_capable+0x137/0x1b0 [ 916.269135][T17329] ? bpf_lsm_capable+0x9/0x20 [ 916.269156][T17329] ? security_capable+0x7e/0x2e0 [ 916.269181][T17329] genl_rcv_msg+0x60e/0x790 [ 916.269210][T17329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 916.269229][T17329] ? ref_tracker_free+0x63a/0x7d0 [ 916.269249][T17329] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 916.269269][T17329] ? __pfx_nl80211_join_ocb+0x10/0x10 [ 916.269284][T17329] ? __pfx_nl80211_post_doit+0x10/0x10 [ 916.269305][T17329] ? __pfx_ref_tracker_free+0x10/0x10 [ 916.269337][T17329] netlink_rcv_skb+0x205/0x470 [ 916.269356][T17329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 916.269378][T17329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 916.269413][T17329] ? down_read+0x1ad/0x2e0 [ 916.269432][T17329] genl_rcv+0x28/0x40 [ 916.269452][T17329] netlink_unicast+0x75c/0x8e0 [ 916.269474][T17329] netlink_sendmsg+0x805/0xb30 [ 916.269496][T17329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.269513][T17329] ? __lock_acquire+0xab9/0xd20 [ 916.269524][T17329] ? aa_sock_msg_perm+0x94/0x160 [ 916.269541][T17329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 916.269554][T17329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.269568][T17329] __sock_sendmsg+0x21c/0x270 [ 916.269590][T17329] ____sys_sendmsg+0x505/0x830 [ 916.269610][T17329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.269634][T17329] ? import_iovec+0x74/0xa0 [ 916.269651][T17329] ___sys_sendmsg+0x21f/0x2a0 [ 916.269668][T17329] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.269712][T17329] ? __fget_files+0x2a/0x420 [ 916.269730][T17329] ? __fget_files+0x3a0/0x420 [ 916.269761][T17329] __x64_sys_sendmsg+0x19b/0x260 [ 916.269779][T17329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 916.269801][T17329] ? __pfx_ksys_write+0x10/0x10 [ 916.269816][T17329] ? rcu_is_watching+0x15/0xb0 [ 916.269833][T17329] ? do_syscall_64+0xbe/0x3b0 [ 916.269854][T17329] do_syscall_64+0xfa/0x3b0 [ 916.269870][T17329] ? lockdep_hardirqs_on+0x9c/0x150 [ 916.269886][T17329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.269899][T17329] ? clear_bhb_loop+0x60/0xb0 [ 916.269915][T17329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.269927][T17329] RIP: 0033:0x7f324098e9a9 [ 916.269940][T17329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.269952][T17329] RSP: 002b:00007f3241730038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.269967][T17329] RAX: ffffffffffffffda RBX: 00007f3240bb5fa0 RCX: 00007f324098e9a9 [ 916.269977][T17329] RDX: 0000000020000000 RSI: 0000200000001b00 RDI: 0000000000000003 [ 916.269986][T17329] RBP: 00007f3241730090 R08: 0000000000000000 R09: 0000000000000000 [ 916.269994][T17329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.270002][T17329] R13: 0000000000000000 R14: 00007f3240bb5fa0 R15: 00007f3240cdfa28 [ 916.270023][T17329] [ 916.661438][T17095] veth0_macvtap: entered promiscuous mode [ 916.671064][T17095] veth1_macvtap: entered promiscuous mode [ 916.682353][T17331] netlink: 'syz.0.3016': attribute type 9 has an invalid length. [ 916.689582][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.742332][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.813795][T17095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.894529][T17095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.917684][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 916.944322][T17095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.953239][T17095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.085372][T17341] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 917.103510][T17341] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 917.294189][T11541] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 917.390472][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.432835][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.475263][T11541] usb 2-1: Using ep0 maxpacket: 8 [ 917.501579][T11541] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 917.513130][T11541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 917.528762][T11541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.619449][T11541] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.681734][T11541] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.721866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.787349][T11541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.793219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.930094][T17366] fuse: Unknown parameter 'no' [ 918.173576][T11541] usb 2-1: GET_CAPABILITIES returned 0 [ 918.179546][T11541] usbtmc 2-1:16.0: can't read capabilities [ 918.302853][T11542] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 918.649292][T11542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 918.688458][T11542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.739700][T11542] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 918.789708][T11542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.875015][T11542] usb 5-1: config 0 descriptor?? [ 919.202007][T11542] hub 5-1:0.0: USB hub found [ 919.389931][T11542] hub 5-1:0.0: 1 port detected [ 919.593616][T17366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.602682][T17366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.637050][T17366] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 919.643857][T17366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 919.660114][T17366] vhci_hcd vhci_hcd.0: Device attached [ 919.944160][T11543] usb 42-1: SetAddress Request (26) to port 0 [ 919.950463][T11543] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 920.321313][T11532] usb 2-1: USB disconnect, device number 90 [ 920.627014][T11542] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 920.646458][T11542] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 920.685065][T11551] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 920.699666][T11542] usbhid 5-1:0.0: can't add hid device: -32 [ 920.708091][T11542] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 920.854275][T11532] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 920.875017][T11551] usb 3-1: Using ep0 maxpacket: 8 [ 920.920439][T11551] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 920.936845][T11551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.966239][T11551] usb 3-1: Product: syz [ 920.970518][T11551] usb 3-1: Manufacturer: syz [ 920.976301][T11551] usb 3-1: SerialNumber: syz [ 921.022666][T17388] vhci_hcd: connection reset by peer [ 921.037001][T11532] usb 2-1: no configurations [ 921.041684][T11532] usb 2-1: can't read configurations, error -22 [ 921.051808][T12586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.065883][T14714] vhci_hcd: stop threads [ 921.070203][T14714] vhci_hcd: release socket [ 921.075752][T12586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.088168][T12586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.097449][T12586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 921.108927][T12586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.154875][T11541] usb 5-1: USB disconnect, device number 93 [ 921.164036][T11542] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 921.184099][T14714] vhci_hcd: disconnect device [ 921.194601][T11532] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 921.373788][T11532] usb 2-1: no configurations [ 921.379187][T11532] usb 2-1: can't read configurations, error -22 [ 921.396999][T11532] usb usb2-port1: attempt power cycle [ 921.411660][T11551] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 921.420235][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.431341][T11551] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 921.471382][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.492131][T11542] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 921.510110][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.549883][T11542] usb 6-1: config 0 descriptor?? [ 921.717467][ T5980] usb 1-1: USB disconnect, device number 73 [ 921.744771][T11532] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 921.858122][T11532] usb 2-1: no configurations [ 921.862772][T11532] usb 2-1: can't read configurations, error -22 [ 921.974339][ T4412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.028133][T11542] hid-steam 0003:28DE:1142.0046: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 922.054488][T11532] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 922.097125][T11532] usb 2-1: no configurations [ 922.101770][T11532] usb 2-1: can't read configurations, error -22 [ 922.113251][ T4412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.127441][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 922.138488][T11532] usb usb2-port1: unable to enumerate USB device [ 922.154715][T11542] hid-steam 0003:28DE:1142.0046: Steam wireless receiver connected [ 922.175533][T17404] chnl_net:caif_netlink_parms(): no params data found [ 922.188481][T11542] hid-steam 0003:28DE:1142.0047: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 922.262336][ T4412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.305300][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 922.370079][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.410040][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.422471][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 922.433161][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 922.442925][ T24] usb 5-1: can't read configurations, error -71 [ 922.482583][ T4412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.618792][T17404] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.636155][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.643715][T17404] bridge_slave_0: entered allmulticast mode [ 922.659450][T17404] bridge_slave_0: entered promiscuous mode [ 922.683378][T17404] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.699436][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.708879][T17404] bridge_slave_1: entered allmulticast mode [ 922.719373][T17404] bridge_slave_1: entered promiscuous mode [ 922.822396][T17404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.846853][T17404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.979363][T17404] team0: Port device team_slave_0 added [ 923.079889][T17404] team0: Port device team_slave_1 added [ 923.133318][ T4412] bridge_slave_1: left allmulticast mode [ 923.145937][ T4412] bridge_slave_1: left promiscuous mode [ 923.153348][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.172261][ T4412] bridge_slave_0: left allmulticast mode [ 923.181565][ T4412] bridge_slave_0: left promiscuous mode [ 923.190796][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.197460][T17090] Bluetooth: hci3: command tx timeout [ 923.274420][T11541] usb 6-1: reset high-speed USB device number 77 using dummy_hcd [ 923.400549][ T24] usb 3-1: USB disconnect, device number 75 [ 923.814705][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 923.966390][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 923.981108][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.994911][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 924.005133][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 924.013156][ T24] usb 3-1: Manufacturer: syz [ 924.046682][ T24] usb 3-1: config 0 descriptor?? [ 924.065889][T11542] usb 6-1: USB disconnect, device number 77 [ 924.119340][T11542] hid-steam 0003:28DE:1142.0046: Steam wireless receiver disconnected [ 924.146662][ T24] rc_core: IR keymap rc-hauppauge not found [ 924.152793][ T24] Registered IR keymap rc-empty [ 924.160359][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 924.217324][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input65 [ 924.554512][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 187 [ 924.716336][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.765394][ T4412] bond_slave_0: left promiscuous mode [ 924.790464][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.818888][ T4412] bond_slave_1: left promiscuous mode [ 924.847396][ T4412] bond0 (unregistering): Released all slaves [ 924.897258][ T4412] bond1 (unregistering): Released all slaves [ 925.104515][T11543] usb 42-1: device descriptor read/8, error -110 [ 925.267280][T17090] Bluetooth: hci3: command tx timeout [ 925.376270][ T4412] bond2 (unregistering): Released all slaves [ 925.498801][T11543] usb usb42-port1: attempt power cycle [ 925.648290][ T4412] bond3 (unregistering): Released all slaves [ 925.878834][T17404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.911341][T11542] usb 3-1: USB disconnect, device number 76 [ 925.911728][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.955113][T17404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.972616][ T4412] tipc: Left network mode [ 925.992682][T17404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.000299][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.048506][T17404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.075514][T11543] usb usb42-port1: unable to enumerate USB device [ 926.274547][ T5980] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 926.414686][ T5980] usb 5-1: device descriptor read/64, error -71 [ 926.483034][T17404] hsr_slave_0: entered promiscuous mode [ 926.516825][T17404] hsr_slave_1: entered promiscuous mode [ 926.588797][T17404] debugfs: 'hsr0' already exists in 'hsr' [ 926.623775][T17404] Cannot create hsr debugfs directory [ 926.654637][ T5980] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 926.713259][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3042'. [ 926.816552][ T5980] usb 5-1: device descriptor read/64, error -71 [ 926.899618][T17518] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 926.914119][T11542] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 926.948091][ T5980] usb usb5-port1: attempt power cycle [ 927.149222][T11542] usb 3-1: Invalid ep0 maxpacket: 16 [ 927.294783][T11542] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 927.317134][ T5980] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 927.349832][ T5980] usb 5-1: device descriptor read/8, error -71 [ 927.354099][T17090] Bluetooth: hci3: command tx timeout [ 927.515296][T11542] usb 3-1: Invalid ep0 maxpacket: 16 [ 927.531266][T11542] usb usb3-port1: attempt power cycle [ 927.595113][ T5980] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 927.602887][ T4412] hsr_slave_0: left promiscuous mode [ 927.685139][ T5980] usb 5-1: device descriptor read/8, error -71 [ 927.719049][ T4412] hsr_slave_1: left promiscuous mode [ 927.745090][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.782251][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.800109][ T5980] usb usb5-port1: unable to enumerate USB device [ 927.914579][T11542] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 927.989965][T11542] usb 3-1: Invalid ep0 maxpacket: 16 [ 928.164118][T11542] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 928.192061][T11542] usb 3-1: Invalid ep0 maxpacket: 16 [ 928.218072][T11542] usb usb3-port1: unable to enumerate USB device [ 929.455847][T17090] Bluetooth: hci3: command tx timeout [ 930.110507][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 930.313127][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 930.391195][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 930.559427][T11532] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 930.654754][ T5980] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 930.714639][T11532] usb 2-1: Using ep0 maxpacket: 16 [ 930.731732][T11532] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 930.742106][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.751255][T11532] usb 2-1: Product: syz [ 930.756471][T11532] usb 2-1: Manufacturer: syz [ 930.761228][T11532] usb 2-1: SerialNumber: syz [ 930.777024][T11532] r8152-cfgselector 2-1: Unknown version 0x0000 [ 930.783897][T11532] r8152-cfgselector 2-1: config 0 descriptor?? [ 930.814388][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 930.828502][ T5980] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 930.846069][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.859258][ T5980] usb 5-1: Product: syz [ 930.863568][ T5980] usb 5-1: Manufacturer: syz [ 930.871237][ T5980] usb 5-1: SerialNumber: syz [ 930.893546][ T5980] usb 5-1: config 0 descriptor?? [ 930.909261][ T5980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 931.029925][T11532] r8152-cfgselector 2-1: Unknown version 0x0000 [ 931.037132][T11532] r8152-cfgselector 2-1: bad CDC descriptors [ 931.051615][T11532] r8152-cfgselector 2-1: USB disconnect, device number 95 [ 931.248588][ T5980] gspca_ov534_9: reg_w failed -71 [ 931.386950][T17578] fuse: Bad value for 'group_id' [ 931.391950][T17578] fuse: Bad value for 'group_id' [ 931.593288][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.600428][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.639716][T11542] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 931.683551][ T5980] gspca_ov534_9: Unknown sensor 0000 [ 931.683640][ T5980] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 931.741458][ T5980] usb 5-1: USB disconnect, device number 100 [ 931.814393][T11542] usb 6-1: Using ep0 maxpacket: 8 [ 931.901246][T11542] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 931.920985][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.966213][T11542] usb 6-1: config 0 descriptor?? [ 931.988425][ T4412] IPVS: stop unused estimator thread 0... [ 932.074738][ T5980] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 932.114450][T11532] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 932.315006][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 932.347992][ T5980] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 932.358459][ T5980] usb 5-1: config 0 has no interface number 1 [ 932.417085][T11532] usb 2-1: config 0 has no interfaces? [ 932.423368][ T5980] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.452425][T17404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 932.469522][T17404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 932.486899][T11532] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 932.498653][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.510447][T11532] usb 2-1: Product: syz [ 932.516774][ T5980] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 932.536463][T17404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 932.579055][T17404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 932.591325][T11532] usb 2-1: Manufacturer: syz [ 932.621492][T11532] usb 2-1: SerialNumber: syz [ 932.630995][ T5980] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 932.854858][T11532] usb 2-1: config 0 descriptor?? [ 932.884885][ T5980] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 932.919555][ T5980] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 932.952011][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 933.003463][T17404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.029859][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 41910, setting to 1024 [ 933.073103][ T5980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 933.113372][ T5980] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 933.120125][T17404] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.139855][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.171687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.178940][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.211995][T17601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.227250][T17601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.244782][ T5980] usb 5-1: Product: syz [ 933.248997][ T5980] usb 5-1: Manufacturer: syz [ 933.286474][ T5980] usb 5-1: SerialNumber: syz [ 933.298527][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.305883][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.338976][ T5980] usb 5-1: config 0 descriptor?? [ 933.364876][T17581] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 933.377664][ T5980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.402542][ T5980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.597313][ T5980] usb 5-1: USB disconnect, device number 101 [ 933.610647][T17404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.835929][T17621] udevd[17621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.864831][T11542] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 933.895217][T17404] veth0_vlan: entered promiscuous mode [ 933.916469][T11542] asix 6-1:0.0: probe with driver asix failed with error -71 [ 933.973480][T11542] usb 6-1: USB disconnect, device number 78 [ 933.981918][T17404] veth1_vlan: entered promiscuous mode [ 934.153076][T17404] veth0_macvtap: entered promiscuous mode [ 934.176941][T17404] veth1_macvtap: entered promiscuous mode [ 934.226835][T17404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.277006][T17404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.357295][T17404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.417279][T17404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.462084][T17404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.512717][T17404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.745329][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.754829][T11542] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 934.786360][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.869095][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.899453][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.905181][T11532] usb 2-1: USB disconnect, device number 96 [ 934.947771][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.982022][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.000056][T11542] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 935.022586][T11542] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 935.057603][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.131084][T11542] usb 6-1: config 0 descriptor?? [ 935.250833][T17650] FAULT_INJECTION: forcing a failure. [ 935.250833][T17650] name failslab, interval 1, probability 0, space 0, times 0 [ 935.265318][T17650] CPU: 1 UID: 0 PID: 17650 Comm: syz.0.3027 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 935.265341][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.265351][T17650] Call Trace: [ 935.265359][T17650] [ 935.265367][T17650] dump_stack_lvl+0x189/0x250 [ 935.265390][T17650] ? __pfx____ratelimit+0x10/0x10 [ 935.265412][T17650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.265430][T17650] ? __pfx__printk+0x10/0x10 [ 935.265456][T17650] ? __pfx___might_resched+0x10/0x10 [ 935.265475][T17650] ? fs_reclaim_acquire+0x7d/0x100 [ 935.265495][T17650] should_fail_ex+0x414/0x560 [ 935.265521][T17650] should_failslab+0xa8/0x100 [ 935.265545][T17650] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 935.265567][T17650] ? __alloc_skb+0x112/0x2d0 [ 935.265589][T17650] __alloc_skb+0x112/0x2d0 [ 935.265610][T17650] netlink_ack+0x146/0xa50 [ 935.265626][T17650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.265646][T17650] ? ref_tracker_free+0x63a/0x7d0 [ 935.265667][T17650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 935.265686][T17650] ? __pfx_nl80211_post_doit+0x10/0x10 [ 935.265707][T17650] ? __pfx_ref_tracker_free+0x10/0x10 [ 935.265740][T17650] netlink_rcv_skb+0x28c/0x470 [ 935.265759][T17650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.265782][T17650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.265816][T17650] ? down_read+0x1ad/0x2e0 [ 935.265834][T17650] genl_rcv+0x28/0x40 [ 935.265854][T17650] netlink_unicast+0x75c/0x8e0 [ 935.265882][T17650] netlink_sendmsg+0x805/0xb30 [ 935.265910][T17650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.265931][T17650] ? __lock_acquire+0xab9/0xd20 [ 935.265945][T17650] ? aa_sock_msg_perm+0x94/0x160 [ 935.265966][T17650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 935.265984][T17650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.266002][T17650] __sock_sendmsg+0x21c/0x270 [ 935.266029][T17650] ____sys_sendmsg+0x505/0x830 [ 935.266054][T17650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.266083][T17650] ? import_iovec+0x74/0xa0 [ 935.266104][T17650] ___sys_sendmsg+0x21f/0x2a0 [ 935.266126][T17650] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.266181][T17650] ? __fget_files+0x2a/0x420 [ 935.266203][T17650] ? __fget_files+0x3a0/0x420 [ 935.266234][T17650] __x64_sys_sendmsg+0x19b/0x260 [ 935.266257][T17650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 935.266285][T17650] ? __pfx_ksys_write+0x10/0x10 [ 935.266310][T17650] ? rcu_is_watching+0x15/0xb0 [ 935.266334][T17650] ? do_syscall_64+0xbe/0x3b0 [ 935.266360][T17650] do_syscall_64+0xfa/0x3b0 [ 935.266380][T17650] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.266402][T17650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.266418][T17650] ? clear_bhb_loop+0x60/0xb0 [ 935.266438][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.266454][T17650] RIP: 0033:0x7f070ab8e9a9 [ 935.266469][T17650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.266483][T17650] RSP: 002b:00007f070ba00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.266502][T17650] RAX: ffffffffffffffda RBX: 00007f070adb5fa0 RCX: 00007f070ab8e9a9 [ 935.266514][T17650] RDX: 0000000020000000 RSI: 0000200000001b00 RDI: 0000000000000003 [ 935.266525][T17650] RBP: 00007f070ba00090 R08: 0000000000000000 R09: 0000000000000000 [ 935.266534][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.266544][T17650] R13: 0000000000000000 R14: 00007f070adb5fa0 R15: 00007f070aedfa28 [ 935.266571][T17650] [ 935.817020][T11542] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x3 [ 935.872900][T11542] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x3 [ 935.895586][T11542] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x3 [ 936.001167][T11542] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x3 [ 936.057379][ T30] audit: type=1326 audit(1753792059.559:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.2.3069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90eb38e9a9 code=0x0 [ 936.080701][T11542] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x3 [ 936.129190][T11542] plantronics 0003:047F:FFFF.0048: item fetching failed at offset 14/15 [ 936.196714][T11542] plantronics 0003:047F:FFFF.0048: parse failed [ 936.203106][T11542] plantronics 0003:047F:FFFF.0048: probe with driver plantronics failed with error -22 [ 936.217378][ T30] audit: type=1326 audit(1753792059.669:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.2.3069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90eb38e9a9 code=0x0 [ 936.335883][T11542] usb 6-1: USB disconnect, device number 79 [ 936.380910][T17669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3070'. [ 936.399638][T17670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3070'. [ 936.434549][T11532] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 936.731152][T11532] usb 5-1: Using ep0 maxpacket: 32 [ 936.771631][T17679] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 936.938976][T11532] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 936.953675][T11532] usb 5-1: config 0 has no interface number 0 [ 936.977909][T11532] usb 5-1: config 0 interface 184 has no altsetting 0 [ 936.998158][T11532] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 937.009498][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.020262][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3074'. [ 937.059140][T11532] usb 5-1: Product: syz [ 937.067186][T11532] usb 5-1: Manufacturer: syz [ 937.093121][T11532] usb 5-1: SerialNumber: syz [ 937.115557][T11532] usb 5-1: config 0 descriptor?? [ 937.133495][T11532] smsc75xx v1.0.0 [ 937.139780][T11532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 937.153757][T11532] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 937.304559][T11542] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 937.457308][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 937.494718][T11542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 240, setting to 64 [ 937.517246][T11542] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 937.553752][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.599625][T11542] usb 6-1: config 0 descriptor?? [ 937.611713][T17683] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 937.670146][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.682442][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.045653][T17701] loop8: detected capacity change from 0 to 8 [ 938.062424][T17701] Dev loop8: unable to read RDB block 8 [ 938.068725][T17701] loop8: unable to read partition table [ 938.077512][T17701] loop8: partition table beyond EOD, truncated [ 938.097642][T17701] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 939.141699][ T24] usb 5-1: USB disconnect, device number 102 [ 940.233763][T11542] usbhid 6-1:0.0: can't add hid device: -71 [ 940.240056][T11543] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 940.256716][T11542] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 940.307441][T11542] usb 6-1: USB disconnect, device number 80 [ 940.360632][T17720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3083'. [ 940.424357][T11543] usb 5-1: device descriptor read/64, error -71 [ 940.654492][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 940.705586][T11543] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 940.754222][ T5980] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 940.806628][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 940.813892][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 940.823418][ T24] usb 3-1: config 244 has an invalid interface number: 29 but max is 0 [ 940.833041][ T24] usb 3-1: config 244 has no interface number 0 [ 940.842094][ T24] usb 3-1: config 244 interface 29 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 940.854167][T11543] usb 5-1: device descriptor read/64, error -71 [ 940.862201][ T5912] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 940.874424][ T24] usb 3-1: config 244 interface 29 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 940.885987][ T24] usb 3-1: config 244 interface 29 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 940.965672][ T24] usb 3-1: config 244 interface 29 has no altsetting 0 [ 940.975859][ T24] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0128, bcdDevice=a0.cc [ 940.981217][T11543] usb usb5-port1: attempt power cycle [ 940.985984][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.000026][ T5980] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 941.008751][ T5980] usb 1-1: config 0 has no interface number 0 [ 941.015486][ T24] usb 3-1: Product: ф [ 941.021062][ T5980] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 941.033319][ T24] usb 3-1: Manufacturer: 洅荬죚虦澓뜅઼좰螵툿崯폨믏纖⁰貒⚡ᑃሣ郎垢邢貣謳峮嶄佉欩▯鏼囈ꁍᅕꎤ쿿㋡劉ࡊ鹏㷵䘿튧 [ 941.050534][ T24] usb 3-1: SerialNumber: 썦쵌﹗碕楆﹮䈙〿펦᭯苑韋䜿ᐣ撁ᛠ摳鶉䣃ᑣⰬ둃ᛙ⁾슭쓗먖ᩢ贃번猦㛹ღᭂ龬狕拓遀詂槩〈衫橄⌉漵ꦅ믷劰栎뭠씪 [ 941.072701][ T5980] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 941.082247][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.090504][ T5980] usb 1-1: Product: syz [ 941.096266][ T5980] usb 1-1: Manufacturer: syz [ 941.106666][ T5980] usb 1-1: SerialNumber: syz [ 941.111602][T17722] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 941.141446][ T5980] usb 1-1: config 0 descriptor?? [ 941.155043][T17730] vlan3: entered promiscuous mode [ 941.203733][ T5980] mvusb_mdio 1-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 941.292780][T17733] futex_wake_op: syz.1.3086 tries to shift op by 32; fix this program [ 941.403909][T17733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3086'. [ 941.440226][T11543] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 941.445141][ T24] option 3-1:244.29: GSM modem (1-port) converter detected [ 941.460786][ T5912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.485192][T16595] usb 1-1: USB disconnect, device number 74 [ 941.493520][ T24] usb 3-1: USB disconnect, device number 81 [ 941.498792][ T5912] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 941.516085][T11543] usb 5-1: device descriptor read/8, error -71 [ 941.533757][ T5912] usb 6-1: can't read configurations, error -71 [ 941.560937][ T24] option 3-1:244.29: device disconnected [ 941.764412][T11543] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 941.795593][T11543] usb 5-1: device descriptor read/8, error -71 [ 941.917393][T11543] usb usb5-port1: unable to enumerate USB device [ 942.044899][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 942.684178][ T5912] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 942.784486][T17757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3095'. [ 942.857470][ T5912] usb 6-1: Invalid ep0 maxpacket: 32 [ 942.869353][ T5912] usb usb6-port1: attempt power cycle [ 942.870275][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3095'. [ 943.168171][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'. [ 943.294117][ T5912] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 943.315802][ T5912] usb 6-1: Invalid ep0 maxpacket: 32 [ 943.360908][T17771] bridge0: port 3(veth0_to_bridge) entered blocking state [ 943.378716][T17771] bridge0: port 3(veth0_to_bridge) entered disabled state [ 943.390163][T17771] veth0_to_bridge: entered allmulticast mode [ 943.399592][T17771] veth0_to_bridge: entered promiscuous mode [ 943.407452][T17771] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 943.442275][T17771] bridge0: port 3(veth0_to_bridge) entered blocking state [ 943.449584][T17771] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 943.457931][ T5912] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 943.496566][ T5912] usb 6-1: Invalid ep0 maxpacket: 32 [ 943.522137][ T5912] usb usb6-port1: unable to enumerate USB device [ 944.464464][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 944.625903][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 944.636421][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.695477][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 944.707403][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 944.724165][ T24] usb 1-1: Product: syz [ 944.737326][ T24] usb 1-1: Manufacturer: syz [ 944.745406][ T24] usb 1-1: SerialNumber: syz [ 944.771499][ T24] usb 1-1: config 0 descriptor?? [ 944.793494][ T24] usb 1-1: selecting invalid altsetting 0 [ 945.010676][ T24] usb 1-1: USB disconnect, device number 75 [ 945.251561][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 945.264326][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3106'. [ 945.727816][ T5980] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 945.860999][T17804] netlink: 'syz.0.3109': attribute type 3 has an invalid length. [ 946.026751][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 946.067137][T17798] vlan3: entered promiscuous mode [ 946.305330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.317953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.330336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.342736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.355073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.367444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.379852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.392232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.404597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.416975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 950.165454][T17090] Bluetooth: hci0: command 0x0419 tx timeout [ 950.283994][ C0] sched: DL replenish lagged too much [ 951.314054][ C1] net_ratelimit: 12535 callbacks suppressed [ 951.314076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.332385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.344762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.357163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 951.369648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.382039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.394459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.406893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 951.419368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.432126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.629387][ T5980] usb 6-1: unable to get BOS descriptor or descriptor too short [ 951.962781][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 951.984059][ T5980] usb 6-1: chopping to 0 config(s) [ 951.989230][ T5980] usb 6-1: can't read configurations, error -32 [ 952.067270][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 955.438825][ T5980] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 956.324219][ C1] net_ratelimit: 12090 callbacks suppressed [ 956.324241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.342623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.355001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.367470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 956.379907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.392443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.404749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.417156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 956.429573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.442106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.324902][ T5980] usb 6-1: device descriptor read/64, error -32 [ 957.496116][ T5980] usb usb6-port1: attempt power cycle [ 961.334070][ C1] net_ratelimit: 11912 callbacks suppressed [ 961.334091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.352468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 961.364932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.377341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 961.389684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.402184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 961.414600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.426971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 961.439369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.451821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 966.344386][ C1] net_ratelimit: 12696 callbacks suppressed [ 966.344406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.362775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 966.375198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 966.387663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 966.400020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.412394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 966.424738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.437717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.450133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.462565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 966.906157][ T5980] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 967.009309][ T5980] usb 6-1: device descriptor read/8, error -32 [ 971.354687][ C1] net_ratelimit: 10520 callbacks suppressed [ 971.354708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 971.372994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 971.385458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.397819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 971.410279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.422649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.435073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.447523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 971.459936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 971.472230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 976.364342][ C1] net_ratelimit: 11187 callbacks suppressed [ 976.364362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.383279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.395710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 976.408196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 976.420677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 976.433060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.445515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 976.457887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.470304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.482680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.374338][ C1] net_ratelimit: 13241 callbacks suppressed [ 981.374357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 981.392750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 981.405119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.418081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 981.430630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.442841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.455322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.467748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 981.479980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 981.492305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 986.384110][ C1] net_ratelimit: 13070 callbacks suppressed [ 986.384131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 986.402525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 986.414892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.427240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 986.439585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.451943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.464379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.476796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 986.489187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 986.501538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 991.394267][ C1] net_ratelimit: 13414 callbacks suppressed [ 991.394288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.412903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.425340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 991.437790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 991.450225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 991.462634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.475015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 991.487338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 991.499676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.512021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.404331][ C1] net_ratelimit: 14590 callbacks suppressed [ 996.404351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 996.422665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.435331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.447714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.460073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 996.472238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.484587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.496993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.509564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.521993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.414272][ C1] net_ratelimit: 16159 callbacks suppressed [ 1001.414293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.432441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.444881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.457245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.469503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.481908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1001.494428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1001.506860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1001.519219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1001.531928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.424542][ C1] net_ratelimit: 16168 callbacks suppressed [ 1006.424565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.442845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.455217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.467625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1006.480061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1006.492362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1006.504686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1006.517068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.529277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1006.541713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1011.434177][ C1] net_ratelimit: 16429 callbacks suppressed [ 1011.434197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.452530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.464962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.477369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.489838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1011.502084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1011.514463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1011.526841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1011.539173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.552158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1014.833136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1014.850426][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1016.444127][ C1] net_ratelimit: 15018 callbacks suppressed [ 1016.444148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1016.462496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1016.474894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1016.487241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1016.499605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.511946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1016.524428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1016.536732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.549143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.561516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.454040][ C1] net_ratelimit: 9092 callbacks suppressed [ 1021.454059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1021.472405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.484812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.497243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.509718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.524602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.537045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1021.549437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1021.561838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1021.574277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1026.464580][ C1] net_ratelimit: 7804 callbacks suppressed [ 1026.464602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.482809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.495238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.507645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.520166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1026.532705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1026.545578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1026.557941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1026.570324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.582698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.474161][ C1] net_ratelimit: 7856 callbacks suppressed [ 1031.474181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1031.492531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.505087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.517446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.529764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.544729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.557069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.569427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.582027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.594617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.484148][ C1] net_ratelimit: 7802 callbacks suppressed [ 1036.484169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1036.502681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.515070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.527524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.539854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1036.552193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.564541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.576962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.589331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.601963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.494113][ C1] net_ratelimit: 7823 callbacks suppressed [ 1041.494134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.512394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1041.524902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1041.537319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1041.549673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.564693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.577062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.589415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.601761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.614096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.504154][ C1] net_ratelimit: 12394 callbacks suppressed [ 1046.504177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.522555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.534993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.547415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.560025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.572506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1046.585156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1046.597608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1046.610037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1046.623053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.514101][ C1] net_ratelimit: 11277 callbacks suppressed [ 1051.514121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.532412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1051.544803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.557108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.569469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.581834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.594420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.606806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1051.619633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1051.632031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1056.524553][ C1] net_ratelimit: 12671 callbacks suppressed [ 1056.524595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.543079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1056.555506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1056.568117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1056.580536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.592921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.605588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.618161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.630525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1056.642899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.109912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.127497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.534061][ C1] net_ratelimit: 12833 callbacks suppressed [ 1061.534082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.552360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.564702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.577034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.589437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.601728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.614085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.626536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.638877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.651239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.544536][ C1] net_ratelimit: 8039 callbacks suppressed [ 1066.544557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.562969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.575386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1066.587736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.600113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.612661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1066.625059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1066.637393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.649770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.662175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1071.553982][ C1] net_ratelimit: 7821 callbacks suppressed [ 1071.554002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.572316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.584924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1071.597397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.609724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.624159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.636564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.648987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1071.661359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.673812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.564608][ C1] net_ratelimit: 9563 callbacks suppressed [ 1076.564629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.582950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.595293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.607801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.620127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.632593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.645011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1076.657468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.669880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.682424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1081.574002][ C1] net_ratelimit: 9487 callbacks suppressed [ 1081.574023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1081.592556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1081.604931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.617337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.630042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1081.642259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.654732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.667208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.679448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.691865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.584089][ C1] net_ratelimit: 16057 callbacks suppressed [ 1086.584108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.602583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1086.614932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.627245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.639734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.652097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.664444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.676843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.689035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.701426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.304608][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1091.594189][ C1] net_ratelimit: 16389 callbacks suppressed [ 1091.594208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.612545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.624988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1091.637340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.649831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.662118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.674621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.686965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.699105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.711420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.293938][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1096.300922][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11542/1:b..l [ 1096.309383][ C1] rcu: (detected by 1, t=10502 jiffies, g=115109, q=387 ncpus=2) [ 1096.317215][ C1] task:kworker/0:11 state:R running task stack:20872 pid:11542 tgid:11542 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1096.332237][ C1] Workqueue: mld mld_mca_work [ 1096.336961][ C1] Call Trace: [ 1096.340267][ C1] [ 1096.343214][ C1] __schedule+0x16fd/0x4cf0 [ 1096.347752][ C1] ? unwind_get_return_address_ptr+0x71/0xa0 [ 1096.353771][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1096.359099][ C1] ? __pfx___schedule+0x10/0x10 [ 1096.363982][ C1] ? __switch_to+0xd74/0x1600 [ 1096.368690][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1096.374079][ C1] preempt_schedule_irq+0xb5/0x150 [ 1096.379311][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1096.385076][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1096.390999][ C1] irqentry_exit+0x6f/0x90 [ 1096.395446][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1096.401444][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 1096.406744][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b 44 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1096.426445][ C1] RSP: 0018:ffffc90002f87178 EFLAGS: 00000206 [ 1096.432543][ C1] RAX: b4cb7f3ee9daca00 RBX: 0000000000000000 RCX: b4cb7f3ee9daca00 [ 1096.440645][ C1] RDX: 0000000000000000 RSI: ffffffff8db89ed2 RDI: ffffffff8be2cd80 [ 1096.448640][ C1] RBP: ffffffff8172bae5 R08: 0000000000000000 R09: ffffffff8172bae5 [ 1096.456634][ C1] R10: ffffc90002f87338 R11: ffffffff81ad0fc0 R12: 0000000000000002 [ 1096.464688][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1096.472711][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.477844][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1096.484026][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.489177][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.494310][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1096.499354][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.504489][ C1] unwind_next_frame+0xc2/0x2390 [ 1096.509446][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.514568][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1096.519714][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1096.525498][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1096.531696][ C1] arch_stack_walk+0x11c/0x150 [ 1096.536501][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1096.541558][ C1] stack_trace_save+0x9c/0xe0 [ 1096.546261][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1096.551667][ C1] save_stack+0xf5/0x1f0 [ 1096.555934][ C1] ? __pfx_save_stack+0x10/0x10 [ 1096.560832][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 1096.566136][ C1] ? __put_partials+0x161/0x1c0 [ 1096.571002][ C1] ? put_cpu_partial+0x17c/0x250 [ 1096.575956][ C1] ? __slab_free+0x2f7/0x400 [ 1096.580577][ C1] ? qlist_free_all+0x97/0x140 [ 1096.585374][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1096.591024][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1096.596080][ C1] ? page_ext_put+0x97/0xc0 [ 1096.600616][ C1] __reset_page_owner+0x71/0x1f0 [ 1096.605589][ C1] __free_frozen_pages+0xc71/0xe70 [ 1096.610825][ C1] __put_partials+0x161/0x1c0 [ 1096.615508][ C1] put_cpu_partial+0x17c/0x250 [ 1096.620297][ C1] ? put_cpu_partial+0x6d/0x250 [ 1096.625658][ C1] __slab_free+0x2f7/0x400 [ 1096.630135][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1096.636582][ C1] ? __phys_addr+0xd3/0x180 [ 1096.641133][ C1] qlist_free_all+0x97/0x140 [ 1096.645754][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1096.651238][ C1] __kasan_slab_alloc+0x22/0x80 [ 1096.656202][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1096.662116][ C1] ? __alloc_skb+0x112/0x2d0 [ 1096.666715][ C1] __alloc_skb+0x112/0x2d0 [ 1096.671251][ C1] igmp6_send+0x162/0x11e0 [ 1096.675687][ C1] ? __mutex_lock+0x330/0xe80 [ 1096.680388][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1096.685439][ C1] ? look_up_lock_class+0x74/0x170 [ 1096.690588][ C1] ? __pfx_igmp6_send+0x10/0x10 [ 1096.695462][ C1] ? mld_mca_work+0x52/0x440 [ 1096.700085][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1096.705162][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.710931][ C1] mld_mca_work+0x2a2/0x440 [ 1096.715462][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1096.721212][ C1] process_scheduled_works+0xade/0x17b0 [ 1096.726898][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1096.732914][ C1] worker_thread+0x8a0/0xda0 [ 1096.737556][ C1] kthread+0x711/0x8a0 [ 1096.741657][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1096.746788][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.751410][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1096.756639][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1096.761853][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.766449][ C1] ret_from_fork+0x3fc/0x770 [ 1096.771101][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1096.776239][ C1] ? __switch_to_asm+0x39/0x70 [ 1096.781026][ C1] ? __switch_to_asm+0x33/0x70 [ 1096.785812][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.790426][ C1] ret_from_fork_asm+0x1a/0x30 [ 1096.795273][ C1] [ 1096.798302][ C1] rcu: rcu_preempt kthread starved for 2343 jiffies! g115109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1096.809707][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1096.819687][ C1] rcu: RCU grace-period kthread stack dump: [ 1096.825591][ C1] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1096.839109][ C1] Call Trace: [ 1096.842411][ C1] [ 1096.845360][ C1] __schedule+0x16fd/0x4cf0 [ 1096.849900][ C1] ? schedule+0x165/0x360 [ 1096.854251][ C1] ? __pfx___schedule+0x10/0x10 [ 1096.859123][ C1] ? schedule+0x91/0x360 [ 1096.863356][ C1] schedule+0x165/0x360 [ 1096.867516][ C1] schedule_timeout+0x12b/0x270 [ 1096.872386][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1096.877773][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1096.883774][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1096.889087][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1096.894667][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1096.899580][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1096.905770][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1096.911074][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1096.916326][ C1] ? finish_swait+0xcd/0x1f0 [ 1096.920966][ C1] rcu_gp_kthread+0x99/0x390 [ 1096.925590][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1096.930826][ C1] ? __kthread_parkme+0x7b/0x200 [ 1096.935806][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1096.940875][ C1] kthread+0x711/0x8a0 [ 1096.944989][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1096.950286][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.954987][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1096.960248][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1096.965451][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.970156][ C1] ret_from_fork+0x3fc/0x770 [ 1096.974849][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1096.980002][ C1] ? __switch_to_asm+0x39/0x70 [ 1096.984791][ C1] ? __switch_to_asm+0x33/0x70 [ 1096.989569][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.994191][ C1] ret_from_fork_asm+0x1a/0x30 [ 1096.998992][ C1] [ 1097.002021][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1097.008375][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1097.013608][ C0] NMI backtrace for cpu 0 [ 1097.013624][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 1097.013643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1097.013653][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1097.013678][ C0] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 0e 16 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1097.013691][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1097.013706][ C0] RAX: 80081865e9056900 RBX: ffffffff81977a68 RCX: 80081865e9056900 [ 1097.013718][ C0] RDX: 0000000000000001 RSI: ffffffff8d99bc45 RDI: ffffffff8be2cd80 [ 1097.013728][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1097.013740][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa206f0 [ 1097.013752][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1097.013763][ C0] FS: 0000000000000000(0000) GS:ffff888125c07000(0000) knlGS:0000000000000000 [ 1097.013775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1097.013786][ C0] CR2: 00007fec6a400218 CR3: 000000005c026000 CR4: 00000000003526f0 [ 1097.013800][ C0] Call Trace: [ 1097.013807][ C0] [ 1097.013814][ C0] default_idle+0x13/0x20 [ 1097.013828][ C0] default_idle_call+0x74/0xb0 [ 1097.013842][ C0] do_idle+0x1e8/0x510 [ 1097.013859][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1097.013881][ C0] ? __pfx_do_idle+0x10/0x10 [ 1097.013904][ C0] ? do_idle+0x4ec/0x510 [ 1097.013922][ C0] cpu_startup_entry+0x44/0x60 [ 1097.013938][ C0] rest_init+0x2de/0x300 [ 1097.013952][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1097.013974][ C0] start_kernel+0x47d/0x500 [ 1097.013993][ C0] x86_64_start_reservations+0x24/0x30 [ 1097.014013][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1097.014033][ C0] common_startup_64+0x13e/0x147 [ 1097.014059][ C0] [ 1097.015140][ C1] net_ratelimit: 15347 callbacks suppressed [ 1097.015156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.225321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1097.237736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1097.250094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.262426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.274813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1097.287189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.299431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.312000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.324355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.024025][ C1] net_ratelimit: 15604 callbacks suppressed [ 1102.024047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1102.042607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.054978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.067824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1102.080410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1102.092631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.105041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.117441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:a8:75:47:2a:95, vlan:0) [ 1102.129660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.141956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)