last executing test programs: 7.89168474s ago: executing program 1 (id=2879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280)="7feee529d84faf1c99e2a6dd6f7a7d03cfcc34b88c0812907786753db2a0d73a4043b7582764e485028b0263a7da9b80fdeecdd894f3001bca9cbc6478accfbd3314a8aebfb552a60a0ffc61002357a600190186eaba0608e53b9ac4bb77ec1b859a86e2431decd8826ed6d8a8d2827f54921f3fdc5b5b19f77bb468cceb65f6b632e97a68f0e9d85831e1173e427f54cfcf4ea4c31a319d3c3bdd3ba654030d5289bc1a44aef1526394463b843aca725d551b51310b5812dc17f513a5ffdf003779c85ce1f7516270cf7951307d7bb56cda8dd6de4eebfcdde08df44af6350d3ae95c95eb25af9bd54427", 0xeb, r0}, 0x68) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4020, 0x30}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0x6, 0xa766913b}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 7.500931792s ago: executing program 3 (id=2881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r0, 0x91c6b000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0xb21}, {0x0}], 0x2}}], 0x1, 0x4008000) (fail_nth: 4) 7.07215001s ago: executing program 3 (id=2884): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00"], 0x64}, 0x1, 0x0, 0x0, 0x14000880}, 0x40080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x300}]}}}]}, 0x50}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000540)="b9800000c00f3235000100000f30f00fbaa89c6300000066baf80cb878c1368cef66bafc0cedb8630000000f23d00f21f835100000040f23f8640fa52366b80c010f00d865360fc73bb9d00b0000b80f000000ba000000800f300f01ca260f01c9", 0xfffffffffffffe55}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6.928677297s ago: executing program 1 (id=2885): setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 6.655914238s ago: executing program 1 (id=2887): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x96, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x20, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009b80)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r3, 0x0, 0x460e, 0x3) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x28, {0x7, 0x2b, 0x4, 0x4a420200, 0x7, 0x1ff, 0xb5, 0xa, 0x0, 0x0, 0x100, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000007c0)={0x2, 0x7, 0x101}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0xf5, {0xf5, 0x5, "97978ac8994c98f398dcc1c9ff0b353c925e3410c42500d0f3680c2e9805d1b8d77d479f751278799228272987f795c4202d75c86ec1cfc10caee39500b73de7e7e5ff13a936be8f06dfa5bc13ea30718681523393004d56fe4a3288c017f897b10ef8969b097f170c4d5b8b719503d40fa6d0baa05b7c2ae107252e099923fe3b06ce23706492a6fcf45b8e493da572e641255831b870058c9c00bbafedc48b6904719c9a42c25780dcd9b219a376cb8a569df20a86e4f12a9a34c2c0d5e9bccb75cadf85dc8ce864ed2d6f258f3762e9dbca630bacc47dcf58d80303402985a4713a974a8adae96fb79f21b5fc33bd155e5e"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="0003d8e3004d04033f04"], &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x1, 0x6, "ff35f6cb", "8b3fad35"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x80, 0x7, 0x5, 0xb, 0x5, 0xff}}}, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="00fa4d61b47f6f32f8d8587a87f805248513024f0caa00dd4278c7"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xeb}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xdb}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "ea82"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'cV'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x2}}) 6.563457399s ago: executing program 3 (id=2888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1, 0x0, 0x0, 0x1000000}, 0xff8d) 6.417339438s ago: executing program 3 (id=2889): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x40002717, 0x0, &(0x7f0000000000)=0xfffffffffffffeeb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000540)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x438, 0x3f4, 0x100, 0x70bd2d, 0x25dfdbfe, {0x5, 0x2, 0x21, [0x7, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1000, 0x800, 0xde4, 0x8, 0x1, 0x2, 0xe2a, 0x1, 0xd, 0x3adc, 0x800, 0x1ffe0000, 0x8, 0x0, 0x9, 0x7ff, 0x80000001, 0x0, 0x4, 0x15, 0x5, 0x6, 0x2, 0x689, 0x4, 0x7, 0xffffffff, 0xfb, 0x9, 0xfffffc01, 0x7fff, 0x401, 0x5, 0xfffffe2f, 0x100, 0x1, 0x3, 0x0, 0x7f, 0x70000000, 0x7, 0x7fff, 0x6, 0x3, 0x2, 0x5, 0x7, 0xc05, 0xfffffff8, 0x1020, 0xc, 0x10001, 0x3, 0x7, 0x7f, 0xe70, 0x1, 0x2], [0xe, 0x0, 0x7, 0x8001, 0xb0, 0x9, 0xfffffbff, 0x401, 0x200, 0x5, 0x5, 0x7, 0x4, 0xfffffff8, 0x2, 0x9, 0x6, 0x5, 0x39b7, 0x9, 0x734, 0x40, 0x4, 0x1, 0x40, 0x7, 0xd7e4, 0x80000000, 0x8000, 0x8, 0x2, 0x7fa8, 0x7fff, 0xe, 0xae2, 0xffffffff, 0xc, 0x6, 0x6, 0x4, 0xcdf9, 0x3, 0x3, 0x4b000000, 0x8f, 0x101, 0x7fff, 0x8, 0x8001, 0xffffffff, 0x7, 0x8000, 0x80000001, 0x0, 0x5, 0xff, 0xb, 0xfffffff9, 0x6, 0x8, 0x6, 0x8, 0x9445, 0x9], [0x6, 0x805, 0x6, 0x8, 0x3, 0x7, 0x2, 0x2, 0x7, 0x2, 0xa5bf, 0x2, 0x400, 0x3, 0xffffffff, 0x80000001, 0x101, 0x5, 0x7acc, 0xdd1, 0x4, 0xe, 0x80000000, 0x6, 0x1, 0x2, 0x5, 0x5, 0x8000, 0x6, 0x4, 0x9, 0x1, 0x7f, 0x5, 0xfffffffe, 0x7, 0x8, 0xc5, 0x6, 0x9a4, 0x9, 0x7f, 0x6, 0x0, 0x5, 0x800, 0x6, 0x3, 0x1, 0x5, 0x7fff, 0x9, 0x8, 0xffffff80, 0x80, 0x5b2f, 0x7, 0x80000, 0x0, 0xfffffffd, 0xa, 0x0, 0x4], [0x5, 0x10001, 0xe908, 0x4, 0x400, 0x3c2f, 0xa0f3, 0x10, 0x5, 0x7, 0x8, 0xfffffffe, 0x7fffffff, 0x3, 0x9, 0xffffffff, 0x8, 0xffffffff, 0x1, 0x10000, 0x3, 0x9, 0x7, 0x14000, 0x5, 0xac, 0x3dc8, 0x7, 0x8001, 0x7ff, 0xc7ce, 0xffffffff, 0x6, 0xfffffffb, 0x3, 0xa3, 0x5, 0x6fc1, 0x7fffffff, 0x9, 0x1, 0xd, 0xfffffffd, 0x2f, 0x4, 0xa779, 0x7f, 0x5, 0x400, 0x4, 0x8, 0xc8b7, 0x1000, 0x1df, 0x58, 0x6eb, 0x7, 0x800, 0x6, 0x10001, 0x0, 0x5, 0x6, 0x8], 0x18, ['syz1\x00', '\x00', 'syz0\x00', '\\(\x00', 'syz1\x00', '@Q\x00', '+\x00']}, ["", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="18005a801400038005000700010000000500060023"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x8002, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffcbb, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xeaa1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x3520, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1000000000002, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2000000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000000000000000, 0x9, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3, 0x400000000000, 0xfffffffffffffff9, 0x0, 0x3, 0x0, 0x0, 0x80000000000000]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r8, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0) 6.200633699s ago: executing program 3 (id=2891): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) (async) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$sock(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="91c41c647991a627770f0ee1567051bb37d084e3538fcfecc2ee1e34bbccb819878fa92900183601f1dc73093075b5d4d300e5b6a7233ab5ed64f14af8deacb5c28abd97e81e33ee9c0e743d7fff97daf9af2061b3e7664f930c97b647e087330abad87eebd6c6260d6fe60421ffcc4b4166c3c03a680d4e30633ca1e9f3e8207a9072c42cbd04a7cbf2387afd43f79c8d312c45f469c108ca18e730e204cfeab29e3b35471c9165274b1a6c7e5f5a9da351443b9a61c49043f7f24c31ebfb3e6f31ea2129506611199f4c5ebc19f165cdf75edc2d666f989833e1c839d358c4051489862ce33250523a4edb9c01bfd4c19f86e421c0427e05608802fc23a6d5d3f13f0cae0019de54089b533d01d6953dcc5a8bf6c5b91e58f1ec9a90a51aa2babe3a16fa8740fc81e346194fb0cf3d7e89e9aa33be2c9a3e3838f4d9753a755d691e9853ca61844ba7bd404cb8b9baa70fa6e7c05f9b057b51c4b29373a42adecd0283b60ff77112ad35dfaa9e5be2c8fb5de9debc520c5f99e1e2cdb63cda38b1999f2db2a9f76771841f3cc49e3b528c600b23ea110dde81d8bc61fcc1beb8954204886a6d9d0184a13b8b8125ba60b60d598baa816b55bcba4aeffeb3445c1f2ee0b39d8a2b2ffa80badf3c0ebd93407b5870809f1d8a80518525fd318d2be019c24d3aff86210b526ae1a3d30f5eda137886b7187acf88f15fccf9ecb9344aaca42093c00a12f1717ea9b2cab3aaf21c15fdf893a3ad05e7437e565961fb6b0b3b4795bd48e722ca89a2497f26e452ad7d8c3298392cf516e7c83366d1d02f868ffd9a0aa0e4053855c596f50e9b6c3572692fe491b2446ae6376c824a7ec4731f79678613158a321a23e42edbfb63b0561386fcb95f30e2f1ac62b8e27272255e0115bd44e8d3a31258838b0fdb1d6841c36767965c59bc7dfde97961c50f24482a57d8ad1b52be58bbf9d7ba6ed9f6f5ebeeb900aa993ae91b13b530753834f83052d18eda3bc0db4abc4af4aa20df6848c0ebbb8e6b9c69adc75d894d0505a71574276b10c2fb4ec91d9abebe58260d2b0f43ca9e093c346eb08d86ae9a0f5a95181d3fc5eaf570be2796900b79854606e4240401053ea36aa4f039e5951346666309ac42fa63a35d6fbb27595a4738a1b72d557cc9ea035dfa0e853a6ed8d961be83eb747ad0b2e8880727715614a7503f180f016d0734786c6cc800da79e372820e39994d98a7e70d01bf17d85069e53286de040125c2c03d87e89a367aabde53827d9da64a31a17ba0376c5b1c581c2daffc7d20c87c8792f8e879f9b6bb0b24ecb33d1a990836b6a321706cf7e4a8c65c54fee00552cb5f23b687715cad05e260ccaee078e48877f57d2cd22213b4825e3127bc1e8e92869682a644bf0c1bf1b7532d138ad82d4c03b015ad112992268106ece97f5c4b8adb5254005cae7899ad444e4044c8b6946bee3cbbf39b05168372fb7f34e46f726bf3af395938e4901054ff81bf1de07961847a61ed84c60681942d948089a18efce607721c9573a13d4f61cf34cca6300a6d604de75f907938537465d99dacd5423c721dfb343b11492a0173ecb1e7432016ba1cf077dc0625bc3e809116fd406ffd2b231397fea27b6e01cf8bc80c40646b3b47b406dd778daf72b38d1264074d7167f3ea19f327cd9401b5758e137da19355ae6c1febf0b59ef8a800d074b80121e6e38c704c2fd972df31fb2837f93b1f1938c87033019cbffc90d12447405a67ef5130232972c74705cace76111d9572a00e858274828713ace99188c1a7adc9c03af63b806bd49d59aa413a5523454a2b4bf6479d319957de882960db6bc5e02771b423eed7a55eaebc5b7ea0b96616138fa2a1f9cf4c9ebf9beb6de53d02af8a800903f8ee71925728e249a63b4dbb3f2d7f48a5b76bdc589d03a27d34b6b80770a87c77adb8fd3d69d598c442654db5f864011960154b303f165655d87d06acce6257dbe6b268b6a224ef85b968c857735cb54e2cf8f837ebd2e8c21bc59eda132116c56163012a4366769b6c2fbec77b9b3b590b37cf0109eaeefa7f45a16ece92dfa2fa294eeb904fe7de767818fa364d71a3d20ede7404f3bb66be", 0x5de}], 0x1}, 0x90) (async) sendmsg$sock(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x3ff, &(0x7f0000000500)) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r6) 5.663292617s ago: executing program 0 (id=2895): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x71f3a07c708ddbed, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000fca55d8bce6c6511000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000094) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="240000002000032cbd7000ffdbdf25020000000000001810000000050016002c00000000"], 0x24}}, 0x20048890) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) pipe(&(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0xfea000, 0x2000402) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001040000000000000000ff0f0000", @ANYRES32=0x0, @ANYBLOB="7b130000000000002c0012800900010069706970000000001c000280060011004e24000006001000010400000500090004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) 4.63782914s ago: executing program 3 (id=2899): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @empty, 0xafb1}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0xd8010000, 0x0, 0x20008000}, 0x30) 3.812625969s ago: executing program 4 (id=2907): socket$packet(0x11, 0x2, 0x300) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d686dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.753388315s ago: executing program 0 (id=2908): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x15) r4 = syz_io_uring_setup(0x4c57, 0x0, &(0x7f0000000400), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000004c0)=[0x8, 0x10], 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/133, 0x85}], 0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000500)) io_setup(0x0, &(0x7f0000000300)=0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_cancel(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0xc1, r1, &(0x7f0000000a80)="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", 0x1000, 0x1000, 0x0, 0x3, r4}, &(0x7f0000000600)) connect(r1, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x1}}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x181, 0x0, &(0x7f0000000340)="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", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}, 0x1, 0x0, 0x3a00}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r9, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.832859189s ago: executing program 1 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) r1 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200c40, 0x62) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timerfd_gettime(r2, 0x0) r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) ptrace$setregs(0xd, r3, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="c39193ee5852b337de91228e06e6591e00c70119d4792bee39934360beef915d01800000200002000000000000007c9722046d8bc7df9da347c15c731215d7b695b29bc85ac5828d8793d63ecda80cbb57c00edd0b4c0000000000000000000000fa3f87a82a029212e5be5a40e67187ea683d3ec8fce4d9330a8c", 0x7b) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)=""/97, 0x6}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f0000000e80)=""/16, 0x10}], 0x4}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000000)=0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)) 2.681268029s ago: executing program 2 (id=2914): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) 2.588101105s ago: executing program 2 (id=2915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3545, 0xa, 0x2, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e32, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000540)=[0x0]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='P', 0x1}], 0x1}}], 0x1, 0x1) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.365618711s ago: executing program 2 (id=2916): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="a28bdbd53fa214050c08eb545a4de9aa15b36f1ff44f92764024311cde5149dec8fb0f09d4ed34cefa39fbd5583b24e871c5656fceb499e2c04637ca5b9bd1969c0d37b9ac8d4e139e79dd698a7cd9afbe266b98585c85db65a91723161f7e2f0d612b0e6a", 0x65}, {&(0x7f00000004c0)="5fbe7b882b5f3ea28615c65bf394d986acc202c10be6f2dea583e3fcca60fe79b9fab8b817e03d76d1f649906a53f0de1a50ae1e8e55049a1f7f1e0f3b75c4cd69", 0x41}, {&(0x7f00000005c0)="ade5a34e97108380b646410c655a3254238ab9d3eceb8670e0b8f301664bc0d13f9e6faf6e42694781fa2f98d21b6c8b30fc2ffe349afbb2f734524be115587d7247180d4960fdec9bb561f6b7c123060d13facfdb08c579131c6c64a7ffc13ba95cc463a2b217cafbef429039699962f700412c6a0d1cb9e91de0e919eba7128c3085c4125fd623005551d63f41deb8998ec12d0ff4f6a55dbf8a98d161f9fdc8591a4c7f5ef3a70f23eea475c3daf53608c182dfaed742013147792353bb9a959d1e781316f37228a1", 0xca}], 0x3, &(0x7f00000006c0), 0x0, 0x880}}], 0x1, 0x10) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x20, 0x8, 0x91, 0x9, 0x80000001, 0x8000000, "88ee9fdb45ada97dd28bc7af929edb66bbd02e523d043bf43903fe740b612ae9"}}, 0x138) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) llistxattr(&(0x7f0000000780)='./file0\x00', &(0x7f0000001dc0)=""/4096, 0x1000) (async) llistxattr(&(0x7f0000000780)='./file0\x00', &(0x7f0000001dc0)=""/4096, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000004c0)={0x0, 0x1, &(0x7f00000006c0), &(0x7f00000003c0)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000007ffc, 0xe, 0x4, 0x4, 0xa, 0x1000, 0xd35, 0x0, 0x7ffffeffffffb, 0x5, 0x8000000000000001, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xbde], 0x2, 0x3c4210}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000007ffc, 0xe, 0x4, 0x4, 0xa, 0x1000, 0xd35, 0x0, 0x7ffffeffffffb, 0x5, 0x8000000000000001, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xbde], 0x2, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2"], 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x41e, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x480, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@remote, @in=@private, 0x4e23, 0x1, 0x4e22}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x6}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000740)={0x2, {0x2, 0x1, 0x5, 0xffff, 0x9, 0x2}}) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x19, 0x5, "cc7d45a830efb0d768d9ebf448ed12827187fff9e30891461936f6c9443071699b6cc1d4930d977bfb9ee244edf316283c1a3a8ebc23bb56fefdd1c5654ceb2d", "1882d2ec7eba2ea433ba8d94b01659b5398b86944d235d40735c592ec6fca9b0", [0x5, 0x80000000]}) (async) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x19, 0x5, "cc7d45a830efb0d768d9ebf448ed12827187fff9e30891461936f6c9443071699b6cc1d4930d977bfb9ee244edf316283c1a3a8ebc23bb56fefdd1c5654ceb2d", "1882d2ec7eba2ea433ba8d94b01659b5398b86944d235d40735c592ec6fca9b0", [0x5, 0x80000000]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x2, 'veth1_to_bridge\x00', {0x2}, 0x5}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e1004e"]) 1.559509926s ago: executing program 1 (id=2917): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) (async) exit(0xbfd8) (async) getdents64(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x0, 0x5, 0xee, {0xee, 0x22, "effe3a99ac73de219366d80962acf44558b9dcca6e0daf4d20009e7a55499f0663417481078c5fb49df52d144fb1504b0d4edc695bea52f2a5212733af577c1ea52ea0823acdb54cac5c2f2efe84f361ef9105be751e70f9d94a57fe8e1ac02cbe9a0b7044971ba6838dbffa0f3cdfd35d7aaccd22ee57be7f6f3e137d6ff1fa7052d36a55e08855fdded2fa02b1560b14315e1c8f7356ca4e1378f7a2aae36353721c801bf116cfd31da34f6cd3d6acef34cb882ea28c895b70c126b6e50e8b241c64794726ddd960465a7639253b736930a5792db64d2d12d89c2a5ee2e0b694b11fecd7287bd6aab99d9a"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x77, "691cee484c6b6c7c40b53061c59d634f3fdc64b806e22bf08513efa6c93acdfcaf5bca6f46672a0fdbbccfc3865c36d899b13741959bf3e280df0e03476da88dc79b89c6aefcc70e1bedf1af19381be80551a71866277b52ff6c88426b917dc93cec89016a0bb132f1eea92e530a98252dd4f95191a766"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x86}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x97}}) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x89, @string={0x89, 0x3, "6d91bb71cc6586907984042ad17d02d68fbaa6744b9d296c5ca38474066789518dd75f5eeb0d3165a1fccff42b3015cb3d0730e9499d456afb3258f089477673547efeab1536207b4c8e3692b16c06de8cdf36951866b2683e2c651a5c0940335bdcc6c660e9eb5840939048a1c6cc0defffcd8a6a1ffbf4c1fefc7c30e296770431af932c9af2"}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000540)={0x20, 0x15, 0x34, "b35d6a346a3a28b5b1969a9de872b64efe5f30e8dd14e7fa97504b57ddb507cad2b34c17c23d3eaa04b21254cbac3bb1318967f7"}, &(0x7f0000000580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000009c0)={0x21, 0x0, 0x3, "583789"}}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40043d0d, 0x0) (async) r3 = syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES16=r2], 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x6f4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e40)={r5, 0x3, 0x6}) 1.26537288s ago: executing program 4 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x20000, 0x601, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 793.499789ms ago: executing program 1 (id=2919): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280)="7feee529d84faf1c99e2a6dd6f7a7d03cfcc34b88c0812907786753db2a0d73a4043b7582764e485028b0263a7da9b80fdeecdd894f3001bca9cbc6478accfbd3314a8aebfb552a60a0ffc61002357a600190186eaba0608e53b9ac4bb77ec1b859a86e2431decd8826ed6d8a8d2827f54921f3fdc5b5b19f77bb468cceb65f6b632e97a68f0e9d85831e1173e427f54cfcf4ea4c31a319d3c3bdd3ba654030d5289bc1a44aef1526394463b843aca725d551b51310b5812dc17f513a5ffdf003779c85ce1f7516270cf7951307d7bb56cda8dd6de4eebfcdde08df44af6350d3ae95c95eb25af9bd54427", 0xeb, r0}, 0x68) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4020, 0x30}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0x6, 0xa766913b}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 524.772435ms ago: executing program 0 (id=2920): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffff9}}, 0x10) 427.287159ms ago: executing program 0 (id=2921): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2b0, 0x0, 0x2b0, 0x380, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x800000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xb}, @ipv6=@remote, 0x3a, 0x1, 0x4}}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x4000000, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 411.944704ms ago: executing program 4 (id=2922): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc0014000300069906000000153f0500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 268.240636ms ago: executing program 2 (id=2923): socket$kcm(0x10, 0x400000002, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, 0x0) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, r5, 0x0, 0x0], 0x0, 0x5}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$binfmt_script(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xc, 0x8, 0x7fff, 0x2, 0x7, 0x7f, 0x20000006, 0x0, 0x6, 0x5f, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x1, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf28e, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x5fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0xad1, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x800006, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x10000, 0x0, 0x4, 0x5, 0xfffffffe, 0xfe, 0x1, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3040, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x100, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0xe, 0xe5d, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x200, 0x2006, 0x80a2ed, 0x100, 0x800], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x80000001, 0xb9, 0xce8, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60aa, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x813, 0xa1f, 0xf43, 0x6, 0xb3, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010007ff0000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff070000080010000700020008000f"], 0x54}}, 0x0) 266.349964ms ago: executing program 4 (id=2924): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) 256.114118ms ago: executing program 0 (id=2925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3545, 0xa, 0x2, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e32, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000540)=[0x0]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='P', 0x1}], 0x1}}], 0x1, 0x1) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0), 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 116.269966ms ago: executing program 4 (id=2926): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181701, 0x0) r0 = socket(0x1f, 0xa, 0xdea) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x2}}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x3}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r4, 0x400454cd, 0x305) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x28, r6, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x28}}, 0x40000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x40800) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 82.208946ms ago: executing program 0 (id=2927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d000000060000000400000018090600", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98848cd14e9a88d4ea84136ad1b0fa"], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sigaltstack(&(0x7f0000001640)={&(0x7f0000000640)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(&(0x7f00000026c0)={0x0, 0x80000003}, &(0x7f0000003700)={0x0}) io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xb, 0x164}) 0s ago: executing program 2 (id=2928): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x40580) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = add_key$fscrypt_v1(&(0x7f0000002e40), &(0x7f0000002e80)={'fscrypt:', @desc4}, &(0x7f0000002ec0)={0x0, "ea3d44c1153597ed27b8123fae53940b4ead6634607d5d6a4e20bacc9458a97062e2819310bd0b759212f0d12845896e21c15479910adfa38266dabe453348ed", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x74) fchdir(r3) close(r3) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) creat(0x0, 0x96ab9c7d55edd554) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r10, @ANYRES8=r1, @ANYBLOB="3e004c070a000200aa", @ANYRES8=r9], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0xffffffffffffffd7) kernel console output (not intermixed with test programs): services, check your ipvs configuration [ 477.787804][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.020619][T13363] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 478.057839][T13363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.094544][T13363] bond2: (slave ip6erspan0): making interface the new active one [ 478.104072][T13363] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 478.317157][T13371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.337957][T13371] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2520'. [ 478.348242][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.362202][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.430812][ T5907] usb 5-1: USB disconnect, device number 64 [ 479.664996][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.691701][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 479.911655][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 479.944051][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 479.983787][ T9] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 480.020934][ T9] usb 4-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 480.052167][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.105074][ T9] usb 4-1: Product: syz [ 480.109255][ T9] usb 4-1: Manufacturer: syz [ 480.152482][ T9] usb 4-1: SerialNumber: syz [ 480.263242][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.496596][T13429] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2536'. [ 481.517505][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 481.533774][T13429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2536'. [ 481.942217][T13433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.962286][T13433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2537'. [ 482.610013][ T9] usb 4-1: USB disconnect, device number 94 [ 483.090070][T13440] sctp: [Deprecated]: syz.2.2540 (pid 13440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.090070][T13440] Use struct sctp_sack_info instead [ 483.145507][T13439] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 483.462311][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.474044][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.486293][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.538959][T13452] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 483.815595][T13464] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2548'. [ 484.022238][ T5876] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 484.103902][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.161616][ T5876] usb 4-1: device descriptor read/64, error -71 [ 484.381114][T13476] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2551'. [ 484.393598][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 484.408111][T13476] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2551'. [ 484.431350][ T5876] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 484.733552][ T5876] usb 4-1: device descriptor read/64, error -71 [ 484.851817][ T5876] usb usb4-port1: attempt power cycle [ 484.901478][T13485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2555'. [ 485.003845][T13485] bond5: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 485.044194][T13485] bond5 (unregistering): Released all slaves [ 485.203781][ T5876] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 485.231998][ T5876] usb 4-1: device descriptor read/8, error -71 [ 485.271591][ T42] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 485.392317][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.427580][ T42] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 485.427619][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.427637][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.427648][ T42] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 485.427663][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.427681][ T42] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 485.427694][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.438234][ T42] usb 2-1: config 0 descriptor?? [ 485.471594][ T5876] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 485.499284][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 485.499302][ T29] audit: type=1326 audit(1773213025.377:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499344][ T29] audit: type=1326 audit(1773213025.377:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499380][ T29] audit: type=1326 audit(1773213025.377:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499417][ T29] audit: type=1326 audit(1773213025.377:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499452][ T29] audit: type=1326 audit(1773213025.377:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499490][ T29] audit: type=1326 audit(1773213025.377:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499526][ T29] audit: type=1326 audit(1773213025.377:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499568][ T29] audit: type=1326 audit(1773213025.377:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499605][ T29] audit: type=1326 audit(1773213025.377:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499649][ T29] audit: type=1326 audit(1773213025.377:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 485.499876][ T5876] usb 4-1: device descriptor read/8, error -71 [ 485.504018][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2558'. [ 485.602227][ T5876] usb usb4-port1: unable to enumerate USB device [ 486.023153][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.097444][T13512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.120958][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 486.127032][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 486.151388][ T42] usb 2-1: USB disconnect, device number 80 [ 486.974352][T13517] FAULT_INJECTION: forcing a failure. [ 486.974352][T13517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.993509][T13517] CPU: 0 UID: 0 PID: 13517 Comm: syz.1.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.993537][T13517] Tainted: [L]=SOFTLOCKUP [ 486.993544][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 486.993556][T13517] Call Trace: [ 486.993563][T13517] [ 486.993569][T13517] dump_stack_lvl+0xe8/0x150 [ 486.993589][T13517] should_fail_ex+0x412/0x560 [ 486.993605][T13517] prepare_alloc_pages+0x22a/0x650 [ 486.993629][T13517] __alloc_frozen_pages_noprof+0x12f/0x380 [ 486.993644][T13517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.993659][T13517] ? __pfx_policy_nodemask+0x10/0x10 [ 486.993674][T13517] ? __lock_acquire+0x6b5/0x2cf0 [ 486.993690][T13517] alloc_pages_mpol+0x232/0x4a0 [ 486.993705][T13517] vma_alloc_folio_noprof+0xea/0x210 [ 486.993719][T13517] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 486.993737][T13517] do_pte_missing+0x1656/0x3490 [ 486.993759][T13517] handle_mm_fault+0x1bec/0x3310 [ 486.993780][T13517] ? handle_mm_fault+0xee/0x3310 [ 486.993798][T13517] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.993813][T13517] ? follow_page_pte+0x841/0x1450 [ 486.993832][T13517] ? __pfx_follow_page_pte+0x10/0x10 [ 486.993852][T13517] __get_user_pages+0x165b/0x29d0 [ 486.993881][T13517] __gup_longterm_locked+0xdcf/0x1630 [ 486.993900][T13517] ? gup_fast_fallback+0x181/0x22e0 [ 486.993914][T13517] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 486.993932][T13517] gup_fast_fallback+0x1d82/0x22e0 [ 486.993959][T13517] ? rcu_is_watching+0x15/0xb0 [ 486.993974][T13517] ? __pfx_gup_fast_fallback+0x10/0x10 [ 486.993989][T13517] ? is_valid_gup_args+0x11f/0x200 [ 486.994004][T13517] ? pin_user_pages_fast+0x4d/0xb0 [ 486.994019][T13517] rds_info_getsockopt+0x20e/0x4a0 [ 486.994036][T13517] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 486.994049][T13517] ? __might_fault+0xaf/0x130 [ 486.994061][T13517] ? rds_getsockopt+0x31d/0x500 [ 486.994075][T13517] ? __pfx_rds_getsockopt+0x10/0x10 [ 486.994091][T13517] do_sock_getsockopt+0x2d3/0x3f0 [ 486.994108][T13517] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 486.994124][T13517] ? __fget_files+0x3a0/0x420 [ 486.994138][T13517] ? __fget_files+0x2a/0x420 [ 486.994155][T13517] __x64_sys_getsockopt+0x1a4/0x240 [ 486.994174][T13517] do_syscall_64+0x14d/0xf80 [ 486.994184][T13517] ? trace_irq_disable+0x3b/0x150 [ 486.994199][T13517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.994221][T13517] ? clear_bhb_loop+0x40/0x90 [ 486.994248][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.994268][T13517] RIP: 0033:0x7feddf39c799 [ 486.994292][T13517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.994311][T13517] RSP: 002b:00007fede0300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 486.994336][T13517] RAX: ffffffffffffffda RBX: 00007feddf615fa0 RCX: 00007feddf39c799 [ 486.994353][T13517] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 486.994366][T13517] RBP: 00007fede0300090 R08: 0000200000000000 R09: 0000000000000000 [ 486.994380][T13517] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 486.994401][T13517] R13: 00007feddf616038 R14: 00007feddf615fa0 R15: 00007feddf73fa48 [ 486.994431][T13517] [ 487.962918][T13538] __nla_validate_parse: 1 callbacks suppressed [ 487.962931][T13538] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2569'. [ 488.028520][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 488.039040][T13537] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2569'. [ 488.176869][T13541] macvlan1: entered promiscuous mode [ 488.209893][T13541] macvlan1: entered allmulticast mode [ 488.234437][T13545] Invalid logical block size (26707) [ 488.250270][T13541] veth1_vlan: entered allmulticast mode [ 488.311150][T13543] netlink: 'syz.3.2572': attribute type 2 has an invalid length. [ 488.651617][ T42] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 488.776771][T13558] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2578'. [ 488.813522][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 488.820440][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 488.828315][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.861631][ T5907] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 488.880116][ T42] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.894636][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 488.913488][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.927757][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 488.941731][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.981656][ T42] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.011603][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.027091][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.043500][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 489.053121][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.071366][ T5907] usb 4-1: not running at top speed; connect to a high speed hub [ 489.099595][T13564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.109879][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.121803][ T5907] usb 4-1: config 4 has an invalid interface number: 236 but max is 0 [ 489.130044][ T5907] usb 4-1: config 4 has no interface number 0 [ 489.145647][T13564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2580'. [ 489.156363][ T5907] usb 4-1: config 4 interface 236 has no altsetting 0 [ 489.163282][ T42] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.175512][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.188625][ T5907] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 489.197866][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.238125][ T42] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.239155][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.248328][ T5907] usb 4-1: Product: syz [ 489.259385][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.263663][ T5907] usb 4-1: Manufacturer: syz [ 489.284233][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.302625][ T42] usb 3-1: string descriptor 0 read error: -22 [ 489.310264][ T42] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.321826][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.337271][ T5907] usb 4-1: SerialNumber: syz [ 489.389453][ T42] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 489.567091][T13548] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 489.567339][ T5907] ums-jumpshot 4-1:4.236: USB Mass Storage device detected [ 489.602012][ T5907] ums-jumpshot 4-1:4.236: Quirks match for vid 05dc pid 0001: 2 [ 489.639867][ T5907] usb 4-1: USB disconnect, device number 99 [ 489.704599][ T5890] usb 3-1: USB disconnect, device number 66 [ 489.760827][T13584] loop2: detected capacity change from 0 to 7 [ 489.775156][T13584] Dev loop2: unable to read RDB block 7 [ 489.789756][T13584] loop2: AHDI p1 p2 [ 489.797127][T13584] loop2: partition table partially beyond EOD, truncated [ 489.817979][T13584] loop2: p1 start 1818582900 is beyond EOD, truncated [ 489.863074][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.502600][ T5890] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 490.509426][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.666649][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.681129][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.710611][ T5890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 490.724844][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.742859][ T5890] usb 3-1: SerialNumber: syz [ 491.076819][ T5890] usb 3-1: 0:2 : does not exist [ 491.142651][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.190405][ T5890] usb 3-1: USB disconnect, device number 67 [ 491.224309][T13623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2600'. [ 491.235633][ T6547] udevd[6547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.491616][ T42] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 491.513357][ T5907] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 491.615447][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 491.651550][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 491.675703][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 491.686615][T13629] veth7: entered promiscuous mode [ 491.689409][ T5907] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 491.709192][T13631] loop2: detected capacity change from 0 to 7 [ 491.717022][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.728101][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 491.739223][ T42] usb 4-1: Product: syz [ 491.741262][T13631] Dev loop2: unable to read RDB block 7 [ 491.743952][ T42] usb 4-1: Manufacturer: syz [ 491.743974][ T42] usb 4-1: SerialNumber: syz [ 491.745651][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.774873][ T42] usb 4-1: config 0 descriptor?? [ 491.791653][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.803409][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.819090][T13631] loop2: AHDI p1 p2 [ 491.819380][ T5907] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 491.835783][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.849362][T13631] loop2: partition table partially beyond EOD, truncated [ 491.860558][T13631] loop2: p1 start 1818582900 is beyond EOD, truncated [ 491.861783][ T5907] usb 1-1: config 0 descriptor?? [ 491.883748][T13634] x_tables: duplicate underflow at hook 1 [ 491.987959][ T42] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 492.131664][ T5890] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 492.196814][ T42] usb write operation failed. (-71) [ 492.208714][ T42] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.219602][ T42] dvbdev: DVB: registering new adapter (Terratec H7) [ 492.226631][ T42] usb 4-1: media controller created [ 492.232665][ T42] usb read operation failed. (-71) [ 492.238415][ T42] usb write operation failed. (-71) [ 492.247029][ T42] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 492.263382][ T42] usb 4-1: USB disconnect, device number 100 [ 492.293747][ T5890] usb 2-1: config 2 has an invalid interface number: 207 but max is 1 [ 492.307263][ T5890] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 492.313630][ T5907] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.001C/input/input57 [ 492.332762][ T5890] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 492.350584][ T5890] usb 2-1: config 2 has no interface number 0 [ 492.357777][ T5890] usb 2-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 492.373102][ T5890] usb 2-1: config 2 interface 207 has no altsetting 0 [ 492.394196][ T5890] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 492.404534][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.413185][ T5890] usb 2-1: Product: syz [ 492.418461][ T5890] usb 2-1: Manufacturer: syz [ 492.426070][ T5890] usb 2-1: SerialNumber: syz [ 492.427942][ T5907] uclogic 0003:28BD:0909.001C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 492.534824][ T5883] usb 1-1: USB disconnect, device number 99 [ 492.638876][ T5890] qmi_wwan 2-1:2.207: skipping garbage [ 492.652732][ T5890] qmi_wwan 2-1:2.207: skipping garbage [ 492.658247][ T5890] qmi_wwan 2-1:2.207: bogus CDC Union: master=0, slave=0 [ 492.675688][ T5890] qmi_wwan 2-1:2.207: probe with driver qmi_wwan failed with error -22 [ 492.691973][ T5890] usb 2-1: USB disconnect, device number 81 [ 492.851744][ T5907] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 492.861940][T13643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.876909][T13643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2608'. [ 493.023458][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.060561][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.093367][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.110645][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.138572][ T5907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.223021][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.258355][ T5907] usb 3-1: config 0 descriptor?? [ 493.351143][T13653] FAULT_INJECTION: forcing a failure. [ 493.351143][T13653] name failslab, interval 1, probability 0, space 0, times 0 [ 493.386933][T13653] CPU: 1 UID: 0 PID: 13653 Comm: syz.1.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.386964][T13653] Tainted: [L]=SOFTLOCKUP [ 493.386974][T13653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 493.386985][T13653] Call Trace: [ 493.386993][T13653] [ 493.387003][T13653] dump_stack_lvl+0xe8/0x150 [ 493.387034][T13653] should_fail_ex+0x412/0x560 [ 493.387064][T13653] should_failslab+0xa8/0x100 [ 493.387089][T13653] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 493.387110][T13653] ? __alloc_skb+0x186/0x7d0 [ 493.387134][T13653] ? __alloc_skb+0x1d0/0x7d0 [ 493.387154][T13653] ? __local_bh_enable_ip+0xd0/0x130 [ 493.387182][T13653] __alloc_skb+0x1d0/0x7d0 [ 493.387211][T13653] netlink_sendmsg+0x5d4/0xb40 [ 493.387245][T13653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.387273][T13653] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.387306][T13653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.387331][T13653] ____sys_sendmsg+0x972/0x9f0 [ 493.387358][T13653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.387384][T13653] ? import_iovec+0x73/0xa0 [ 493.387414][T13653] ___sys_sendmsg+0x2a5/0x360 [ 493.387436][T13653] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.387484][T13653] ? __fget_files+0x2a/0x420 [ 493.387509][T13653] ? __fget_files+0x3a0/0x420 [ 493.387544][T13653] __x64_sys_sendmsg+0x1bd/0x2a0 [ 493.387565][T13653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.387592][T13653] ? __pfx_ksys_write+0x10/0x10 [ 493.387623][T13653] do_syscall_64+0x14d/0xf80 [ 493.387641][T13653] ? trace_irq_disable+0x3b/0x150 [ 493.387667][T13653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.387686][T13653] ? clear_bhb_loop+0x40/0x90 [ 493.387708][T13653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.387734][T13653] RIP: 0033:0x7feddf39c799 [ 493.387752][T13653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.387767][T13653] RSP: 002b:00007fede0300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.387787][T13653] RAX: ffffffffffffffda RBX: 00007feddf615fa0 RCX: 00007feddf39c799 [ 493.387801][T13653] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 493.387813][T13653] RBP: 00007fede0300090 R08: 0000000000000000 R09: 0000000000000000 [ 493.387824][T13653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.387836][T13653] R13: 00007feddf616038 R14: 00007feddf615fa0 R15: 00007feddf73fa48 [ 493.387865][T13653] [ 493.780228][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 493.780244][ T29] audit: type=1326 audit(1773213033.667:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.0.2613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11b259c799 code=0x0 [ 493.864591][ T5907] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 493.930573][T13663] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2614'. [ 493.997705][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 494.010898][T13665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2614'. [ 494.422163][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.825842][T13677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.850066][T13677] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 494.967513][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.982453][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.990384][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.635159][T13689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2619'. [ 495.735833][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'. [ 496.025114][T13693] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 496.041738][T13693] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2620'. [ 496.054573][ T5907] usb 3-1: USB disconnect, device number 68 [ 496.082513][T13693] .`: renamed from bond0 [ 496.263429][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.272160][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.297871][T13702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'. [ 496.303518][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 496.480709][T13712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.493270][T13712] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2625'. [ 496.694837][T13715] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2627'. [ 496.719063][T13718] syzkaller0: entered promiscuous mode [ 496.746106][T13718] syzkaller0: entered allmulticast mode [ 496.767677][T13718] tc action pedit 'at' offset 50 out of bounds [ 497.861713][ T5883] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 498.040907][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 498.103062][ T5883] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 498.112168][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.131789][ T5883] usb 4-1: Product: syz [ 498.135988][ T5883] usb 4-1: Manufacturer: syz [ 498.153800][ T5883] usb 4-1: SerialNumber: syz [ 498.182336][ T5883] usb 4-1: config 0 descriptor?? [ 498.214153][ T5883] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 498.227748][ T5883] usb 4-1: Detected FT4233HP [ 498.734868][ T9] IPVS: starting estimator thread 0... [ 498.826142][ T5890] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 498.921652][T13771] IPVS: using max 30 ests per chain, 72000 per kthread [ 499.013558][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 499.029418][ T5890] usb 3-1: config 1 has an invalid interface number: 222 but max is 0 [ 499.038267][ T5890] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 499.149732][ T5890] usb 3-1: config 1 has no interface number 0 [ 499.156169][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 499.167983][ T5890] usb 3-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 499.190507][ T5890] usb 3-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 499.212574][ T5890] usb 3-1: config 1 interface 222 has no altsetting 0 [ 499.447855][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 499.475544][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.491776][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 499.545158][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.557080][ T5890] usb 3-1: Product: syz [ 499.584801][ T5890] usb 3-1: Manufacturer: syz [ 499.595753][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.615355][ T5890] usb 3-1: SerialNumber: syz [ 499.655591][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.685621][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 499.720999][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.777089][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 499.795486][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 499.879943][ T9] usb 2-1: Manufacturer: syz [ 499.888151][ T9] usb 2-1: config 0 descriptor?? [ 500.101953][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.113166][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.201620][ T5902] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 500.211511][ T9] rc_core: IR keymap rc-hauppauge not found [ 500.217838][ T9] Registered IR keymap rc-empty [ 500.224848][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.251598][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.272983][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 500.286833][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 500.304267][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.331635][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.351624][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.361638][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 500.368812][ T5902] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 500.371619][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.377244][ T5902] usb 1-1: config 0 has no interface number 0 [ 500.392927][ T5902] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 500.401607][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.403298][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.419340][ T5902] usb 1-1: Product: syz [ 500.421674][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.423709][ T5902] usb 1-1: Manufacturer: syz [ 500.435485][ T5902] usb 1-1: SerialNumber: syz [ 500.441644][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.442925][ T5902] usb 1-1: config 0 descriptor?? [ 500.460953][ T5902] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 500.471596][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.504053][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.524630][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 500.564250][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 500.573360][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 500.609576][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.623111][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.665751][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 500.681069][ T5902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 500.742486][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.753888][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.804636][ T5883] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 500.813391][ T5883] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 500.827539][ T5883] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 500.834800][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.857604][ T5883] usb 4-1: USB disconnect, device number 101 [ 500.858599][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.876924][T13777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.904102][T13777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.922517][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 500.922775][ T5902] usb 2-1: USB disconnect, device number 82 [ 500.955600][ T5883] ftdi_sio 4-1:0.0: device disconnected [ 500.966066][T13782] loop2: detected capacity change from 0 to 7 [ 500.977908][T13782] Dev loop2: unable to read RDB block 7 [ 500.986432][T13782] loop2: AHDI p1 p2 [ 500.991566][T13782] loop2: partition table partially beyond EOD, truncated [ 500.998871][T13782] loop2: p1 start 1818582900 is beyond EOD, truncated [ 501.141998][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 501.149845][ T42] usb 1-1: USB disconnect, device number 100 [ 501.159021][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 501.177024][ T42] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 501.189657][ T42] quatech2 1-1:0.51: device disconnected [ 501.388944][ T5890] usb 3-1: USB disconnect, device number 69 [ 501.397249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.514262][T13786] __nla_validate_parse: 1 callbacks suppressed [ 501.514283][T13786] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2650'. [ 501.771910][ T42] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 501.911548][ T42] usb 2-1: device descriptor read/64, error -71 [ 502.022473][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.025649][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.141595][ T5890] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 502.168622][T13807] netlink: 'syz.4.2659': attribute type 21 has an invalid length. [ 502.171670][ T42] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 502.189995][T13807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2659'. [ 502.211290][T13807] netlink: 'syz.4.2659': attribute type 5 has an invalid length. [ 502.220604][T13808] netlink: 'syz.4.2659': attribute type 10 has an invalid length. [ 502.234376][T13807] netlink: 'syz.4.2659': attribute type 6 has an invalid length. [ 502.242740][T13807] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2659'. [ 502.256549][T13810] netlink: 'syz.0.2661': attribute type 1 has an invalid length. [ 502.286821][T13810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.311551][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 502.314676][T13810] bond5: (slave ip6erspan0): making interface the new active one [ 502.323071][ T5890] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 24, changing to 7 [ 502.326784][T13810] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 502.338722][ T5890] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 502.355118][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.355392][ T42] usb 2-1: device descriptor read/64, error -71 [ 502.364382][ T5890] usb 3-1: Product: ë¢ë Œì…§êŠ•à¥¢éŸ·ã¿¹áž·ï¬€é™‹é¹¼ï«Šé­°ì†ä‘…ì‘角⺞ä…緢楕鴃錶쿗䠹奈⑷ᓷ娇嵣Ɉ泧빠㚾美潂燎쉧᳕ﹴᆱí´áŸ£è½’é—›äœêºžïš‹è²²à¯€æ©™Ð®îšŸê»ªìºªè‰ºæˆ¾ä‘å–耊ႊ錻ꖖ觧䰈璹ç­íŽ·ä£§é¥–á¿„ê´œé”½æ£ŒáŸ¸ç¬¥à§°é¶† [ 502.395911][ T5890] usb 3-1: Manufacturer: Ñ„ [ 502.400430][ T5890] usb 3-1: SerialNumber: 䢺列䊨á…ꗲட㖿皹ᡖཱུå¾ç¸°Ç¶é•¶î›´Óº [ 502.471363][T13818] fuse: Bad value for 'fd' [ 502.502275][ T42] usb usb2-port1: attempt power cycle [ 502.818267][ T5890] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 502.825462][ T5890] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 502.841899][ T42] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 502.861562][ T5890] usb 3-1: found format II with max.bitrate = 8, frame size=65532 [ 502.862195][ T42] usb 2-1: device descriptor read/8, error -71 [ 502.869380][ T5890] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 502.958277][ T5890] usb 3-1: USB disconnect, device number 70 [ 503.004850][ T6547] udevd[6547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.123703][ T42] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 503.152210][ T42] usb 2-1: device descriptor read/8, error -71 [ 503.263215][ T42] usb usb2-port1: unable to enumerate USB device [ 503.809622][T13866] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.821663][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.834819][T13866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.941825][ T5890] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 503.956407][T13868] bond0: (slave vlan4): Opening slave failed [ 504.141955][T13870] xt_connbytes: Forcing CT accounting to be enabled [ 504.148947][T13870] xt_NFQUEUE: number of total queues is 0 [ 504.171639][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 504.178425][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.189877][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.201573][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 504.219606][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.248660][ T5890] usb 4-1: config 0 descriptor?? [ 504.258175][ T5890] hub 4-1:0.0: USB hub found [ 504.458117][ T5890] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 504.473993][ T5890] hid_parser_main: 28 callbacks suppressed [ 504.474013][ T5890] hid-generic 0003:046D:C31C.001E: unknown main item tag 0x0 [ 504.502226][ T5890] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 504.522141][ T5876] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 504.718542][T13879] fuse: Bad value for 'user_id' [ 504.723870][T13879] fuse: Bad value for 'user_id' [ 504.813819][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 504.823750][ T5876] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 504.834112][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.858997][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.868433][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.877120][ T5876] usb 1-1: Product: syz [ 504.881363][ T5876] usb 1-1: Manufacturer: syz [ 504.886273][ T5876] usb 1-1: SerialNumber: syz [ 504.894113][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub [ 504.900174][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5 [ 505.071537][ T5890] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 505.107245][ T5876] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 505.231822][ T5890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.254900][ T5890] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.373646][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.407816][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.426263][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.436375][ T5890] usb 3-1: Product: syz [ 505.440554][ T5890] usb 3-1: Manufacturer: syz [ 505.446575][ T5890] usb 3-1: SerialNumber: syz [ 505.457552][ T5890] hub 3-1:1.0: bad descriptor, ignoring hub [ 505.463701][ T5890] hub 3-1:1.0: probe with driver hub failed with error -5 [ 505.589526][ T42] usb 4-1: USB disconnect, device number 102 [ 505.612224][ T5902] usb 1-1: reset high-speed USB device number 101 using dummy_hcd [ 505.673974][ T5890] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 505.844301][T13899] batadv_slave_1: entered promiscuous mode [ 505.861955][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.863711][T13882] FAULT_INJECTION: forcing a failure. [ 505.863711][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 505.873560][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.887458][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.896338][ T5890] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 505.915539][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.2.2686 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.915566][T13882] Tainted: [L]=SOFTLOCKUP [ 505.915573][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 505.915583][T13882] Call Trace: [ 505.915591][T13882] [ 505.915598][T13882] dump_stack_lvl+0xe8/0x150 [ 505.915628][T13882] should_fail_ex+0x412/0x560 [ 505.915655][T13882] should_failslab+0xa8/0x100 [ 505.915678][T13882] __kmalloc_noprof+0xe8/0x760 [ 505.915697][T13882] ? tomoyo_encode+0x28b/0x550 [ 505.915727][T13882] tomoyo_encode+0x28b/0x550 [ 505.915757][T13882] tomoyo_realpath_from_path+0x58d/0x5d0 [ 505.915795][T13882] tomoyo_check_open_permission+0x229/0x470 [ 505.915814][T13882] ? tomoyo_check_open_permission+0x1d3/0x470 [ 505.915831][T13882] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 505.915884][T13882] security_file_open+0xa9/0x240 [ 505.916000][T13882] do_dentry_open+0x384/0x14e0 [ 505.916030][T13882] ? vfs_open+0x31/0x340 [ 505.916058][T13882] vfs_open+0x3b/0x340 [ 505.916079][T13882] ? path_openat+0x2df0/0x3860 [ 505.916102][T13882] path_openat+0x2e08/0x3860 [ 505.916134][T13882] ? __pfx_stack_trace_save+0x10/0x10 [ 505.916157][T13882] ? stack_depot_save_flags+0x33/0x810 [ 505.916189][T13882] ? __pfx_path_openat+0x10/0x10 [ 505.916207][T13882] ? __x64_sys_openat+0x138/0x170 [ 505.916230][T13882] ? do_syscall_64+0x14d/0xf80 [ 505.916246][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.916269][T13882] ? __lock_acquire+0x6b5/0x2cf0 [ 505.916296][T13882] do_file_open+0x23e/0x4a0 [ 505.916316][T13882] ? __pfx_do_file_open+0x10/0x10 [ 505.916364][T13882] ? _raw_spin_unlock+0x28/0x50 [ 505.916387][T13882] ? alloc_fd+0x64b/0x6c0 [ 505.916420][T13882] do_sys_openat2+0x113/0x200 [ 505.916448][T13882] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.916474][T13882] ? ksys_write+0x242/0x270 [ 505.916495][T13882] ? __pfx_ksys_write+0x10/0x10 [ 505.916517][T13882] __x64_sys_openat+0x138/0x170 [ 505.916547][T13882] do_syscall_64+0x14d/0xf80 [ 505.916563][T13882] ? trace_irq_disable+0x3b/0x150 [ 505.916588][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.916606][T13882] ? clear_bhb_loop+0x40/0x90 [ 505.916629][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.916644][T13882] RIP: 0033:0x7f1a79d5cfce [ 505.916661][T13882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 505.916675][T13882] RSP: 002b:00007f1a7abf1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.916693][T13882] RAX: ffffffffffffffda RBX: 00007f1a7abf26c0 RCX: 00007f1a79d5cfce [ 505.916706][T13882] RDX: 0000000000000002 RSI: 00007f1a7abf1c00 RDI: ffffffffffffff9c [ 505.916719][T13882] RBP: 00007f1a7abf2090 R08: 0000000000000000 R09: 0000000000000000 [ 505.916730][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.916741][T13882] R13: 00007f1a7a016038 R14: 00007f1a7a015fa0 R15: 00007f1a7a13fa48 [ 505.916771][T13882] [ 505.916793][T13882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.943752][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 506.141890][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 506.162276][ T42] usb 1-1: USB disconnect, device number 101 [ 506.228194][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.258210][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 506.274267][ T5890] usb 5-1: can't read configurations, error -71 [ 506.301526][ T5891] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 506.429324][T13911] FAULT_INJECTION: forcing a failure. [ 506.429324][T13911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.442697][T13911] CPU: 1 UID: 0 PID: 13911 Comm: syz.1.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.442717][T13911] Tainted: [L]=SOFTLOCKUP [ 506.442721][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 506.442727][T13911] Call Trace: [ 506.442732][T13911] [ 506.442737][T13911] dump_stack_lvl+0xe8/0x150 [ 506.442757][T13911] should_fail_ex+0x412/0x560 [ 506.442774][T13911] strncpy_from_user+0x36/0x2b0 [ 506.442788][T13911] do_getname+0x77/0x250 [ 506.442803][T13911] __se_sys_rename+0x3a/0x2c0 [ 506.442818][T13911] do_syscall_64+0x14d/0xf80 [ 506.442828][T13911] ? trace_irq_disable+0x3b/0x150 [ 506.442842][T13911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.442853][T13911] ? clear_bhb_loop+0x40/0x90 [ 506.442865][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.442874][T13911] RIP: 0033:0x7feddf39c799 [ 506.442885][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.442894][T13911] RSP: 002b:00007fede02be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 506.442905][T13911] RAX: ffffffffffffffda RBX: 00007feddf616180 RCX: 00007feddf39c799 [ 506.442913][T13911] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 506.442920][T13911] RBP: 00007fede02be090 R08: 0000000000000000 R09: 0000000000000000 [ 506.442926][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.442932][T13911] R13: 00007feddf616218 R14: 00007feddf616180 R15: 00007feddf73fa48 [ 506.442947][T13911] [ 506.515534][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.673534][T13898] batadv_slave_1: left promiscuous mode [ 506.750915][T13919] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 506.827725][T13881] usblp0: removed [ 506.910838][T13925] xt_hashlimit: size too large, truncated to 1048576 [ 506.960200][ T5891] usb 3-1: USB disconnect, device number 71 [ 506.975420][ T5891] usblp1: removed [ 507.027097][T13930] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2702'. [ 507.099372][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2702'. [ 507.753315][T13943] FAULT_INJECTION: forcing a failure. [ 507.753315][T13943] name failslab, interval 1, probability 0, space 0, times 0 [ 507.772129][T13943] CPU: 0 UID: 0 PID: 13943 Comm: syz.2.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.772155][T13943] Tainted: [L]=SOFTLOCKUP [ 507.772162][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 507.772173][T13943] Call Trace: [ 507.772181][T13943] [ 507.772190][T13943] dump_stack_lvl+0xe8/0x150 [ 507.772220][T13943] should_fail_ex+0x412/0x560 [ 507.772248][T13943] should_failslab+0xa8/0x100 [ 507.772271][T13943] ? skb_clone+0x212/0x3a0 [ 507.772290][T13943] kmem_cache_alloc_noprof+0x87/0x650 [ 507.772309][T13943] ? __netlink_lookup+0xc6/0x8b0 [ 507.772339][T13943] skb_clone+0x212/0x3a0 [ 507.772361][T13943] __netlink_deliver_tap+0x404/0x850 [ 507.772396][T13943] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.772420][T13943] netlink_deliver_tap+0x19c/0x1b0 [ 507.772445][T13943] netlink_unicast+0x7e3/0x9b0 [ 507.772473][T13943] ? __pfx_netlink_unicast+0x10/0x10 [ 507.772496][T13943] ? netlink_sendmsg+0x650/0xb40 [ 507.772517][T13943] ? skb_put+0x11b/0x210 [ 507.772547][T13943] netlink_sendmsg+0x813/0xb40 [ 507.772578][T13943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.772605][T13943] ? aa_sock_msg_perm+0xf1/0x1b0 [ 507.772630][T13943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.772661][T13943] ____sys_sendmsg+0x972/0x9f0 [ 507.772688][T13943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.772715][T13943] ? import_iovec+0x73/0xa0 [ 507.772744][T13943] ___sys_sendmsg+0x2a5/0x360 [ 507.772768][T13943] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.772818][T13943] ? __fget_files+0x2a/0x420 [ 507.772843][T13943] ? __fget_files+0x3a0/0x420 [ 507.772878][T13943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 507.772898][T13943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.772924][T13943] ? __pfx_ksys_write+0x10/0x10 [ 507.772955][T13943] do_syscall_64+0x14d/0xf80 [ 507.772972][T13943] ? trace_irq_disable+0x3b/0x150 [ 507.772995][T13943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.773014][T13943] ? clear_bhb_loop+0x40/0x90 [ 507.773036][T13943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.773054][T13943] RIP: 0033:0x7f1a79d9c799 [ 507.773071][T13943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.773086][T13943] RSP: 002b:00007f1a7abf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.773105][T13943] RAX: ffffffffffffffda RBX: 00007f1a7a015fa0 RCX: 00007f1a79d9c799 [ 507.773118][T13943] RDX: 000000000000c050 RSI: 0000200000000280 RDI: 0000000000000003 [ 507.773130][T13943] RBP: 00007f1a7abf2090 R08: 0000000000000000 R09: 0000000000000000 [ 507.773141][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.773152][T13943] R13: 00007f1a7a016038 R14: 00007f1a7a015fa0 R15: 00007f1a7a13fa48 [ 507.773180][T13943] [ 507.773213][T13943] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2707'. [ 507.804428][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.813210][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.841561][ T5902] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 508.139337][T13947] syz.3.2708 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 508.160827][T13943] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 508.189262][T13943] bond0 (unregistering): Released all slaves [ 508.231941][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 508.239670][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.250924][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 508.259820][ T5902] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 508.269497][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.278038][ T5902] usb 2-1: Product: syz [ 508.285990][ T5902] usb 2-1: Manufacturer: syz [ 508.290654][ T5902] usb 2-1: SerialNumber: syz [ 508.299448][ T5902] usb 2-1: config 0 descriptor?? [ 508.514479][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 508.530386][ T5902] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 508.555693][ T5902] imon:send_packet: packet tx failed (-71) [ 508.593487][ T5902] imon 2-1:0.0: panel buttons/knobs setup failed [ 508.618363][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.627893][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.702757][ T5902] rc_core: IR keymap rc-imon-pad not found [ 508.720053][ T5902] Registered IR keymap rc-empty [ 508.725378][ T5902] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 508.748027][ T5902] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 508.769955][ T5902] imon:send_packet: packet tx failed (-71) [ 508.801572][ T5902] imon 2-1:0.0: remote input dev register failed [ 508.813602][ T5902] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 508.834511][ T5902] imon 2-1:0.0: unable to initialize intf0, err 0 [ 508.841080][ T5902] imon:imon_probe: failed to initialize context! [ 508.851643][ T5890] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 508.860061][ T5902] imon 2-1:0.0: unable to register, err -19 [ 508.890988][ T5902] usb 2-1: USB disconnect, device number 87 [ 509.219390][T13977] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 509.225944][T13977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 509.240641][T13977] vhci_hcd vhci_hcd.0: Device attached [ 509.268735][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 509.284091][T13977] xt_nfacct: accounting object `syz1' does not exist [ 509.321857][ T5902] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 509.491546][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 509.499842][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.521030][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.536039][ T5902] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 509.546280][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.554864][ T5902] usb 2-1: Product: syz [ 509.559371][ T5902] usb 2-1: Manufacturer: syz [ 509.564189][ T42] usb 38-1: SetAddress Request (2) to port 0 [ 509.570806][ T42] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 509.578962][ T5902] usb 2-1: SerialNumber: syz [ 509.986541][ T5902] usb 2-1: config 0 descriptor?? [ 510.481521][ T5902] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 511.181939][ T5902] rc_core: IR keymap rc-imon-pad not found [ 511.187904][ T5902] Registered IR keymap rc-empty [ 511.193530][ T5902] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 511.215987][ T5902] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 511.254687][ T5902] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 511.283351][ T5902] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 511.297536][ T5902] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:88> initialized [ 511.323263][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 511.541528][ T5891] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 511.623059][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.647412][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.665165][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.694233][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.703930][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.720741][ T5891] usb 1-1: config 1 has no interface number 0 [ 511.736110][ T5891] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.749715][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 511.763962][ T5890] usb 2-1: USB disconnect, device number 88 [ 511.770522][ T5891] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 511.807043][ T5891] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.842622][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 511.876790][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.907542][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.922942][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.939384][ T5891] usb 1-1: Product: syz [ 511.948494][ T5891] usb 1-1: Manufacturer: syz [ 511.958478][ T5891] usb 1-1: SerialNumber: syz [ 512.079226][T13978] vhci_hcd: connection reset by peer [ 512.085964][ T12] vhci_hcd vhci_hcd.2: stop threads [ 512.094493][ T12] vhci_hcd vhci_hcd.2: release socket [ 512.117744][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 512.181643][T13987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.080994][T13987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.081523][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 513.113111][ T5891] cdc_ncm 1-1:1.1: bind() failure [ 513.271556][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 513.281001][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.291121][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 513.311881][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 513.347425][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 513.360611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.378848][ T9] usb 4-1: Product: syz [ 513.386855][ T9] usb 4-1: Manufacturer: syz [ 513.387441][T14026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.400412][ T9] usb 4-1: SerialNumber: syz [ 513.408926][T14026] libceph: resolve '4' (ret=-3): failed [ 513.413008][ T9] usb 4-1: config 0 descriptor?? [ 513.542490][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.544015][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.822566][ T5891] usb 1-1: USB disconnect, device number 103 [ 513.843590][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 514.171857][T14051] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2741'. [ 514.183035][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 514.261691][ T9] usb 4-1: USB disconnect, device number 103 [ 514.323716][T14051] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2741'. [ 514.500145][T14058] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2742'. [ 514.512234][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 514.525433][T14058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2742'. [ 514.661558][ T42] usb 38-1: device descriptor read/8, error -110 [ 515.123640][ T42] usb usb38-port1: attempt power cycle [ 515.463812][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 515.552908][T14084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2748'. [ 515.663505][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 515.675300][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 515.682564][ T42] usb usb38-port1: unable to enumerate USB device [ 515.698560][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.719788][ T9] usb 2-1: config 0 descriptor?? [ 515.740015][T14074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.904740][T14091] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2749'. [ 516.044612][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 516.096211][T14091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2749'. [ 516.183592][T14100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.196968][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.241508][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.286363][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.305573][T14102] FAULT_INJECTION: forcing a failure. [ 516.305573][T14102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.324121][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.342463][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.355179][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.366504][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.380195][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.0.2753 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.380223][T14102] Tainted: [L]=SOFTLOCKUP [ 516.380231][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 516.380241][T14102] Call Trace: [ 516.380250][T14102] [ 516.380258][T14102] dump_stack_lvl+0xe8/0x150 [ 516.380289][T14102] should_fail_ex+0x412/0x560 [ 516.380317][T14102] _copy_from_user+0x2d/0xb0 [ 516.380346][T14102] kstrtouint_from_user+0xd6/0x180 [ 516.380372][T14102] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 516.380409][T14102] proc_fail_nth_write+0x8e/0x210 [ 516.380435][T14102] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.380466][T14102] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.380492][T14102] vfs_write+0x29a/0xb90 [ 516.380521][T14102] ? __pfx_vfs_write+0x10/0x10 [ 516.380543][T14102] ? __fget_files+0x2a/0x420 [ 516.380575][T14102] ? __fget_files+0x3a0/0x420 [ 516.380599][T14102] ? __fget_files+0x2a/0x420 [ 516.380631][T14102] ksys_write+0x150/0x270 [ 516.380654][T14102] ? __pfx_ksys_write+0x10/0x10 [ 516.380684][T14102] do_syscall_64+0x14d/0xf80 [ 516.380702][T14102] ? trace_irq_disable+0x3b/0x150 [ 516.380727][T14102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.380746][T14102] ? clear_bhb_loop+0x40/0x90 [ 516.380768][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.380786][T14102] RIP: 0033:0x7f11b255cfce [ 516.380803][T14102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.380819][T14102] RSP: 002b:00007f11b3473fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.380840][T14102] RAX: ffffffffffffffda RBX: 00007f11b34746c0 RCX: 00007f11b255cfce [ 516.380853][T14102] RDX: 0000000000000001 RSI: 00007f11b34740a0 RDI: 0000000000000004 [ 516.380865][T14102] RBP: 00007f11b3474090 R08: 0000000000000000 R09: 0000000000000000 [ 516.380877][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.380889][T14102] R13: 00007f11b2816038 R14: 00007f11b2815fa0 R15: 00007f11b293fa48 [ 516.380919][T14102] [ 516.587656][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.594689][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.601521][ T9] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 516.613076][ T9] asus 0003:0B05:1ABE.001F: unbalanced collection at end of report description [ 516.622444][ T9] asus 0003:0B05:1ABE.001F: Asus hid parse failed: -22 [ 516.629425][ T9] asus 0003:0B05:1ABE.001F: probe with driver asus failed with error -22 [ 517.081603][ T5907] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 517.151556][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 517.192540][ T5883] usb 2-1: USB disconnect, device number 89 [ 517.234199][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.275985][ T5907] usb 4-1: config 15 has an invalid interface number: 250 but max is 0 [ 517.300363][ T5907] usb 4-1: config 15 has no interface number 0 [ 517.313083][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 517.330981][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 517.341125][ T5907] usb 4-1: config 15 interface 250 has no altsetting 0 [ 517.360838][ T9] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 517.380380][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.380555][ T5907] usb 4-1: string descriptor 0 read error: -22 [ 517.391926][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.408220][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.429775][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.431831][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.440846][ T9] usb 1-1: Product: syz [ 517.471603][ T5907] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 517.474352][ T9] usb 1-1: Manufacturer: syz [ 517.491092][ T9] usb 1-1: SerialNumber: syz [ 517.507063][ T9] usb 1-1: config 0 descriptor?? [ 517.511037][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.519790][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 517.535907][ T9] usb 1-1: Detected SIO [ 517.540155][ T5907] go7007 4-1:15.250: The Lifeview TV Walker Ultra is not supported. Sorry! [ 517.544395][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 517.564777][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 517.589900][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 517.788817][T14110] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 517.883068][ T5907] usb 1-1: USB disconnect, device number 104 [ 517.896794][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 517.917519][ T5907] ftdi_sio 1-1:0.0: device disconnected [ 517.977198][ T5902] usb 4-1: USB disconnect, device number 104 [ 518.114704][T14141] netlink: 'syz.1.2761': attribute type 4 has an invalid length. [ 518.669034][T14153] FAULT_INJECTION: forcing a failure. [ 518.669034][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 518.685951][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.691731][T14153] CPU: 0 UID: 0 PID: 14153 Comm: syz.3.2763 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.691759][T14153] Tainted: [L]=SOFTLOCKUP [ 518.691766][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 518.691778][T14153] Call Trace: [ 518.691786][T14153] [ 518.691794][T14153] dump_stack_lvl+0xe8/0x150 [ 518.691822][T14153] should_fail_ex+0x412/0x560 [ 518.691853][T14153] should_failslab+0xa8/0x100 [ 518.691882][T14153] ? skb_clone+0x212/0x3a0 [ 518.691900][T14153] kmem_cache_alloc_noprof+0x87/0x650 [ 518.691926][T14153] skb_clone+0x212/0x3a0 [ 518.691946][T14153] __netlink_deliver_tap+0x404/0x850 [ 518.691980][T14153] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.692004][T14153] netlink_deliver_tap+0x19c/0x1b0 [ 518.692026][T14153] netlink_sendskb+0x68/0x140 [ 518.692049][T14153] netlink_unicast+0x3a3/0x9b0 [ 518.692070][T14153] ? perf_trace_ext4_fc_track_inode+0xfe/0x550 [ 518.692132][T14153] ? __pfx_netlink_unicast+0x10/0x10 [ 518.692161][T14153] netlink_rcv_skb+0x2b6/0x4b0 [ 518.692185][T14153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.692210][T14153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.692242][T14153] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.692271][T14153] netlink_unicast+0x80f/0x9b0 [ 518.692299][T14153] ? __pfx_netlink_unicast+0x10/0x10 [ 518.692321][T14153] ? netlink_sendmsg+0x650/0xb40 [ 518.692342][T14153] ? skb_put+0x11b/0x210 [ 518.692369][T14153] netlink_sendmsg+0x813/0xb40 [ 518.692399][T14153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.692425][T14153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.692449][T14153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.692471][T14153] ____sys_sendmsg+0x972/0x9f0 [ 518.692497][T14153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.692523][T14153] ? import_iovec+0x73/0xa0 [ 518.692552][T14153] ___sys_sendmsg+0x2a5/0x360 [ 518.692573][T14153] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.692621][T14153] ? __fget_files+0x2a/0x420 [ 518.692645][T14153] ? __fget_files+0x3a0/0x420 [ 518.692678][T14153] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.692698][T14153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.692724][T14153] ? __pfx_ksys_write+0x10/0x10 [ 518.692753][T14153] do_syscall_64+0x14d/0xf80 [ 518.692770][T14153] ? trace_irq_disable+0x3b/0x150 [ 518.692794][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.692811][T14153] ? clear_bhb_loop+0x40/0x90 [ 518.692833][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.692851][T14153] RIP: 0033:0x7fc64659c799 [ 518.692873][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.692888][T14153] RSP: 002b:00007fc6473db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.692908][T14153] RAX: ffffffffffffffda RBX: 00007fc646816090 RCX: 00007fc64659c799 [ 518.692921][T14153] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000005 [ 518.692933][T14153] RBP: 00007fc6473db090 R08: 0000000000000000 R09: 0000000000000000 [ 518.692945][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.692955][T14153] R13: 00007fc646816128 R14: 00007fc646816090 R15: 00007fc64693fa48 [ 518.692982][T14153] [ 519.113202][ T5883] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 519.158717][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 519.311701][ T5883] usb 1-1: device descriptor read/64, error -32 [ 519.318318][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.357203][T14159] bond0: entered allmulticast mode [ 519.374455][T14165] __nla_validate_parse: 5 callbacks suppressed [ 519.374473][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 519.409979][T14166] netlink: 'syz.4.2769': attribute type 10 has an invalid length. [ 519.419170][T14166] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 519.431646][T14166] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 519.581844][ T5883] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 519.660848][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 519.741518][ T5883] usb 1-1: device descriptor read/64, error -71 [ 519.851533][ T5902] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 519.852461][ T5883] usb usb1-port1: attempt power cycle [ 519.932222][T14190] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 520.023428][ T5902] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 520.036128][ T5902] usb 3-1: config 0 has no interface number 0 [ 520.049187][ T5902] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.079021][ T5902] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 520.093666][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.102346][ T5902] usb 3-1: Product: syz [ 520.106728][ T5902] usb 3-1: Manufacturer: syz [ 520.111761][ T5902] usb 3-1: SerialNumber: syz [ 520.120832][ T5902] usb 3-1: config 0 descriptor?? [ 520.127334][T14199] netlink: 'syz.3.2781': attribute type 24 has an invalid length. [ 520.135908][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 520.146818][T14199] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 520.161824][ T5891] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 520.251857][ T5883] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 520.279699][ T5883] usb 1-1: device descriptor read/8, error -71 [ 520.332491][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 520.340761][ T5891] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 520.360465][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.375201][ T5891] usb 2-1: Product: syz [ 520.379382][ T5891] usb 2-1: Manufacturer: syz [ 520.384336][ T5891] usb 2-1: SerialNumber: syz [ 520.392121][ T5891] usb 2-1: config 0 descriptor?? [ 520.408211][ T5891] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 520.541531][ T5883] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 520.554166][T14213] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2785'. [ 520.565385][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 520.575314][ T5883] usb 1-1: device descriptor read/8, error -71 [ 520.587376][T14213] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2785'. [ 520.693320][ T5883] usb usb1-port1: unable to enumerate USB device [ 521.511770][ T5891] gspca_topro: reg_w err -110 [ 521.541619][ T5891] gspca_topro: Sensor soi763a [ 522.373297][T14250] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2798'. [ 522.383863][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 522.398718][T14250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2798'. [ 522.503968][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.685405][ T5902] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 522.701802][ T5902] keyspan 3-1:0.133: unsupported endpoint type 0 [ 522.722733][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 522.742013][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 522.763247][ T5902] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 522.804333][ T5902] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 522.837365][ T5902] usb 3-1: USB disconnect, device number 72 [ 522.856302][T14254] FAULT_INJECTION: forcing a failure. [ 522.856302][T14254] name failslab, interval 1, probability 0, space 0, times 0 [ 522.889143][ T5902] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 522.912997][ T5902] keyspan 3-1:0.133: device disconnected [ 522.955358][T14254] CPU: 1 UID: 0 PID: 14254 Comm: syz.0.2800 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.955389][T14254] Tainted: [L]=SOFTLOCKUP [ 522.955405][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 522.955415][T14254] Call Trace: [ 522.955424][T14254] [ 522.955431][T14254] dump_stack_lvl+0xe8/0x150 [ 522.955467][T14254] should_fail_ex+0x412/0x560 [ 522.955497][T14254] should_failslab+0xa8/0x100 [ 522.955521][T14254] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 522.955541][T14254] ? __alloc_skb+0x186/0x7d0 [ 522.955565][T14254] ? __alloc_skb+0x1d0/0x7d0 [ 522.955586][T14254] ? __local_bh_enable_ip+0xd0/0x130 [ 522.955614][T14254] __alloc_skb+0x1d0/0x7d0 [ 522.955637][T14254] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 522.955654][T14254] ? do_syscall_64+0x14d/0xf80 [ 522.955673][T14254] alloc_skb_with_frags+0xca/0x890 [ 522.955708][T14254] sock_alloc_send_pskb+0x878/0x990 [ 522.955742][T14254] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 522.955759][T14254] ? kasan_quarantine_put+0xbb/0x1f0 [ 522.955778][T14254] ? lockdep_hardirqs_on+0x7a/0x110 [ 522.955808][T14254] ? kmem_cache_free+0x187/0x630 [ 522.955829][T14254] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 522.955855][T14254] unix_dgram_sendmsg+0x460/0x18e0 [ 522.955951][T14254] ? __lock_acquire+0x6b5/0x2cf0 [ 522.955976][T14254] ? __lock_acquire+0x6b5/0x2cf0 [ 522.956013][T14254] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 522.956034][T14254] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 522.956073][T14254] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 522.956100][T14254] ____sys_sendmsg+0x972/0x9f0 [ 522.956120][T14254] ? __lock_acquire+0x6b5/0x2cf0 [ 522.956150][T14254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.956175][T14254] ? import_iovec+0x73/0xa0 [ 522.956205][T14254] ___sys_sendmsg+0x2a5/0x360 [ 522.956228][T14254] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.956289][T14254] __sys_sendmmsg+0x27c/0x4e0 [ 522.956313][T14254] ? __pfx___sys_sendmmsg+0x10/0x10 [ 522.956330][T14254] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 522.956371][T14254] ? ksys_write+0x242/0x270 [ 522.956400][T14254] ? __pfx_ksys_write+0x10/0x10 [ 522.956424][T14254] __x64_sys_sendmmsg+0xa0/0xc0 [ 522.956444][T14254] do_syscall_64+0x14d/0xf80 [ 522.956460][T14254] ? trace_irq_disable+0x3b/0x150 [ 522.956484][T14254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.956501][T14254] ? clear_bhb_loop+0x40/0x90 [ 522.956523][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.956540][T14254] RIP: 0033:0x7f11b259c799 [ 522.956558][T14254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.956573][T14254] RSP: 002b:00007f11b3474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 522.956592][T14254] RAX: ffffffffffffffda RBX: 00007f11b2815fa0 RCX: 00007f11b259c799 [ 522.956605][T14254] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 522.956616][T14254] RBP: 00007f11b3474090 R08: 0000000000000000 R09: 0000000000000000 [ 522.956622][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.956628][T14254] R13: 00007f11b2816038 R14: 00007f11b2815fa0 R15: 00007f11b293fa48 [ 522.956644][T14254] [ 523.284496][ T5876] usb 2-1: USB disconnect, device number 90 [ 523.302654][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.471915][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.471965][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.580220][T14260] netlink: 'syz.0.2803': attribute type 15 has an invalid length. [ 523.590101][T14259] netlink: 'syz.1.2802': attribute type 21 has an invalid length. [ 523.619868][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2802'. [ 523.660158][T14260] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 524.032295][T14282] syzkaller1: entered allmulticast mode [ 524.372001][ T5902] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 524.531634][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 524.920823][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.964534][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 87, changing to 7 [ 525.005365][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26260, setting to 1024 [ 525.035932][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.051659][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.057928][T14302] vivid-000: disconnect [ 525.066377][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.071507][ T5902] usb 1-1: Product: syz [ 525.077651][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.081055][ T5902] usb 1-1: Manufacturer: syz [ 525.210052][ T5902] usb 1-1: SerialNumber: syz [ 525.217085][T14303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 525.223633][T14303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 525.244116][T14303] vhci_hcd vhci_hcd.0: Device attached [ 525.249939][T14301] vivid-000: reconnect [ 525.255642][ T5902] usb 1-1: config 0 descriptor?? [ 525.302148][T14303] __nla_validate_parse: 4 callbacks suppressed [ 525.302168][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2815'. [ 525.320282][T14303] xt_nfacct: accounting object `syz1' does not exist [ 525.330659][ T5902] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.330837][T14309] syzkaller0: entered promiscuous mode [ 525.356002][T14309] syzkaller0: entered allmulticast mode [ 525.383666][ T5902] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 525.592872][ T5891] usb 36-1: SetAddress Request (6) to port 0 [ 525.598930][ T5891] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 525.762911][ T5883] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 525.819666][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.834553][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.843719][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.854811][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.863298][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.886077][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.896818][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.909632][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.918825][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.926167][ T5883] usb 5-1: device descriptor read/64, error -71 [ 525.961724][ T5902] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 525.986477][ T5902] em28xx 1-1:0.0: Config register raw data: 0x9e [ 525.993018][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.181565][ T5883] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 526.341605][ T5883] usb 5-1: device descriptor read/64, error -71 [ 526.373804][T14279] binder: BINDER_SET_CONTEXT_MGR already set [ 526.381422][T14279] binder: 14277:14279 ioctl 4018620d 200000004a80 returned -16 [ 526.389964][T14279] binder: 14277:14279 ioctl 4b72 200000000180 returned -22 [ 526.404681][ T5902] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 526.416446][ T5902] em28xx 1-1:0.0: No AC97 audio processor [ 526.453581][ T5883] usb usb5-port1: attempt power cycle [ 526.456425][ T5902] usb 1-1: USB disconnect, device number 109 [ 526.471726][ T5902] em28xx 1-1:0.0: Disconnecting em28xx [ 526.482226][ T5902] em28xx 1-1:0.0: Freeing device [ 526.549872][T14341] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2827'. [ 526.560444][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 526.622577][T14341] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2827'. [ 526.847700][ T5883] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 526.890867][ T5883] usb 5-1: device descriptor read/8, error -71 [ 526.892876][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.954568][T14331] chnl_net:caif_netlink_parms(): no params data found [ 527.131768][ T5883] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 527.160688][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.176109][ T5883] usb 5-1: device descriptor read/8, error -71 [ 527.219324][T14350] pim6reg: entered allmulticast mode [ 527.302571][ T5883] usb usb5-port1: unable to enumerate USB device [ 527.312193][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.328661][T14305] vhci_hcd: connection reset by peer [ 527.341854][ T1038] vhci_hcd vhci_hcd.1: stop threads [ 527.347238][ T1038] vhci_hcd vhci_hcd.1: release socket [ 527.352838][ T1038] vhci_hcd vhci_hcd.1: disconnect device [ 527.367897][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.380227][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.391789][T14331] bridge_slave_0: entered allmulticast mode [ 527.403988][T14331] bridge_slave_0: entered promiscuous mode [ 527.413524][T14350] pim6reg: left allmulticast mode [ 527.501584][ T58] team0: Port device netdevsim0 removed [ 527.516675][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.517228][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2830'. [ 527.571832][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.586830][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.598252][T14331] bridge_slave_1: entered allmulticast mode [ 527.616471][T14331] bridge_slave_1: entered promiscuous mode [ 527.666955][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.683176][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.726233][T14331] team0: Port device team_slave_0 added [ 527.735269][T14331] team0: Port device team_slave_1 added [ 527.812890][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.843397][ T5883] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 527.861415][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.889699][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.903914][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.911259][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.939442][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.011756][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 528.018473][ T5883] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 528.022755][ T5821] Bluetooth: hci5: command tx timeout [ 528.032527][ T5883] usb 2-1: config 179 has no interface number 0 [ 528.032675][ T5883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 528.057545][ T5883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 528.098681][ T5883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.118595][ T5883] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 528.126021][T14331] hsr_slave_0: entered promiscuous mode [ 528.132101][ T5883] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 528.137306][T14331] hsr_slave_1: entered promiscuous mode [ 528.199965][ T5883] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 528.200598][T14331] debugfs: 'hsr0' already exists in 'hsr' [ 528.224510][T14331] Cannot create hsr debugfs directory [ 528.324975][ T58] bridge_slave_1: left allmulticast mode [ 528.331595][ T58] bridge_slave_1: left promiscuous mode [ 528.339925][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.349125][ T5907] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 528.360762][ T58] bridge_slave_0: left allmulticast mode [ 528.366519][ T58] bridge_slave_0: left promiscuous mode [ 528.428190][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.469957][T14355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.521534][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 528.604485][T14367] Invalid logical block size (18) [ 528.613392][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 528.624038][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 528.636031][ T5907] usb 1-1: can't read configurations, error -71 [ 528.648342][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.756782][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input67 [ 528.909345][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.952573][ T42] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 528.992812][ T797] usb 2-1: USB disconnect, device number 91 [ 528.992830][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 529.007812][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 529.133698][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 529.147896][ T42] usb 5-1: config index 0 descriptor too short (expected 6701, got 45) [ 529.161045][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.190311][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.213584][ T42] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.241714][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.248368][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 529.261877][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.293964][ T42] usb 5-1: config 0 descriptor?? [ 529.308330][ T58] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.355933][ T58] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.390977][ T58] .` (unregistering): Released all slaves [ 529.432105][ T58] bond1 (unregistering): (slave veth3): Releasing active interface [ 529.467321][ T58] bond1 (unregistering): Released all slaves [ 529.504716][ T58] bond2 (unregistering): (slave veth5): Releasing active interface [ 529.531840][ T58] bond2 (unregistering): Released all slaves [ 529.567994][ T58] bond3 (unregistering): Released all slaves [ 529.612879][ T58] bond4 (unregistering): Released all slaves [ 529.650307][ T58] bond5 (unregistering): (slave veth9): Releasing backup interface [ 529.690054][ T58] bond5 (unregistering): Released all slaves [ 529.725016][ T58] bond6 (unregistering): (slave veth11): Releasing backup interface [ 529.736342][ T58] bond6 (unregistering): Released all slaves [ 529.764484][ T58] bond0 (unregistering): Released all slaves [ 529.807988][T14375] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 529.816056][T14375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 529.911278][T14401] team_slave_0: entered promiscuous mode [ 529.917217][T14401] team_slave_1: entered promiscuous mode [ 529.962553][T14401] vlan2: entered promiscuous mode [ 529.983785][T14401] team0: entered promiscuous mode [ 529.987017][T14408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2843'. [ 530.016507][T14401] bond0: entered promiscuous mode [ 530.022828][T14401] bond_slave_0: entered promiscuous mode [ 530.028797][T14401] vlan0: entered promiscuous mode [ 530.054458][T14403] syzkaller1: entered promiscuous mode [ 530.059946][T14403] syzkaller1: entered allmulticast mode [ 530.078295][ T58] tipc: Disabling bearer [ 530.085453][ T58] tipc: Left network mode [ 530.105193][ T5821] Bluetooth: hci5: command tx timeout [ 530.176762][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 530.183077][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 530.201935][ T42] usb 5-1: USB disconnect, device number 71 [ 530.208531][T14414] loop4: detected capacity change from 0 to 7 [ 530.226451][ T7791] Dev loop4: unable to read RDB block 7 [ 530.232118][ T7791] loop4: unable to read partition table [ 530.239870][ T7791] loop4: partition table beyond EOD, truncated [ 530.253192][T14414] Dev loop4: unable to read RDB block 7 [ 530.292012][T14414] loop4: unable to read partition table [ 530.297844][T14414] loop4: partition table beyond EOD, truncated [ 530.316421][T14414] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.436193][T14424] FAULT_INJECTION: forcing a failure. [ 530.436193][T14424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.479193][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.3.2849 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.479219][T14424] Tainted: [L]=SOFTLOCKUP [ 530.479225][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 530.479234][T14424] Call Trace: [ 530.479242][T14424] [ 530.479249][T14424] dump_stack_lvl+0xe8/0x150 [ 530.479275][T14424] should_fail_ex+0x412/0x560 [ 530.479300][T14424] _copy_from_user+0x2d/0xb0 [ 530.479324][T14424] kstrtouint_from_user+0xd6/0x180 [ 530.479345][T14424] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 530.479377][T14424] proc_fail_nth_write+0x8e/0x210 [ 530.479399][T14424] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 530.479423][T14424] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 530.479444][T14424] vfs_write+0x29a/0xb90 [ 530.479466][T14424] ? __pfx_vfs_write+0x10/0x10 [ 530.479484][T14424] ? __fget_files+0x2a/0x420 [ 530.479511][T14424] ? __fget_files+0x3a0/0x420 [ 530.479528][T14424] ? __fget_files+0x2a/0x420 [ 530.479554][T14424] ksys_write+0x150/0x270 [ 530.479571][T14424] ? __pfx_ksys_write+0x10/0x10 [ 530.479608][T14424] do_syscall_64+0x14d/0xf80 [ 530.479622][T14424] ? trace_irq_disable+0x3b/0x150 [ 530.479642][T14424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.479657][T14424] ? clear_bhb_loop+0x40/0x90 [ 530.479675][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.479690][T14424] RIP: 0033:0x7fc64655cfce [ 530.479704][T14424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.479718][T14424] RSP: 002b:00007fc6473fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.479735][T14424] RAX: ffffffffffffffda RBX: 00007fc6473fc6c0 RCX: 00007fc64655cfce [ 530.479746][T14424] RDX: 0000000000000001 RSI: 00007fc6473fc0a0 RDI: 000000000000000b [ 530.479755][T14424] RBP: 00007fc6473fc090 R08: 0000000000000000 R09: 0000000000000000 [ 530.479765][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.479773][T14424] R13: 00007fc646816038 R14: 00007fc646815fa0 R15: 00007fc64693fa48 [ 530.479796][T14424] [ 530.701401][ T5891] usb 36-1: device descriptor read/8, error -110 [ 530.778166][ T42] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 530.822672][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.843809][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.911571][ T58] hsr_slave_0: left promiscuous mode [ 530.922663][ T58] hsr_slave_1: left promiscuous mode [ 530.928763][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.941752][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.949809][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.949912][ T42] usb 1-1: device descriptor read/64, error -71 [ 530.958466][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.995559][ T58] veth1_macvtap: left promiscuous mode [ 531.006224][ T5193] Dev loop4: unable to read RDB block 7 [ 531.012602][ T58] veth0_macvtap: left promiscuous mode [ 531.018718][ T58] veth1_vlan: left allmulticast mode [ 531.025783][ T5193] loop4: unable to read partition table [ 531.056299][ T58] veth1_vlan: left promiscuous mode [ 531.062421][ T5193] loop4: partition table beyond EOD, truncated [ 531.078861][ T58] veth0_vlan: left promiscuous mode [ 531.092680][ T5891] usb usb36-port1: attempt power cycle [ 531.107354][T14440] SET target dimension over the limit! [ 531.177638][ T5193] Dev loop4: unable to read RDB block 7 [ 531.191703][ T5193] loop4: unable to read partition table [ 531.208005][ T5193] loop4: partition table beyond EOD, truncated [ 531.231629][ T42] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 531.289890][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 531.373778][ T42] usb 1-1: device descriptor read/64, error -71 [ 531.481950][ T42] usb usb1-port1: attempt power cycle [ 531.562025][ T58] team0 (unregistering): Port device team_slave_1 removed [ 531.584029][ T58] team0 (unregistering): Port device team_slave_0 removed [ 531.662624][ T5891] usb usb36-port1: unable to enumerate USB device [ 531.735302][T14449] syzkaller0: entered promiscuous mode [ 531.740786][T14449] syzkaller0: entered allmulticast mode [ 531.811415][T14463] syzkaller0: entered promiscuous mode [ 531.817217][T14463] syzkaller0: entered allmulticast mode [ 531.841542][ T42] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 531.863226][ T42] usb 1-1: device descriptor read/8, error -71 [ 531.919663][ T5193] Dev loop4: unable to read RDB block 7 [ 531.931571][ T5193] loop4: unable to read partition table [ 531.937396][ T5193] loop4: partition table beyond EOD, truncated [ 532.103626][ T42] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 532.142162][ T42] usb 1-1: device descriptor read/8, error -71 [ 532.181621][ T5821] Bluetooth: hci5: command tx timeout [ 532.262010][ T42] usb usb1-port1: unable to enumerate USB device [ 532.742861][ T1163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.008804][ T5193] Dev loop4: unable to read RDB block 7 [ 533.018162][ T5193] loop4: unable to read partition table [ 533.028362][ T5193] loop4: partition table beyond EOD, truncated [ 533.421716][ T5883] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 533.571562][ T5883] usb 5-1: device descriptor read/64, error -71 [ 533.841848][ T5883] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 533.910239][T14477] FAULT_INJECTION: forcing a failure. [ 533.910239][T14477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.924124][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.3.2861 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.924150][T14477] Tainted: [L]=SOFTLOCKUP [ 533.924158][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 533.924168][T14477] Call Trace: [ 533.924175][T14477] [ 533.924182][T14477] dump_stack_lvl+0xe8/0x150 [ 533.924212][T14477] should_fail_ex+0x412/0x560 [ 533.924241][T14477] prepare_alloc_pages+0x22a/0x650 [ 533.924271][T14477] __alloc_frozen_pages_noprof+0x12f/0x380 [ 533.924296][T14477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.924322][T14477] ? __pfx_policy_nodemask+0x10/0x10 [ 533.924349][T14477] ? __lock_acquire+0x6b5/0x2cf0 [ 533.924376][T14477] alloc_pages_mpol+0x232/0x4a0 [ 533.924404][T14477] vma_alloc_folio_noprof+0xea/0x210 [ 533.924430][T14477] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 533.924464][T14477] do_pte_missing+0x1656/0x3490 [ 533.924503][T14477] handle_mm_fault+0x1bec/0x3310 [ 533.924543][T14477] ? handle_mm_fault+0xee/0x3310 [ 533.924576][T14477] ? __pfx_handle_mm_fault+0x10/0x10 [ 533.924603][T14477] ? follow_page_pte+0x841/0x1450 [ 533.924637][T14477] ? __pfx_follow_page_pte+0x10/0x10 [ 533.924674][T14477] __get_user_pages+0x165b/0x29d0 [ 533.924722][T14477] __gup_longterm_locked+0xdcf/0x1630 [ 533.924754][T14477] ? gup_fast_fallback+0x181/0x22e0 [ 533.924777][T14477] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 533.924817][T14477] gup_fast_fallback+0x1d82/0x22e0 [ 533.924863][T14477] ? rcu_is_watching+0x15/0xb0 [ 533.924886][T14477] ? __pfx_gup_fast_fallback+0x10/0x10 [ 533.924910][T14477] ? is_valid_gup_args+0x11f/0x200 [ 533.924935][T14477] ? pin_user_pages_fast+0x4d/0xb0 [ 533.924960][T14477] rds_info_getsockopt+0x20e/0x4a0 [ 533.924986][T14477] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 533.925007][T14477] ? __might_fault+0xaf/0x130 [ 533.925026][T14477] ? rds_getsockopt+0x31d/0x500 [ 533.925049][T14477] ? __pfx_rds_getsockopt+0x10/0x10 [ 533.925074][T14477] do_sock_getsockopt+0x2d3/0x3f0 [ 533.925101][T14477] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 533.925126][T14477] ? __fget_files+0x3a0/0x420 [ 533.925148][T14477] ? __fget_files+0x2a/0x420 [ 533.925177][T14477] __x64_sys_getsockopt+0x1a4/0x240 [ 533.925209][T14477] do_syscall_64+0x14d/0xf80 [ 533.925224][T14477] ? trace_irq_disable+0x3b/0x150 [ 533.925247][T14477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.925264][T14477] ? clear_bhb_loop+0x40/0x90 [ 533.925284][T14477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.925302][T14477] RIP: 0033:0x7fc64659c799 [ 533.925318][T14477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.925333][T14477] RSP: 002b:00007fc6473fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 533.925351][T14477] RAX: ffffffffffffffda RBX: 00007fc646815fa0 RCX: 00007fc64659c799 [ 533.925363][T14477] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 533.925374][T14477] RBP: 00007fc6473fc090 R08: 0000200000000000 R09: 0000000000000000 [ 533.925386][T14477] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 533.925396][T14477] R13: 00007fc646816038 R14: 00007fc646815fa0 R15: 00007fc64693fa48 [ 533.925423][T14477] [ 534.244219][ T5883] usb 5-1: device descriptor read/64, error -71 [ 534.261615][ T5821] Bluetooth: hci5: command tx timeout [ 534.356069][ T5883] usb usb5-port1: attempt power cycle [ 534.662147][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.701615][ T5883] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 534.722117][ T5883] usb 5-1: device descriptor read/8, error -71 [ 534.961566][ T5883] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 534.982837][ T5883] usb 5-1: device descriptor read/8, error -71 [ 535.091952][ T5883] usb usb5-port1: unable to enumerate USB device [ 536.582822][ T1038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.594069][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.638411][T14491] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2866'. [ 536.650284][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 536.843825][T14491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2866'. [ 537.140867][T14508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2864'. [ 537.561151][T14508] bond11: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 537.605064][T14508] bond11 (unregistering): Released all slaves [ 537.631627][ T1210] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 537.793806][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 537.803944][ T1210] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 537.812712][ T1210] usb 2-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 537.831484][ T1210] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 537.840454][ T1210] usb 2-1: config 1 has no interface number 1 [ 537.881679][ T1210] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 537.919166][T14331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.936573][ T1210] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 537.952680][T14331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 537.967753][ T1210] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 537.990072][T14331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 537.997680][ T1210] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 538.010969][ T1210] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.030308][T14331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.042329][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.063912][ T58] IPVS: stop unused estimator thread 0... [ 538.082947][ T1210] usb 2-1: Product: syz [ 538.092340][ T1210] usb 2-1: Manufacturer: syz [ 538.096961][ T1210] usb 2-1: SerialNumber: syz [ 538.097192][T14529] syzkaller0: entered promiscuous mode [ 538.101866][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 538.107142][T14529] syzkaller0: entered allmulticast mode [ 538.343185][ T1210] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 538.370794][ T1210] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 538.419480][ T1210] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 538.508303][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.561683][ T1210] usb 2-1: USB disconnect, device number 92 [ 538.648233][ T6547] udevd[6547]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.822602][T14331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.850784][T14331] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.863532][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.870678][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.979303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.986442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.318017][T14565] netlink: 'syz.0.2876': attribute type 10 has an invalid length. [ 539.402417][T14567] Invalid logical block size (46022) [ 539.431189][T14567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2878'. [ 539.525317][T14331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.669096][T14565] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 539.677123][T14575] FAULT_INJECTION: forcing a failure. [ 539.677123][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 539.691053][T14575] CPU: 1 UID: 0 PID: 14575 Comm: syz.3.2881 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.691082][T14575] Tainted: [L]=SOFTLOCKUP [ 539.691088][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 539.691100][T14575] Call Trace: [ 539.691108][T14575] [ 539.691116][T14575] dump_stack_lvl+0xe8/0x150 [ 539.691146][T14575] should_fail_ex+0x412/0x560 [ 539.691176][T14575] should_failslab+0xa8/0x100 [ 539.691199][T14575] ? skb_ext_add+0x148/0x8f0 [ 539.691225][T14575] kmem_cache_alloc_noprof+0x87/0x650 [ 539.691253][T14575] skb_ext_add+0x148/0x8f0 [ 539.691281][T14575] ? __local_bh_enable_ip+0xd0/0x130 [ 539.691309][T14575] j1939_sk_sendmsg+0x6f3/0x1380 [ 539.691406][T14575] ? aa_sk_perm+0x6d5/0x900 [ 539.691442][T14575] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 539.691465][T14575] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.691490][T14575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.691511][T14575] ____sys_sendmsg+0x972/0x9f0 [ 539.691527][T14575] ? __lock_acquire+0x6b5/0x2cf0 [ 539.691562][T14575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.691589][T14575] ? import_iovec+0x73/0xa0 [ 539.691619][T14575] ___sys_sendmsg+0x2a5/0x360 [ 539.691643][T14575] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.691665][T14575] ? kstrtouint+0x6e/0xe0 [ 539.691710][T14575] ? __fget_files+0x2a/0x420 [ 539.691734][T14575] ? __fget_files+0x3a0/0x420 [ 539.691766][T14575] __sys_sendmmsg+0x27c/0x4e0 [ 539.691790][T14575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 539.691807][T14575] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 539.691850][T14575] ? ksys_write+0x242/0x270 [ 539.691872][T14575] ? __pfx_ksys_write+0x10/0x10 [ 539.691898][T14575] __x64_sys_sendmmsg+0xa0/0xc0 [ 539.691919][T14575] do_syscall_64+0x14d/0xf80 [ 539.691936][T14575] ? trace_irq_disable+0x3b/0x150 [ 539.691960][T14575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.691978][T14575] ? clear_bhb_loop+0x40/0x90 [ 539.691998][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.692015][T14575] RIP: 0033:0x7fc64659c799 [ 539.692032][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.692047][T14575] RSP: 002b:00007fc6473fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 539.692067][T14575] RAX: ffffffffffffffda RBX: 00007fc646815fa0 RCX: 00007fc64659c799 [ 539.692080][T14575] RDX: 0000000000000001 RSI: 0000200000003e40 RDI: 0000000000000004 [ 539.692091][T14575] RBP: 00007fc6473fc090 R08: 0000000000000000 R09: 0000000000000000 [ 539.692102][T14575] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 539.692113][T14575] R13: 00007fc646816038 R14: 00007fc646815fa0 R15: 00007fc64693fa48 [ 539.692141][T14575] [ 539.736461][T14545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.739582][T14565] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.056706][T14331] veth0_vlan: entered promiscuous mode [ 540.067023][T14331] veth1_vlan: entered promiscuous mode [ 540.184210][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 540.236210][T14589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2884'. [ 540.327651][T14331] veth0_macvtap: entered promiscuous mode [ 540.394141][T14331] veth1_macvtap: entered promiscuous mode [ 540.422902][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.487664][T14331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.543825][T14331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.618649][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.637622][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.653871][ T1210] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 540.698254][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.753352][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.852664][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 540.867364][ T1210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.895891][ T1210] usb 5-1: config 7 has an invalid interface number: 188 but max is 0 [ 540.920512][ T1210] usb 5-1: config 7 has no interface number 0 [ 540.934905][ T1210] usb 5-1: config 7 interface 188 has no altsetting 0 [ 540.945094][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.953799][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.967422][ T1210] usb 5-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 540.977417][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.998541][ T1210] usb 5-1: Product: syz [ 541.007446][ T1210] usb 5-1: Manufacturer: syz [ 541.018411][ T1210] usb 5-1: SerialNumber: syz [ 541.026254][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.043182][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.844793][T14634] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 541.891618][T14634] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 542.064352][T14636] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2897'. [ 542.083188][T14636] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2897'. [ 542.368455][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.413889][ T1210] uvcvideo 5-1:7.188: Found multiple Units with ID 1 [ 542.425225][ T1210] uvcvideo 5-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 542.435080][ T1210] uvcvideo 5-1:7.188: No valid video chain found. [ 542.445123][ T1210] usb 5-1: USB disconnect, device number 76 [ 542.782845][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.793472][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.794392][T14647] bond0: entered promiscuous mode [ 542.812558][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.852243][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.859819][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.899815][T14647] bond_slave_0: entered promiscuous mode [ 542.919702][T14647] bond_slave_1: entered promiscuous mode [ 542.950188][T14647] batadv0: entered promiscuous mode [ 542.980060][T14647] debugfs: 'hsr1' already exists in 'hsr' [ 542.991725][T14647] Cannot create hsr debugfs directory [ 543.175657][T14654] SET target dimension over the limit! [ 543.507310][T14665] kAFS: unable to lookup cell '' [ 543.627379][ T29] audit: type=1326 audit(1773213083.397:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 543.777585][ T29] audit: type=1326 audit(1773213083.397:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 543.835627][ T29] audit: type=1326 audit(1773213083.397:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 543.879633][ T5890] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 543.890650][ T29] audit: type=1326 audit(1773213083.397:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 543.921260][ T29] audit: type=1326 audit(1773213083.397:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 543.978941][ T29] audit: type=1326 audit(1773213083.407:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 544.047742][ T1163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.071638][ T29] audit: type=1326 audit(1773213083.407:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 544.094252][ T5890] usb 1-1: device descriptor read/64, error -71 [ 544.211602][ T29] audit: type=1326 audit(1773213083.407:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 544.234355][ T29] audit: type=1326 audit(1773213083.407:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 544.273476][ T29] audit: type=1326 audit(1773213083.407:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11b259c799 code=0x7ffc0000 [ 544.273803][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.332141][ T1163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.401893][ T5890] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 544.442435][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'. [ 544.485370][ T1163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.541825][ T5890] usb 1-1: device descriptor read/64, error -71 [ 544.575205][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 544.605116][ T1163] team0: Port device netdevsim0 removed [ 544.611135][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.634928][T14648] chnl_net:caif_netlink_parms(): no params data found [ 544.652181][ T5890] usb usb1-port1: attempt power cycle [ 544.901580][ T5825] Bluetooth: hci2: command tx timeout [ 544.964440][T14648] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.985516][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.993047][T14648] bridge_slave_0: entered allmulticast mode [ 545.001093][T14648] bridge_slave_0: entered promiscuous mode [ 545.001131][ T5890] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 545.009215][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.021811][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.032331][T14648] bridge_slave_1: entered allmulticast mode [ 545.041552][T14648] bridge_slave_1: entered promiscuous mode [ 545.097178][ T5890] usb 1-1: device descriptor read/8, error -71 [ 545.142660][T14648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.164172][T14648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.283807][T14648] team0: Port device team_slave_0 added [ 545.391578][ T5890] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 545.412522][ T5890] usb 1-1: device descriptor read/8, error -71 [ 545.412770][T14648] team0: Port device team_slave_1 added [ 545.524001][ T5890] usb usb1-port1: unable to enumerate USB device [ 545.585332][T14648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.592470][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.623510][T14648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.797393][ T1163] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 545.801538][ T5890] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 545.948972][ T1163] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 545.957435][ T1163] bridge0 (unregistering): left promiscuous mode [ 545.983286][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.996248][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 546.005785][ T5890] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 546.015343][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.015389][ T1163] bond9 (unregistering): (slave bridge1): Releasing active interface [ 546.031827][ T1163] bridge1 (unregistering): left allmulticast mode [ 546.032011][ T5890] usb 2-1: Product: syz [ 546.042683][ T5890] usb 2-1: Manufacturer: syz [ 546.048121][ T5890] usb 2-1: SerialNumber: syz [ 546.054742][ T5890] usb 2-1: config 0 descriptor?? [ 546.062801][ T5890] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 546.073385][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.084469][ T5890] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 546.093236][ T5890] usb 2-1: media controller created [ 546.108049][ T1163] bond0 (unregistering): left promiscuous mode [ 546.111559][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.114400][ T1163] bond_slave_0: left promiscuous mode [ 546.128825][ T1163] bond_slave_1: left promiscuous mode [ 546.136310][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.148485][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.158818][ T1163] bond0 (unregistering): Released all slaves [ 546.172264][ T1163] bond1 (unregistering): (slave veth3): Releasing active interface [ 546.180492][ T5890] DVB: Unable to find symbol tda10046_attach() [ 546.187440][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.200387][ T1163] bond1 (unregistering): Released all slaves [ 546.202235][ T5890] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 546.219262][ T5890] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 546.230307][ T1163] bond2 (unregistering): Released all slaves [ 546.247510][ T1163] bond3 (unregistering): Released all slaves [ 546.266845][ T1163] bond4 (unregistering): (slave veth5): Releasing active interface [ 546.276934][ T1163] bond4 (unregistering): Released all slaves [ 546.286266][ T5890] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 546.298497][ T1163] bond5 (unregistering): (slave veth7): Releasing active interface [ 546.332862][ T1163] bond5 (unregistering): Released all slaves [ 546.334471][ T5890] usb 2-1: USB disconnect, device number 93 [ 546.360974][ T1163] bond6 (unregistering): Released all slaves [ 546.401086][ T1163] bond7 (unregistering): Released all slaves [ 546.418972][ T1163] bond8 (unregistering): Released all slaves [ 546.435932][ T1163] bond9 (unregistering): Released all slaves [ 546.451038][ T1163] bond10 (unregistering): Released all slaves [ 546.465877][T14648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.474735][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.501044][T14648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.613045][ T1163] tipc: Disabling bearer [ 546.642730][ T1163] tipc: Left network mode [ 546.755576][T14726] netlink: 'syz.4.2922': attribute type 20 has an invalid length. [ 546.805301][T14648] hsr_slave_0: entered promiscuous mode [ 546.825161][T14648] hsr_slave_1: entered promiscuous mode [ 546.833968][T14648] debugfs: 'hsr0' already exists in 'hsr' [ 546.839864][T14648] Cannot create hsr debugfs directory [ 546.981509][ T5825] Bluetooth: hci2: command tx timeout [ 547.074309][ T1163] ------------[ cut here ]------------ [ 547.079831][ T1163] Have pending ack frames! [ 547.084321][ T1163] WARNING: net/mac80211/main.c:1722 at ieee80211_free_ack_frame+0x14/0x40, CPU#1: kworker/u8:8/1163 [ 547.095305][ T1163] Modules linked in: [ 547.099596][ T1163] CPU: 1 UID: 0 PID: 1163 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.110857][ T1163] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.115380][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 547.125511][ T1163] Workqueue: netns cleanup_net [ 547.130396][ T1163] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 547.136638][ T1163] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 43 87 af f6 48 8d 3d cc 94 0c 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 d8 94 5e fe 31 c0 [ 547.156792][ T1163] RSP: 0018:ffffc90005547630 EFLAGS: 00010293 [ 547.163175][ T1163] RAX: ffffffff8b16166d RBX: ffff88804cd95780 RCX: ffff88802846db80 [ 547.171159][ T1163] RDX: 0000000000000000 RSI: ffff88804cd95780 RDI: ffffffff9022ab40 [ 547.179200][ T1163] RBP: ffffc90005547738 R08: ffffc900055476af R09: 0000000000000000 [ 547.187218][ T1163] R10: ffffc900055476a0 R11: ffffffff8b161660 R12: ffffc900055476a0 [ 547.195247][ T1163] R13: ffff88805917b470 R14: 1ffff92000aa8ed0 R15: 0000000000000001 [ 547.203429][ T1163] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 547.212567][ T1163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.219163][ T1163] CR2: 00007f86883456b8 CR3: 0000000062aa8000 CR4: 00000000003526f0 [ 547.227517][ T1163] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000080083 [ 547.235830][ T1163] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 547.245107][ T1163] Call Trace: [ 547.248401][ T1163] [ 547.251337][ T1163] idr_for_each+0x1c6/0x2a0 [ 547.256280][ T1163] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 547.262650][ T1163] ? __pfx_idr_for_each+0x10/0x10 [ 547.267940][ T1163] ? kfree+0x1c1/0x630 [ 547.272307][ T1163] ? kobject_put+0x26d/0x560 [ 547.277136][ T1163] ieee80211_free_hw+0x44/0x3d0 [ 547.282322][ T1163] mac80211_hwsim_del_radio+0x2f3/0x490 [ 547.288255][ T1163] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 547.294847][ T1163] ? hwsim_exit_net+0xd11/0xfa0 [ 547.299778][ T1163] ? __local_bh_enable_ip+0xd0/0x130 [ 547.307189][ T1163] hwsim_exit_net+0xede/0xfa0 [ 547.312594][ T1163] ? hwsim_exit_net+0x336/0xfa0 [ 547.317463][ T1163] ? __pfx_hwsim_exit_net+0x10/0x10 [ 547.323189][ T1163] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 547.329540][ T1163] ops_undo_list+0x49f/0x940 [ 547.334562][ T1163] ? __pfx_ops_undo_list+0x10/0x10 [ 547.339698][ T1163] ? idr_destroy+0x218/0x290 [ 547.344808][ T1163] ? do_raw_spin_unlock+0xf5/0x210 [ 547.349945][ T1163] cleanup_net+0x56b/0x800 [ 547.354845][ T1163] ? __pfx_cleanup_net+0x10/0x10 [ 547.359812][ T1163] ? process_scheduled_works+0xa25/0x1830 [ 547.365659][ T1163] ? process_scheduled_works+0xa25/0x1830 [ 547.371399][ T1163] process_scheduled_works+0xb02/0x1830 [ 547.377078][ T1163] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.383130][ T1163] ? assign_work+0x3d5/0x5e0 [ 547.387738][ T1163] worker_thread+0xa50/0xfc0 [ 547.392403][ T1163] kthread+0x388/0x470 [ 547.396519][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 547.401725][ T1163] ? __pfx_kthread+0x10/0x10 [ 547.406328][ T1163] ret_from_fork+0x51e/0xb90 [ 547.410960][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 547.416147][ T1163] ? __switch_to+0xc7d/0x1450 [ 547.420857][ T1163] ? __pfx_kthread+0x10/0x10 [ 547.425519][ T1163] ret_from_fork_asm+0x1a/0x30 [ 547.430350][ T1163] [ 547.433422][ T1163] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 547.440709][ T1163] CPU: 1 UID: 0 PID: 1163 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.451735][ T1163] Tainted: [L]=SOFTLOCKUP [ 547.456063][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 547.466120][ T1163] Workqueue: netns cleanup_net [ 547.470933][ T1163] Call Trace: [ 547.474216][ T1163] [ 547.477147][ T1163] vpanic+0x56c/0xa60 [ 547.481154][ T1163] ? __pfx__printk+0x10/0x10 [ 547.485750][ T1163] ? __pfx_vpanic+0x10/0x10 [ 547.490264][ T1163] ? is_bpf_text_address+0x292/0x2b0 [ 547.495560][ T1163] ? is_bpf_text_address+0x26/0x2b0 [ 547.500770][ T1163] panic+0xc5/0xd0 [ 547.504489][ T1163] ? __pfx_panic+0x10/0x10 [ 547.508912][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 547.513847][ T1163] __warn+0x315/0x4f0 [ 547.517819][ T1163] ? ieee80211_free_ack_frame+0x14/0x40 [ 547.523354][ T1163] ? ieee80211_free_ack_frame+0x14/0x40 [ 547.528889][ T1163] __report_bug+0x29a/0x540 [ 547.533452][ T1163] ? __pfx_stack_trace_save+0x10/0x10 [ 547.538817][ T1163] ? ieee80211_free_ack_frame+0x14/0x40 [ 547.544358][ T1163] ? __pfx___report_bug+0x10/0x10 [ 547.549388][ T1163] ? mac80211_hwsim_del_radio+0x2dc/0x490 [ 547.555096][ T1163] ? hwsim_exit_net+0xede/0xfa0 [ 547.559938][ T1163] ? ops_undo_list+0x49f/0x940 [ 547.564694][ T1163] ? cleanup_net+0x56b/0x800 [ 547.569298][ T1163] ? process_scheduled_works+0xb02/0x1830 [ 547.575011][ T1163] ? worker_thread+0xa50/0xfc0 [ 547.579768][ T1163] ? kthread+0x388/0x470 [ 547.584000][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 547.588937][ T1163] report_bug_entry+0x19a/0x290 [ 547.593784][ T1163] ? ieee80211_free_ack_frame+0x14/0x40 [ 547.599322][ T1163] ? ieee80211_free_ack_frame+0x19/0x40 [ 547.604854][ T1163] handle_bug+0xce/0x200 [ 547.609087][ T1163] exc_invalid_op+0x1a/0x50 [ 547.613578][ T1163] asm_exc_invalid_op+0x1a/0x20 [ 547.618416][ T1163] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 547.624560][ T1163] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 43 87 af f6 48 8d 3d cc 94 0c 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 d8 94 5e fe 31 c0 [ 547.644156][ T1163] RSP: 0018:ffffc90005547630 EFLAGS: 00010293 [ 547.650216][ T1163] RAX: ffffffff8b16166d RBX: ffff88804cd95780 RCX: ffff88802846db80 [ 547.658174][ T1163] RDX: 0000000000000000 RSI: ffff88804cd95780 RDI: ffffffff9022ab40 [ 547.666135][ T1163] RBP: ffffc90005547738 R08: ffffc900055476af R09: 0000000000000000 [ 547.674093][ T1163] R10: ffffc900055476a0 R11: ffffffff8b161660 R12: ffffc900055476a0 [ 547.682056][ T1163] R13: ffff88805917b470 R14: 1ffff92000aa8ed0 R15: 0000000000000001 [ 547.690021][ T1163] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 547.696079][ T1163] ? ieee80211_free_ack_frame+0xd/0x40 [ 547.701535][ T1163] idr_for_each+0x1c6/0x2a0 [ 547.706034][ T1163] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 547.712090][ T1163] ? __pfx_idr_for_each+0x10/0x10 [ 547.717114][ T1163] ? kfree+0x1c1/0x630 [ 547.721170][ T1163] ? kobject_put+0x26d/0x560 [ 547.725753][ T1163] ieee80211_free_hw+0x44/0x3d0 [ 547.730610][ T1163] mac80211_hwsim_del_radio+0x2f3/0x490 [ 547.736159][ T1163] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 547.742223][ T1163] ? hwsim_exit_net+0xd11/0xfa0 [ 547.747071][ T1163] ? __local_bh_enable_ip+0xd0/0x130 [ 547.752439][ T1163] hwsim_exit_net+0xede/0xfa0 [ 547.757105][ T1163] ? hwsim_exit_net+0x336/0xfa0 [ 547.761945][ T1163] ? __pfx_hwsim_exit_net+0x10/0x10 [ 547.767134][ T1163] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 547.772935][ T1163] ops_undo_list+0x49f/0x940 [ 547.777531][ T1163] ? __pfx_ops_undo_list+0x10/0x10 [ 547.782638][ T1163] ? idr_destroy+0x218/0x290 [ 547.787226][ T1163] ? do_raw_spin_unlock+0xf5/0x210 [ 547.792341][ T1163] cleanup_net+0x56b/0x800 [ 547.796764][ T1163] ? __pfx_cleanup_net+0x10/0x10 [ 547.801703][ T1163] ? process_scheduled_works+0xa25/0x1830 [ 547.807416][ T1163] ? process_scheduled_works+0xa25/0x1830 [ 547.813127][ T1163] process_scheduled_works+0xb02/0x1830 [ 547.818687][ T1163] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.824665][ T1163] ? assign_work+0x3d5/0x5e0 [ 547.829252][ T1163] worker_thread+0xa50/0xfc0 [ 547.833853][ T1163] kthread+0x388/0x470 [ 547.837913][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 547.843017][ T1163] ? __pfx_kthread+0x10/0x10 [ 547.847601][ T1163] ret_from_fork+0x51e/0xb90 [ 547.852188][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 547.857304][ T1163] ? __switch_to+0xc7d/0x1450 [ 547.862006][ T1163] ? __pfx_kthread+0x10/0x10 [ 547.866591][ T1163] ret_from_fork_asm+0x1a/0x30 [ 547.871361][ T1163] [ 547.874623][ T1163] Kernel Offset: disabled [ 547.878940][ T1163] Rebooting in 86400 seconds..