last executing test programs: 1m1.042446898s ago: executing program 1 (id=8691): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='setgroups\x00', &(0x7f0000000200)='setgro=ps\x00']}) 1m0.874397917s ago: executing program 1 (id=8694): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) (fail_nth: 5) 1m0.152296071s ago: executing program 1 (id=8696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000002000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 59.792261146s ago: executing program 1 (id=8699): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000400, r6, &(0x7f0000000440)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x40004) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 59.487485283s ago: executing program 1 (id=8702): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa6"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0x1}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x40000000) r4 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x20000000) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x5c, 0x5, 0x0) 58.607907085s ago: executing program 1 (id=8704): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='\a', 0x1}], 0x1}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 57.749577186s ago: executing program 32 (id=8704): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='\a', 0x1}], 0x1}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 11.83183102s ago: executing program 2 (id=8788): r0 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4001}) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) creat(&(0x7f0000000200)='./file0\x00', 0x12) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fchown(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4001}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) (async) creat(&(0x7f0000000200)='./file0\x00', 0x12) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) fchown(r3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) (async) 10.799435299s ago: executing program 2 (id=8792): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r5, &(0x7f0000000100)=""/107, 0x6b) write$nci(r5, &(0x7f0000000100)=ANY=[], 0x4) writev(r5, &(0x7f0000001bc0)=[{&(0x7f00000001c0)="018467aa71cce853a00a6f97ce40cdb242741d9cde30915f2637d3e581a0e5a97af7cc1acff20695ed86ccc76c70bd", 0x2f}], 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) poll(&(0x7f0000000240)=[{r2, 0x421a}], 0x1, 0x7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) umount2(&(0x7f0000000640)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000001640)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x80042, 0x20262076a4e6d5e) write$cgroup_int(r6, &(0x7f0000000040)=0x140000000000009, 0x12) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 10.264245253s ago: executing program 2 (id=8795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) syz_open_procfs(0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) shmdt(0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r6, r7, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 9.931299789s ago: executing program 2 (id=8798): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109025400010107c001090400030202060081052406000005240030d30d240f010b00000001000f00031524120600a317a88b045e4f01a607c0ffcb7e392a0424b6c0fc8a13e209058202ff03040a02090503020004030bff"], &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "ebf727f3374968b2", "9d91eac1b4cf52f54342bb8e40d57223", "c0ebcb19", "56a55bc1443e50de"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 9.589825227s ago: executing program 3 (id=8800): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x7ffffffe, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xff72, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.136003142s ago: executing program 4 (id=8807): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x0, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400281, 0x49) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './cgroup\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x7b, 0xbd5, 0x1, {0x2, @pix_mp={0xe5, 0xd7a0, 0x494e4f4b, 0x8, 0xa, [{0x4, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0xa88}, {0xae, 0x1}, {0x10001, 0x200}, {0x3ff, 0x5ecd}, {0x7fffffff, 0x6}], 0x1, 0x2b, 0x8}}, 0x400}) getdents64(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000001940)}, 0x5}], 0x1, 0x2102, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}]}}], 0x40000000000010e, 0x8001) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r5, 0x0, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, r7}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011a87e002191691e36d955884ee654287bbae488386bb3b39994fc6d2bee6ff477b0487f6d5a56fe89e3ffaa39fc89784e0b5cf707588f494cefccdb9fe1aa50c61ec59f85924c2bea955a0f55aa5cbdc8367c9e62c680588c228a97ca6a9c6c31a0c8a3986e1f1f52c1671306a23d236b083286607f1c7bf8c70744667a6e1d9536d9431b3c5170b1e609cac67e198b127e3bcbecf15d0f8dada6e71d00d58e021f14b161313ddf83294865c6dba503a3db"], 0x0) 6.570557616s ago: executing program 2 (id=8809): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000880)={[0x200000000]}, 0x8, 0x800) io_setup(0x206, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x200000000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000180), 0xe, 0x2) syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 5.350079005s ago: executing program 3 (id=8811): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x2, 0x0, 0x0, 0x4000000, 0x1}}, 0xe4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_ACT={0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x0, 0x8000, 0x4}, 0x48) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000280)=[r8]) r9 = dup3(r7, r2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0xd8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a40)="6457d0"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x141800) 5.307339402s ago: executing program 4 (id=8812): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x74, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x50, 0x8, "c729579cf7b7f1a146540c31ec4214054013180bfd1a64769b49ecc056b7a69e2defb57573dcf55afb21df87670dc9e74175c3745fb8c79dd23d4af920f893cfd9cf41e56e080be718450236"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8055) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 3.827723198s ago: executing program 0 (id=8815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014a8"], 0x70}, 0x1, 0xffffffa1, 0x0, 0xc1}, 0x0) 3.028298046s ago: executing program 0 (id=8816): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r3 = openat$nullb(0xffffff9c, &(0x7f00000003c0), 0xe00, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000400)) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x1, &(0x7f0000000040)={0xf, "c6c1f7b5109921b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) (async) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f0000000080)="0d32818e", 0x4, 0x300000000000000}]) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x5422, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000200)={0x4, 0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000100)=""/119, 0x77}], &(0x7f00000001c0)=[0x1b, 0x1, 0xf342, 0x80000000]}, 0x20) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000040)={0x3, 0x40, 0x80, &(0x7f0000001440)=[0x3cd, 0x99, 0x8000000000000000, 0x8000, 0x95f, 0xffffffffffff0001, 0x5, 0x4, 0x8000, 0x400, 0x8, 0xfffffffffffffabb, 0x1e, 0x8, 0x6b, 0xffffffffffffff00, 0x8, 0xa03e, 0x69, 0x569, 0x7fffffffffffffff, 0x2, 0xffffffffffffffff, 0x7, 0x0, 0x8f8, 0x9, 0x0, 0x390e, 0xfffffffffffffffc, 0x1, 0x9, 0x7fffffffffffffff, 0x8, 0x2, 0x4000000000000, 0xffffffff, 0x0, 0x100000001, 0xa, 0x6, 0x9, 0x2bc0, 0x3, 0xffff, 0x81, 0x6, 0x10000, 0x5, 0x8, 0x101, 0x5, 0xffffffff80000000, 0x101, 0x78a, 0xfffffffffffffffb, 0x6, 0x7, 0x1, 0x1ff, 0x2, 0xfffffffffffffff8, 0x6f98, 0x34c0, 0x80000000, 0xd, 0x0, 0x3, 0x100, 0x3000, 0x10001, 0x4, 0x1, 0x6, 0x8, 0x401, 0x9, 0x80, 0xfffffffffffffffc, 0x1, 0x3, 0xb94b, 0x0, 0x80000001, 0x8, 0x1000, 0x8, 0x1ff, 0xb, 0xb, 0x2, 0x7df7ec41, 0x3, 0x8000000000000000, 0xff, 0x9931, 0x5, 0x6, 0xc, 0x2, 0x2, 0xf5, 0x2400000000000000, 0x5, 0x8, 0x6, 0x6, 0xfffffffffffffffc, 0x7, 0x5, 0x7d1, 0x401, 0xca, 0xa, 0xc, 0x81, 0x8, 0x8000000000000001, 0x9, 0x5, 0x100, 0x100000000, 0x2, 0x80, 0x5, 0x5, 0xfffffffffffff800, 0x2]}) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="090000000000000000000000009786f95c000000d3a18e7c738b85f1e32860c9ea0abe65e584bfe8905a2c481f481db82c2333c5da1c9bbc003b5a9ecb5c6edcb5acfab80cb74c6150d13e0bf7b8458df38263c493eb9df81f3849c8543cf1ab186e6b46f04199c7c0814ef925ac0dbd290755b97dac9f082018a8fcef1fdd3e5277f5ff2d8106c1e65b4ab4ceec82e5bf152c5f12033719891537cd6650", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000030000000300"/28], 0x50) 3.003813655s ago: executing program 4 (id=8817): openat$ptp0(0xffffffffffffff9c, 0x0, 0xc42, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000002000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x30, r6, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x4000805) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2.251389684s ago: executing program 5 (id=8820): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x90}]}, 0x2c}}, 0x0) r3 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x40002, 0x0) pidfd_send_signal(r3, 0x39, &(0x7f0000000040)={0x35, 0x3, 0x5d7}, 0x0) 2.201191427s ago: executing program 2 (id=8821): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xff72, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.944917808s ago: executing program 0 (id=8822): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x0, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400281, 0x49) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './cgroup\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x7b, 0xbd5, 0x1, {0x2, @pix_mp={0xe5, 0xd7a0, 0x494e4f4b, 0x8, 0xa, [{0x4, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0xa88}, {0xae, 0x1}, {0x10001, 0x200}, {0x3ff, 0x5ecd}, {0x7fffffff, 0x6}], 0x1, 0x2b, 0x8}}, 0x400}) getdents64(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000001940)}, 0x5}], 0x1, 0x2102, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}]}}], 0x40000000000010e, 0x8001) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r5, 0x0, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, r7}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011a87e002191691e36d955884ee654287bbae488386bb3b39994fc6d2bee6ff477b0487f6d5a56fe89e3ffaa39fc89784e0b5cf707588f494cefccdb9fe1aa50c61ec59f85924c2bea955a0f55aa5cbdc8367c9e62c680588c228a97ca6a9c6c31a0c8a3986e1f1f52c1671306a23d236b083286607f1c7bf8c70744667a6e1d9536d9431b3c5170b1e609cac67e198b127e3bcbecf15d0f8dada6e71d00d58e021f14b161313ddf83294865c6dba503a3db"], 0x0) 1.576687654s ago: executing program 5 (id=8823): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061, 0x4000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.507151889s ago: executing program 3 (id=8824): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5cabb", 0x4a}, {&(0x7f0000000040)="f583", 0x2}, {&(0x7f0000000180)="edd9041e7dd2ad65c24790ccddba4a8069e9", 0x12}, {&(0x7f0000001500)="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", 0xf9f}, {&(0x7f0000000200)="c680", 0x2}, {&(0x7f00000001c0)="5b8e", 0x2}], 0x6) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.016437307s ago: executing program 5 (id=8825): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}]}, 0x34}}, 0x0) r5 = epoll_create1(0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0)={0x60000015}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x37, 0x30, {{0xa, 0x4, 0x1, 0x25, 0x28, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @private=0xa010100, {[@rr={0x7, 0xb, 0x70, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0x6, "1e5f30a7"}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="48010000100013070000000000000000ee880000000000000000000000000001200100000000000000000df7ade6d98304fd2200000000000200"/73, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000023500000a000000000000000c001c00", @ANYRES32=r11, @ANYBLOB="060000004c0014007368613100"/80], 0x148}}, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x40, 0x6, 0x3, {{0x16, 0x4, 0x0, 0x3, 0x58, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x13, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x43}]}, @noop, @end, @ssrr={0x89, 0x2b, 0x8e, [@local, @local, @local, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x200, 0x4, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0xab, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop, @timestamp={0x44, 0x14, 0xc5, 0x0, 0x5, [0x0, 0x2, 0x29a4, 0x200]}, @rr={0x7, 0x23, 0x3d, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @remote, @loopback, @local, @loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0x7, [{@loopback, 0x92c}, {@loopback, 0x3}, {@private=0xa010101, 0xfffffffa}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}]}, @rr={0x7, 0x17, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x154, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) setrlimit(0x5, &(0x7f0000000080)={0xff, 0x5}) 933.096727ms ago: executing program 4 (id=8826): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0xfe, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x0, 0x4}]}, 0x60}, 0x1, 0x7}, 0x0) 666.608365ms ago: executing program 3 (id=8827): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @buffer={0xd00, 0x0, 0x0}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) 656.717682ms ago: executing program 0 (id=8828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000040000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}}, 0x0) 555.818611ms ago: executing program 4 (id=8829): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000050000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 555.219237ms ago: executing program 5 (id=8830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) unshare(0x2c060000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000810000100dcbd7000fbdbdf0a00000000", @ANYRES32=0x0, @ANYBLOB="8a430100000000001800168014000180100002009e000000a90400002f05000014000300776c616e300000000000000000000000050011009a000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}, 0x1, 0x1d0}, 0x0) 437.107512ms ago: executing program 3 (id=8831): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 394.735813ms ago: executing program 4 (id=8832): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x300}, 0x58) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060108000034e40000000001000000050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a6e65742c6e6574000000000c000780050014000d000000a5668ebe4260a28673f864f9fa7616ca9393cc306c33920c578ccb3710474d988a86e1b8954a089495883767be9bca6517a220a439d07392fcbff9bafe9bfa31f0564a41a60d35000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a'], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x85494000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x66be, &(0x7f0000000600)={0x0, 0x31ab, 0x1535, 0x0, 0x1a}, &(0x7f00000005c0), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, 0x0, 0xf3ebace019453e2e) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x22141, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 296.051839ms ago: executing program 0 (id=8833): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x300, 0x0, 0x34324152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 295.550591ms ago: executing program 5 (id=8834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010025bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400030a000008003a"], 0x30}}, 0x4000014) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000000) (async) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="ebe3a0e9796cfdfc7e0000f4e376fdba128280b372219d202e748e40de1c190000e1efd7e0054a863f3d5cfe6cb55b5bb5d04c3e1b4618e8ee6afdaa1a8baa639fa6060b7c79f69530c64f7788c8617f31a56b440cc4334f03ad616bc4636fee1e0cd701a61fff66d37cf9d90d3a01197b9cc99da403cea5ee9649e8d94c0b0aa7429bde83e1f659966212570a", 0x8d}, {&(0x7f00000002c0)="643751c9602489f32d53dd815ba41d3d12dc7fff31817c6cc99fb2408a8926d7c1b70729b2e13b03c93566f5cefa6f88dd614f", 0x33}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) (async) recvmmsg$unix(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)=""/14, 0xe}, {&(0x7f0000000cc0)=""/178, 0xb2}], 0x2}}], 0x1, 0x10000, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x80000045}) (async) syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x0) 225.481478ms ago: executing program 3 (id=8835): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0xc000) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r3) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000003c0)={0xe, r0, 'id1\x00'}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 153.635656ms ago: executing program 0 (id=8836): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) getpid() getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x10041) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 0s ago: executing program 5 (id=8837): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5cabb", 0x4a}, {&(0x7f0000000040)="f583", 0x2}, {&(0x7f0000001500)="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", 0xfa0}, {&(0x7f0000000200)="c680", 0x2}, {&(0x7f00000001c0)="5b8e", 0x2}], 0x5) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): 1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.052282][ T30] audit: type=1326 audit(1767711427.206:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.113846][ T30] audit: type=1326 audit(1767711427.206:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.176119][ T30] audit: type=1326 audit(1767711427.206:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.252036][ T30] audit: type=1326 audit(1767711427.206:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.341881][ T30] audit: type=1326 audit(1767711427.206:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.2.8522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2195.424298][ T1995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8525'. [ 2195.695508][ T1997] syzkaller1: entered promiscuous mode [ 2195.701845][ T1997] syzkaller1: entered allmulticast mode [ 2195.810215][T24752] usb 5-1: USB disconnect, device number 86 [ 2196.094502][T24752] usb 1-1: USB disconnect, device number 46 [ 2196.526856][T24758] usb 4-1: USB disconnect, device number 9 [ 2197.071735][T21126] net_ratelimit: 25 callbacks suppressed [ 2197.071763][T21126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.243816][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2197.251154][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2198.115293][T21126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.273787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2198.280950][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2198.290907][T24758] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2198.563314][ T2030] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2198.679995][T24758] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.714492][T24758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2199.081779][T24758] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2199.145111][T24758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.155701][T21126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.314211][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2199.321675][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2199.520152][T24758] usb 5-1: Product: syz [ 2199.530579][T24758] usb 5-1: Manufacturer: syz [ 2199.540467][T24758] usb 5-1: SerialNumber: syz [ 2199.558997][T24758] usb 5-1: config 0 descriptor?? [ 2199.637730][T24758] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2199.659747][ T2040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 2199.692109][T24758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2199.724612][T24758] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2199.724976][ T2040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 2199.748974][T24758] usb 5-1: media controller created [ 2199.784751][T24758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2199.979141][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 2200.035751][T24758] DVB: Unable to find symbol tda10046_attach() [ 2200.042005][T24758] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2200.131003][T24758] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2200.172840][T24758] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2200.204579][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.371318][T24758] usb 5-1: USB disconnect, device number 87 [ 2200.788190][ T2052] kernel read not supported for file /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (pid: 2052 comm: syz.1.8538) [ 2200.829797][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2200.829817][ T30] audit: type=1800 audit(1767711433.746:1211): pid=2052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8538" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="mqueue" ino=168784 res=0 errno=0 [ 2201.043356][ T2058] kernel read not supported for file /cpuacct.usage_percpu_user (pid: 2058 comm: syz.1.8538) [ 2201.113674][ T30] audit: type=1800 audit(1767711434.016:1212): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8538" name="cpuacct.usage_percpu_user" dev="mqueue" ino=168799 res=0 errno=0 [ 2201.348943][ T2061] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2201.453099][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8544'. [ 2201.827271][ T2078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8549'. [ 2201.874331][T21767] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 2201.904192][T21767] bond0: active interface up! [ 2201.977187][T21767] bond7: (slave macvlan31): link status definitely up, 10000 Mbps full duplex [ 2201.979716][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2202.001037][T21767] bond7: active interface up! [ 2202.038203][ T2087] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8552'. [ 2202.166250][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 2202.175007][ T5814] usb 4-1: config 242 has an invalid interface number: 208 but max is 2 [ 2202.192776][ T5814] usb 4-1: config 242 contains an unexpected descriptor of type 0x2, skipping [ 2202.204466][T25934] net_ratelimit: 8 callbacks suppressed [ 2202.204488][T25934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.219187][ T5814] usb 4-1: config 242 has 1 interface, different from the descriptor's value: 3 [ 2202.219226][T25934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.233835][ T5814] usb 4-1: config 242 has no interface number 0 [ 2202.239561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.253303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.269457][ T2091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8554'. [ 2202.278755][ T5814] usb 4-1: config 242 interface 208 altsetting 76 endpoint 0x1 has invalid maxpacket 12006, setting to 1024 [ 2202.284861][ T2092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8554'. [ 2202.321290][ T5814] usb 4-1: config 242 interface 208 altsetting 76 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2202.332338][ T5814] usb 4-1: config 242 interface 208 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 2202.344762][ T5814] usb 4-1: config 242 interface 208 altsetting 76 has a duplicate endpoint with address 0x8, skipping [ 2202.357288][T21126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.367119][ T5814] usb 4-1: config 242 interface 208 altsetting 76 has a duplicate endpoint with address 0xA, skipping [ 2202.378747][ T5814] usb 4-1: config 242 interface 208 altsetting 76 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 2202.392742][ T5814] usb 4-1: config 242 interface 208 has no altsetting 0 [ 2202.403478][ T5814] usb 4-1: New USB device found, idVendor=16c0, idProduct=09b0, bcdDevice=9f.5c [ 2202.414178][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.423355][ T5814] usb 4-1: Product: syz [ 2202.428388][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 2202.428522][ T5814] usb 4-1: Manufacturer: syz [ 2202.437755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2202.437999][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2202.447531][ T5814] usb 4-1: SerialNumber: syz [ 2202.466554][ T2074] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2202.712415][ T2105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.780253][ T5814] cp210x 4-1:242.208: cp210x converter detected [ 2202.792369][ T5814] cp210x 4-1:242.208: failed to get vendor val 0x370b size 1: -71 [ 2202.809164][ T5814] cp210x 4-1:242.208: querying part number failed [ 2202.814098][ T2105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.830525][ T2105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.862060][ T5814] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2202.876143][ T2110] syzkaller0: entered promiscuous mode [ 2202.885574][ T2110] syzkaller0: entered allmulticast mode [ 2202.946030][ T5814] usb 4-1: USB disconnect, device number 10 [ 2202.986831][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2203.004404][ T5814] cp210x 4-1:242.208: device disconnected [ 2203.094392][ T5970] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2203.280336][ T2115] tipc: Enabled bearer , priority 0 [ 2203.293942][ T2109] tipc: Resetting bearer [ 2203.401778][ T2109] tipc: Disabling bearer [ 2203.540421][ T5970] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2203.617770][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.704090][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2203.724506][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2203.799118][ T5970] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2203.828711][ T5970] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2203.854904][ T5970] usb 2-1: Manufacturer: syz [ 2203.874405][ T5970] usb 2-1: config 0 descriptor?? [ 2204.298989][ T5970] appleir 0003:05AC:8243.00A2: unknown main item tag 0x0 [ 2204.389455][ T2137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8570'. [ 2204.414519][ T5970] appleir 0003:05AC:8243.00A2: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2204.581106][ T2140] netlink: 'syz.4.8569': attribute type 7 has an invalid length. [ 2204.657179][ T2140] netlink: 'syz.4.8569': attribute type 8 has an invalid length. [ 2204.938907][ T2140] __nla_validate_parse: 1 callbacks suppressed [ 2204.939008][ T2140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8569'. [ 2205.503861][T21126] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2205.684063][T21126] usb 1-1: Using ep0 maxpacket: 8 [ 2205.709626][T21126] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.729906][T24758] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 2205.772674][T21126] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2205.862250][T21126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2205.886277][T21126] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2205.961994][T21126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.006244][T21126] usb 1-1: config 0 descriptor?? [ 2206.441572][T21126] steelseries 0003:1038:1410.00A3: item fetching failed at offset 3/5 [ 2206.473117][T21126] steelseries 0003:1038:1410.00A3: parse failed [ 2206.519500][T21126] steelseries 0003:1038:1410.00A3: probe with driver steelseries failed with error -22 [ 2207.396006][T10084] net_ratelimit: 1059 callbacks suppressed [ 2207.396030][T10084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.410620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.542298][ T2166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.561713][T21126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.594556][ T2166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.633788][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2207.640940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2207.716576][ T2168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8577'. [ 2207.925940][T24758] usb 2-1: device descriptor read/64, error -71 [ 2207.949388][ T2171] bridge1: port 1(veth0_to_bond) entered blocking state [ 2207.965531][T10084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.974778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.060512][ T2171] bridge1: port 1(veth0_to_bond) entered disabled state [ 2208.078949][ T2171] veth0_to_bond: entered allmulticast mode [ 2208.149354][ T2171] veth0_to_bond: entered promiscuous mode [ 2208.165785][T32399] usb 1-1: USB disconnect, device number 47 [ 2208.183696][T24758] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 2208.354915][T24758] usb 2-1: device firmware changed [ 2208.363947][T24752] usb 2-1: USB disconnect, device number 41 [ 2208.673845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2208.681240][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2208.698688][T24752] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2208.843732][T32399] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2208.850847][T24741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.080545][T32399] usb 5-1: Using ep0 maxpacket: 8 [ 2209.090388][T32399] usb 5-1: config 162 has an invalid interface number: 166 but max is 0 [ 2209.105399][T32399] usb 5-1: config 162 has no interface number 0 [ 2209.113003][T32399] usb 5-1: config 162 interface 166 has no altsetting 0 [ 2209.123374][T24752] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 2209.143340][T24752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.152605][T24752] usb 2-1: Product: syz [ 2209.159203][T32399] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 2209.170070][T32399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.178563][T24752] usb 2-1: Manufacturer: syz [ 2209.184032][T32399] usb 5-1: Product: syz [ 2209.188362][T24752] usb 2-1: SerialNumber: syz [ 2209.193328][T32399] usb 5-1: Manufacturer: syz [ 2209.210698][T32399] usb 5-1: SerialNumber: syz [ 2209.216866][T24752] usb 2-1: config 0 descriptor?? [ 2209.459040][ T2178] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.8579'. [ 2209.482093][T32399] appledisplay 5-1:162.166: Error while getting initial brightness: -71 [ 2209.539104][T32399] appledisplay 5-1:162.166: probe with driver appledisplay failed with error -71 [ 2209.614347][T32399] usb 5-1: USB disconnect, device number 88 [ 2209.884085][T24752] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 2209.960614][T21126] usb 2-1: USB disconnect, device number 42 [ 2210.074932][T24752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2210.099952][T24752] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2210.138979][T24752] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2210.164599][T24752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.179475][T24752] usb 1-1: config 0 descriptor?? [ 2210.192596][ T2192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2210.383758][T21126] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2210.395398][ T2209] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.8588'. [ 2210.459320][T24752] usbhid 1-1:0.0: can't add hid device: -71 [ 2210.474497][T24752] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2210.498708][T24752] usb 1-1: USB disconnect, device number 48 [ 2210.613809][T21126] usb 2-1: Using ep0 maxpacket: 16 [ 2210.630899][T21126] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2210.676423][T21126] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.696763][T21126] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2210.712621][T21126] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 2210.729808][T21126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.746356][T21126] usb 2-1: Product: syz [ 2210.754619][T21126] usb 2-1: Manufacturer: syz [ 2210.761847][T21126] usb 2-1: SerialNumber: syz [ 2210.791681][T21126] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input106 [ 2210.998505][ T5185] bcm5974 2-1:1.0: could not read from device [ 2211.014240][T24752] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2211.026320][T21126] usb 2-1: USB disconnect, device number 43 [ 2211.035831][ T5185] bcm5974 2-1:1.0: could not read from device [ 2211.154761][T17734] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 2211.216151][T24752] usb 1-1: Using ep0 maxpacket: 32 [ 2211.232139][T24752] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2211.274078][T24752] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2211.292729][T24752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.322060][T24752] usb 1-1: config 0 descriptor?? [ 2211.769370][T24752] hid-rmi 0003:06CB:81A7.00A4: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 2212.014730][T24752] usb 1-1: USB disconnect, device number 49 [ 2212.126531][ T2222] fido_id[2222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2212.186561][T32399] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2212.219462][ T2227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8595'. [ 2212.376226][T32399] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2212.393797][T32399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.423731][T32399] usb 4-1: Product: syz [ 2212.427982][T32399] usb 4-1: Manufacturer: syz [ 2212.432627][T32399] usb 4-1: SerialNumber: syz [ 2212.437726][T21767] net_ratelimit: 9 callbacks suppressed [ 2212.437746][T21767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.452045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.568174][ T2232] kernel read not supported for file /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (pid: 2232 comm: syz.2.8598) [ 2212.627639][ T30] audit: type=1800 audit(1767711445.546:1213): pid=2232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8598" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="mqueue" ino=170315 res=0 errno=0 [ 2212.707759][ T2232] kernel read not supported for file /cpuacct.usage_percpu_user (pid: 2232 comm: syz.2.8598) [ 2212.752279][ T30] audit: type=1800 audit(1767711445.646:1214): pid=2232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8598" name="cpuacct.usage_percpu_user" dev="mqueue" ino=170321 res=0 errno=0 [ 2212.833843][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2212.841091][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2212.994627][T24741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.074429][T24752] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2213.075015][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.093307][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.106496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.116686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.336751][T32399] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2213.351928][T32399] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2213.392045][T32399] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2213.401859][T24752] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2213.442811][T24752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.465285][ T2246] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2213.485836][T24752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.512601][T32399] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 2213.527550][T24752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2213.706634][ T2250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.716718][ T2250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.788577][T24752] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2213.810334][T24752] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2213.862103][T24752] usb 2-1: Manufacturer: syz [ 2213.875290][T24752] usb 2-1: config 0 descriptor?? [ 2214.060679][T25573] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 2214.530791][T24752] appleir 0003:05AC:8243.00A5: unknown main item tag 0x0 [ 2214.681788][T24752] appleir 0003:05AC:8243.00A5: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2215.257843][ T30] audit: type=1326 audit(1767711448.176:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.4.8609" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0 [ 2215.368007][ T2271] loop5: detected capacity change from 0 to 2271 [ 2215.458300][T32254] buffer_io_error: 9 callbacks suppressed [ 2215.458318][T32254] Buffer I/O error on dev loop5, logical block 283, async page read [ 2215.534157][T24741] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 2215.673888][T24741] usb 1-1: device descriptor read/64, error -71 [ 2215.789233][T21126] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 2216.013275][T24741] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 2216.070666][T21126] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 2216.079164][ T5814] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 2216.087075][T21126] usb 5-1: config 0 has no interface number 0 [ 2216.094222][T21126] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 36624, setting to 64 [ 2216.203894][T24741] usb 1-1: device descriptor read/64, error -71 [ 2216.300875][T21126] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 2216.320655][T21126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.330666][T21126] usb 5-1: Product: syz [ 2216.335327][T21126] usb 5-1: Manufacturer: syz [ 2216.344105][T21126] usb 5-1: SerialNumber: syz [ 2216.394283][T24741] usb usb1-port1: attempt power cycle [ 2216.445681][T21126] usb 5-1: config 0 descriptor?? [ 2216.485096][ T2271] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2216.530170][T21126] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 2216.574716][T21126] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2216.690613][T24752] usb 4-1: USB disconnect, device number 11 [ 2216.743832][T24741] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 2216.784494][T24741] usb 1-1: device descriptor read/8, error -71 [ 2217.053785][T24741] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 2217.094736][T24741] usb 1-1: device descriptor read/8, error -71 [ 2217.207851][T24741] usb usb1-port1: unable to enumerate USB device [ 2217.281313][ T2285] xt_bpf: check failed: parse error [ 2217.962358][ T2299] team_slave_0: left promiscuous mode [ 2217.973302][ T2299] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 2217.985225][ T2299] team0 (unregistering): Port device team_slave_0 removed [ 2217.993068][ T2299] team_slave_1: left promiscuous mode [ 2217.997876][ T5970] usb 2-1: USB disconnect, device number 44 [ 2218.017401][ T2299] team0 (unregistering): Failed to send options change via netlink (err -105) [ 2218.033892][ C0] net_ratelimit: 14 callbacks suppressed [ 2218.033915][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2218.047075][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2218.058610][ T2299] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 2218.071339][ T2299] team0 (unregistering): Port device team_slave_1 removed [ 2218.081316][ T2299] geneve0: left promiscuous mode [ 2218.090924][ T2299] team0 (unregistering): Failed to send options change via netlink (err -105) [ 2218.100855][ T2299] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105) [ 2218.112546][ T2299] team0 (unregistering): Port device geneve0 removed [ 2218.123544][T25573] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2218.133036][T25573] Bluetooth: hci3: Injecting HCI hardware error event [ 2218.142796][T25573] Bluetooth: hci3: hardware error 0x00 [ 2218.194152][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.202756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.320528][ T5970] usb 5-1: USB disconnect, device number 89 [ 2218.354932][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.370189][ T5970] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2218.410856][ T5970] kobil_sct 5-1:0.148: device disconnected [ 2218.655910][ T2313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.690143][ T2313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.716798][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.735144][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.835230][T25934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.844385][T25934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.853278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.862210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.934571][T32399] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 2219.073851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2219.123776][T32399] usb 2-1: Invalid ep0 maxpacket: 64 [ 2219.264111][T32399] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 2219.323709][ T5970] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2219.434628][T32399] usb 2-1: Invalid ep0 maxpacket: 64 [ 2219.441914][T32399] usb usb2-port1: attempt power cycle [ 2219.483702][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 2219.491434][ T5970] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2219.510870][ T5970] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2219.533466][ T5970] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2219.550427][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.568582][ T5970] usb 4-1: Product: Ð¥ [ 2219.575812][ T5970] usb 4-1: Manufacturer: ä°Š [ 2219.583455][ T5970] usb 4-1: SerialNumber: syz [ 2219.769577][ T2336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8632'. [ 2219.806122][ T5970] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2219.816329][T32399] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 2219.824272][ T5970] cdc_ncm 4-1:1.0: bind() failure [ 2219.851144][ T5970] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2219.864387][ T5970] cdc_ncm 4-1:1.1: bind() failure [ 2219.865335][T32399] usb 2-1: Invalid ep0 maxpacket: 64 [ 2220.006999][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.017922][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.029278][T24752] usb 4-1: USB disconnect, device number 12 [ 2220.079572][ T1108] bond0: (slave bond_slave_1): interface is now down [ 2220.093904][T32399] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 2220.104484][ T1108] bond0: now running without any active interface! [ 2220.117531][T10080] bond7: (slave macvlan31): speed changed to 0 on port 1 [ 2220.136238][T32399] usb 2-1: Invalid ep0 maxpacket: 64 [ 2220.147581][T32399] usb usb2-port1: unable to enumerate USB device [ 2220.186050][ T1108] bond7: (slave macvlan31): link status definitely down, disabling slave [ 2220.195391][T25573] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2220.208223][ T1108] bond7: now running without any active interface! [ 2220.681684][ T2349] syzkaller0: entered promiscuous mode [ 2220.688248][ T2349] syzkaller0: entered allmulticast mode [ 2220.759099][ T2351] syzkaller0: entered promiscuous mode [ 2220.774242][ T2351] syzkaller0: entered allmulticast mode [ 2221.452349][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8642'. [ 2221.467657][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8642'. [ 2221.489455][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8642'. [ 2221.523141][ T2363] macvtap2: entered allmulticast mode [ 2221.629382][ T2365] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 2222.004985][ T2377] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8650'. [ 2222.033893][ T5970] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2222.050304][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.075953][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.203664][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 2222.210977][ T5970] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 2222.223044][ T5970] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.235241][ T5970] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2222.416840][ T5970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2222.435712][ T5970] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 2222.458591][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.496200][ T5970] usb 1-1: config 0 descriptor?? [ 2222.957356][ T5970] zeroplus 0003:0C12:0030.00A6: item fetching failed at offset 5/7 [ 2222.966951][ T2393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'. [ 2222.980147][ T2393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'. [ 2222.982637][ T5970] zeroplus 0003:0C12:0030.00A6: parse failed [ 2222.993888][ T2393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'. [ 2223.013937][ T5970] zeroplus 0003:0C12:0030.00A6: probe with driver zeroplus failed with error -22 [ 2223.211984][ T5970] usb 1-1: USB disconnect, device number 54 [ 2223.243796][ C0] net_ratelimit: 11 callbacks suppressed [ 2223.243812][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2223.257207][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2223.487276][ T2400] syzkaller0: entered promiscuous mode [ 2223.498446][ T2400] syzkaller0: entered allmulticast mode [ 2223.554601][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.967711][ T3470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.977042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.283787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2224.291195][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2224.594796][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.603024][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.611556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.242467][T32399] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2225.446060][T32399] usb 5-1: Using ep0 maxpacket: 16 [ 2225.463951][T32399] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 2225.478480][T32399] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 2225.493254][T32399] usb 5-1: config 166 has no interface number 0 [ 2225.504282][T32399] usb 5-1: config 166 has no interface number 1 [ 2225.521102][T32399] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2225.553645][T32399] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2225.588844][T32399] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2225.620740][T32399] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2225.662533][T32399] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2225.674309][ T5970] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2225.715899][T32399] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2225.749021][T32399] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2225.783082][T32399] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2225.823693][T32399] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2225.857644][T32399] usb 5-1: config 166 interface 177 has no altsetting 0 [ 2225.882157][T32399] usb 5-1: config 166 interface 34 has no altsetting 0 [ 2225.892851][ T5970] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2225.918999][T32399] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2225.924141][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.942483][T32399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.966420][T32399] usb 5-1: Product: syz [ 2225.973214][T32399] usb 5-1: Manufacturer: syz [ 2226.014559][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2226.029751][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2226.055429][T32399] usb 5-1: SerialNumber: syz [ 2226.076531][ T5970] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2226.093928][ T5970] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2226.122901][ T5970] usb 1-1: Manufacturer: syz [ 2226.144180][ T5970] usb 1-1: config 0 descriptor?? [ 2226.193797][T21126] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2226.337745][T32399] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 2226.344644][T21126] usb 2-1: Using ep0 maxpacket: 8 [ 2226.353132][T21126] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 2226.383915][T21126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.401810][T21126] usb 2-1: config 0 descriptor?? [ 2226.412938][T21126] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2226.586790][T32399] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 2226.602909][ T5970] appleir 0003:05AC:8243.00A7: unknown main item tag 0x0 [ 2226.646623][T21126] usb 2-1: qt2_attach - failed to power on unit: -71 [ 2226.666223][ T5970] appleir 0003:05AC:8243.00A7: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2226.690463][T21126] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 2226.753552][T21126] usb 2-1: USB disconnect, device number 49 [ 2227.043138][ T2459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8670'. [ 2227.310067][T32399] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 2227.386693][T32399] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2227.434216][T32399] uvcvideo 5-1:166.34: No valid video chain found. [ 2227.470661][T32399] usb 5-1: USB disconnect, device number 90 [ 2227.735251][ T2467] netlink: 'syz.4.8673': attribute type 1 has an invalid length. [ 2227.800410][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.806937][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.914776][ T2471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8673'. [ 2227.936598][ T2467] bond7: entered promiscuous mode [ 2227.956346][ T2467] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2227.993887][ T5970] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2227.998089][ T2471] bond7: entered allmulticast mode [ 2228.033754][T21126] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 2228.163803][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 2228.171832][ T5970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2228.206550][ T5970] usb 2-1: config 0 has no interfaces? [ 2228.240675][ T2467] bond7: (slave bridge13): making interface the new active one [ 2228.249788][ T2467] bridge13: entered promiscuous mode [ 2228.256359][ T2467] bridge13: entered allmulticast mode [ 2228.266492][ T2467] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 2228.279960][ T5970] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 2228.336142][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.378046][ T5970] usb 2-1: Product: syz [ 2228.382508][ T5970] usb 2-1: Manufacturer: syz [ 2228.419694][ T5970] usb 2-1: SerialNumber: syz [ 2228.434033][ C0] net_ratelimit: 11 callbacks suppressed [ 2228.434058][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2228.447009][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2228.520674][ T5970] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 2228.759226][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2228.897034][T32399] apple-mfi-fastcharge 2-1: USB disconnect, device number 50 [ 2229.095024][T30761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2229.128329][T30761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2229.147731][T30761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2229.156683][T30761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2229.165111][T30761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2229.327031][ T2497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8680'. [ 2229.473876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2229.481097][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2229.568817][ T2501] fuse: Bad value for 'group_id' [ 2229.596352][ T2501] fuse: Bad value for 'group_id' [ 2229.675292][T24741] usb 1-1: USB disconnect, device number 55 [ 2229.715960][T10080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.724832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.737101][T17734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.745827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.756472][ T2501] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000004' [ 2229.825149][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.956255][ T2490] chnl_net:caif_netlink_parms(): no params data found [ 2230.012635][ T2507] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2230.676353][ T2528] bridge0: port 5(bond4) entered blocking state [ 2230.724189][ T2528] bridge0: port 5(bond4) entered disabled state [ 2230.731412][ T2528] bond4: entered allmulticast mode [ 2230.783140][ T2528] bond4: entered promiscuous mode [ 2230.856332][ T2490] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.867972][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.881043][ T2490] bridge_slave_0: entered allmulticast mode [ 2230.963238][ T2490] bridge_slave_0: entered promiscuous mode [ 2231.045320][ T2490] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.059849][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.092219][ T2490] bridge_slave_1: entered allmulticast mode [ 2231.129069][ T2490] bridge_slave_1: entered promiscuous mode [ 2231.233892][T30761] Bluetooth: hci1: command tx timeout [ 2231.428517][T17734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.708975][ T2551] FAULT_INJECTION: forcing a failure. [ 2231.708975][ T2551] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.775192][ T2551] CPU: 0 UID: 0 PID: 2551 Comm: syz.1.8694 Tainted: G L syzkaller #0 PREEMPT(full) [ 2231.775230][ T2551] Tainted: [L]=SOFTLOCKUP [ 2231.775236][ T2551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2231.775246][ T2551] Call Trace: [ 2231.775253][ T2551] [ 2231.775262][ T2551] dump_stack_lvl+0xe8/0x150 [ 2231.775288][ T2551] should_fail_ex+0x414/0x560 [ 2231.775318][ T2551] should_failslab+0xa8/0x100 [ 2231.775340][ T2551] kmem_cache_alloc_noprof+0x88/0x710 [ 2231.775366][ T2551] ? dst_alloc+0x105/0x170 [ 2231.775391][ T2551] dst_alloc+0x105/0x170 [ 2231.775417][ T2551] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 2231.775443][ T2551] ? ip_route_output_key_hash+0xc1/0x280 [ 2231.775478][ T2551] ip_route_output_key_hash+0x174/0x280 [ 2231.775498][ T2551] ? ns_capable+0x8a/0xf0 [ 2231.775515][ T2551] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2231.775545][ T2551] ip_route_output_flow+0x2a/0x150 [ 2231.775560][ T2551] ? security_sk_classify_flow+0x70/0x180 [ 2231.775589][ T2551] udp_sendmsg+0x142e/0x2170 [ 2231.775620][ T2551] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2231.775640][ T2551] ? __pfx_udp_sendmsg+0x10/0x10 [ 2231.775663][ T2551] ? __asan_memset+0x22/0x50 [ 2231.775687][ T2551] ? _get_random_bytes+0x1bd/0x210 [ 2231.775708][ T2551] ? register_lock_class+0x31/0x2e0 [ 2231.775736][ T2551] ? get_random_u32+0x45e/0x8d0 [ 2231.775759][ T2551] ? lockdep_hardirqs_on+0x7b/0x110 [ 2231.775775][ T2551] ? get_random_u32+0x125/0x8d0 [ 2231.775791][ T2551] ? get_random_u32+0x495/0x8d0 [ 2231.775816][ T2551] udpv6_sendmsg+0xc1c/0x2510 [ 2231.775847][ T2551] ? __lock_acquire+0x6b6/0x2cf0 [ 2231.775866][ T2551] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 2231.775912][ T2551] ? ip6_datagram_release_cb+0x7c/0x550 [ 2231.775978][ T2551] ? lockdep_hardirqs_on+0x7b/0x110 [ 2231.775993][ T2551] ? inet_send_prepare+0x1b9/0x270 [ 2231.776013][ T2551] ? __local_bh_enable_ip+0xd0/0x130 [ 2231.776030][ T2551] ? inet_send_prepare+0x1b9/0x270 [ 2231.776053][ T2551] ? inet6_sendmsg+0xe4/0x120 [ 2231.776070][ T2551] __sock_sendmsg+0xe5/0x270 [ 2231.776096][ T2551] ____sys_sendmsg+0x505/0x820 [ 2231.776120][ T2551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2231.776143][ T2551] ? kstrtouint+0x6e/0xe0 [ 2231.776172][ T2551] ___sys_sendmsg+0x21f/0x2a0 [ 2231.776217][ T2551] ? __pfx____sys_sendmsg+0x10/0x10 [ 2231.776246][ T2551] ? get_pid_task+0x20/0x1f0 [ 2231.776272][ T2551] ? get_pid_task+0x20/0x1f0 [ 2231.776297][ T2551] ? get_pid_task+0x20/0x1f0 [ 2231.776356][ T2551] ? __fget_files+0x2a/0x420 [ 2231.776376][ T2551] ? __fget_files+0x3a0/0x420 [ 2231.776403][ T2551] __sys_sendmsg+0x164/0x220 [ 2231.776424][ T2551] ? __pfx___sys_sendmsg+0x10/0x10 [ 2231.776449][ T2551] ? __pfx_ksys_write+0x10/0x10 [ 2231.776473][ T2551] __do_fast_syscall_32+0x1dc/0x570 [ 2231.776492][ T2551] ? lockdep_hardirqs_on+0x7b/0x110 [ 2231.776508][ T2551] ? do_fast_syscall_32+0x34/0x80 [ 2231.776525][ T2551] ? irqentry_exit+0x10f/0x670 [ 2231.776543][ T2551] do_fast_syscall_32+0x34/0x80 [ 2231.776561][ T2551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2231.776581][ T2551] RIP: 0023:0xf705d539 [ 2231.776596][ T2551] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2231.776609][ T2551] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2231.776626][ T2551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2231.776638][ T2551] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2231.776648][ T2551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2231.776657][ T2551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2231.776667][ T2551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2231.776689][ T2551] [ 2231.790090][ T2490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2232.172698][ T5970] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2232.328589][T17734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.366846][ T5970] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2232.381054][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.398021][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.420403][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2232.438228][ T2560] netlink: 'syz.1.8696': attribute type 11 has an invalid length. [ 2232.448676][ T2490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2232.472049][ T5970] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2232.493726][ T5970] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2232.504336][ T5970] usb 4-1: Manufacturer: syz [ 2232.522474][ T5970] usb 4-1: config 0 descriptor?? [ 2232.679132][T17734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.867445][ T2490] team0: Port device team_slave_0 added [ 2233.038056][T17734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.152412][ T2490] team0: Port device team_slave_1 added [ 2233.224218][ T5970] appleir 0003:05AC:8243.00A8: unknown main item tag 0x0 [ 2233.249140][ T5970] appleir 0003:05AC:8243.00A8: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2233.294190][ T5814] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2233.323787][T30761] Bluetooth: hci1: command tx timeout [ 2233.581461][ T5814] usb 1-1: config 0 has no interfaces? [ 2233.590582][T26738] syz_tun (unregistering): left allmulticast mode [ 2233.597795][ T5814] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2233.609607][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.633883][ C0] net_ratelimit: 9 callbacks suppressed [ 2233.633906][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2233.646734][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2233.646826][ T5814] usb 1-1: config 0 descriptor?? [ 2233.919440][ T2490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2233.954118][ T2490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2234.132077][ T2490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.215308][ T2490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.222691][ T2490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2234.289576][ T2490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.520797][ T2490] hsr_slave_0: entered promiscuous mode [ 2234.573770][ T5970] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 2234.617116][ T2490] hsr_slave_1: entered promiscuous mode [ 2234.673877][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2234.681044][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2234.724094][ T2490] debugfs: 'hsr0' already exists in 'hsr' [ 2234.744277][ T2490] Cannot create hsr debugfs directory [ 2234.911151][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8706'. [ 2235.386064][T25573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2235.403409][T25573] Bluetooth: hci1: command tx timeout [ 2235.417588][ T2300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2235.435966][ T2300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2235.445045][ T2300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2235.457795][ T2300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2235.544106][T17734] bond4: left allmulticast mode [ 2235.549187][T17734] bond4: left promiscuous mode [ 2235.559749][T17734] bridge0: port 3(bond4) entered disabled state [ 2235.595254][T17734] bridge_slave_1: left allmulticast mode [ 2235.602670][T17734] bridge_slave_1: left promiscuous mode [ 2235.620488][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.687554][T17734] bridge_slave_0: left allmulticast mode [ 2235.703039][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.714151][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2235.721310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2235.773506][T17734] veth3: left allmulticast mode [ 2235.779019][T17734] veth3: left promiscuous mode [ 2235.785758][T17734] bridge3: port 1(veth3) entered disabled state [ 2235.816961][T17734] veth5: left allmulticast mode [ 2235.823292][T17734] veth5: left promiscuous mode [ 2235.832517][T17734] bridge4: port 1(veth5) entered disabled state [ 2235.887027][T17734] veth0_to_bond: left allmulticast mode [ 2235.893026][T17734] veth0_to_bond: left promiscuous mode [ 2235.899719][T17734] bridge12: port 1(veth0_to_bond) entered disabled state [ 2236.205514][T15280] usb 4-1: USB disconnect, device number 13 [ 2236.671930][T17734] gretap0 (unregistering): left promiscuous mode [ 2236.725640][T17734] bond3 (unregistering): (slave gre1): Releasing backup interface [ 2236.734424][T17734] gre1 (unregistering): left promiscuous mode [ 2236.763770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2236.770951][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2236.816008][T17734] dvmrp6 (unregistering): left allmulticast mode [ 2236.982277][T17734] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2236.990596][T17734] bridge1 (unregistering): left promiscuous mode [ 2236.997813][T17734] bridge1 (unregistering): left allmulticast mode [ 2237.443521][T17734] bond5 (unregistering): (slave bridge9): Releasing backup interface [ 2237.452219][T17734] bridge9 (unregistering): left promiscuous mode [ 2237.460580][T17734] bridge9 (unregistering): left allmulticast mode [ 2237.473762][T30761] Bluetooth: hci3: command tx timeout [ 2237.474129][ T2300] Bluetooth: hci1: command tx timeout [ 2237.581122][T17734] bond6 (unregistering): (slave bridge11): Releasing backup interface [ 2237.589642][T17734] bridge11 (unregistering): left promiscuous mode [ 2237.708658][T17734] bond7 (unregistering): (slave bridge13): Releasing backup interface [ 2237.717565][T17734] bridge13 (unregistering): left promiscuous mode [ 2237.726232][T17734] bridge13 (unregistering): left allmulticast mode [ 2237.803718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2237.810934][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2238.117912][T17734] bond0 (unregistering): left promiscuous mode [ 2238.126181][T17734] bond_slave_0: left promiscuous mode [ 2238.132054][T17734] bond_slave_1: left promiscuous mode [ 2238.140124][T17734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2238.154645][T17734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2238.167686][T17734] bond0 (unregistering): Released all slaves [ 2238.497737][T17734] bond1 (unregistering): Released all slaves [ 2238.758682][ T5814] usb 1-1: string descriptor 0 read error: -32 [ 2238.819595][T17734] bond2 (unregistering): Released all slaves [ 2238.833799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2238.840940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2239.080646][T17734] bond3 (unregistering): Released all slaves [ 2239.302507][T17734] bond4 (unregistering): Released all slaves [ 2239.543232][T17734] bond5 (unregistering): Released all slaves [ 2239.553841][ T2300] Bluetooth: hci3: command tx timeout [ 2239.787785][T17734] bond6 (unregistering): Released all slaves [ 2239.873925][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2239.881313][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2240.037868][T17734] bond7 (unregistering): Released all slaves [ 2240.056415][ T2600] tipc: Cannot configure node identity twice [ 2240.093788][T32399] usb 1-1: USB disconnect, device number 56 [ 2240.315188][ T2631] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8713'. [ 2240.392358][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8711'. [ 2240.425463][T17734] tipc: Left network mode [ 2240.694089][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8711'. [ 2240.921924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2240.929481][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2240.974771][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8711'. [ 2241.444990][T17734] veth1_macvtap: left promiscuous mode [ 2241.464349][T17734] veth0_macvtap: left promiscuous mode [ 2241.634966][ T2300] Bluetooth: hci3: command tx timeout [ 2241.953828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2241.961100][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2242.223839][T32399] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2242.453963][T24741] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2242.503992][T32399] usb 4-1: Using ep0 maxpacket: 32 [ 2242.518765][T32399] usb 4-1: config index 0 descriptor too short (expected 29791, got 27) [ 2242.544579][T32399] usb 4-1: config 109 has too many interfaces: 105, using maximum allowed: 32 [ 2242.563653][T32399] usb 4-1: config 109 has an invalid descriptor of length 116, skipping remainder of the config [ 2242.584119][T32399] usb 4-1: config 109 has 0 interfaces, different from the descriptor's value: 105 [ 2242.614522][T32399] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2242.662117][T32399] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2242.697719][T32399] usb 4-1: Product: syz [ 2242.702021][T32399] usb 4-1: Manufacturer: syz [ 2242.711349][T24741] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2242.722774][T32399] usb 4-1: SerialNumber: syz [ 2242.725214][T24741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.749454][T24741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.761342][T24741] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2242.812590][T24741] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2242.822486][T24741] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2242.842135][T24741] usb 1-1: Manufacturer: syz [ 2242.878781][T24741] usb 1-1: config 0 descriptor?? [ 2242.980550][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.999374][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2243.007547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2243.118220][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2243.191656][ T2300] Bluetooth: hci0: Malformed LE Event: 0x0d [ 2243.326383][T24741] appleir 0003:05AC:8243.00A9: unknown main item tag 0x0 [ 2243.371323][T24741] appleir 0003:05AC:8243.00A9: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2243.599366][T17734] team_slave_1 (unregistering): left promiscuous mode [ 2243.625422][T17734] team0 (unregistering): Port device team_slave_1 removed [ 2243.738825][ T2300] Bluetooth: hci3: command tx timeout [ 2243.925974][T17734] team_slave_0 (unregistering): left promiscuous mode [ 2243.948857][T17734] team0 (unregistering): Port device team_slave_0 removed [ 2244.043869][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2244.051909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2244.814232][ T5921] usb 1-1: reset high-speed USB device number 57 using dummy_hcd [ 2245.093866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2245.101157][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2245.693036][T32399] usb 4-1: USB disconnect, device number 14 [ 2246.117960][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2246.125128][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2246.180967][ T2597] chnl_net:caif_netlink_parms(): no params data found [ 2246.253339][ T2711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.339642][ T2711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2246.443100][ T2708] fuse: Bad value for 'fd' [ 2246.776553][T24758] usb 1-1: USB disconnect, device number 57 [ 2246.810842][ T2729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8722'. [ 2246.817697][ T2719] netlink: 'syz.0.8719': attribute type 10 has an invalid length. [ 2246.884172][ T2726] bridge0: entered allmulticast mode [ 2247.064307][ T2729] bond1: left allmulticast mode [ 2247.069364][ T2729] bond1: left promiscuous mode [ 2247.115509][ T2729] bridge0: port 3(bond1) entered disabled state [ 2247.140292][ T2729] bridge_slave_1: left allmulticast mode [ 2247.147510][ T2729] bridge_slave_1: left promiscuous mode [ 2247.154554][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2247.154747][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2247.554613][ T2729] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.595800][ T2729] bridge_slave_0: left allmulticast mode [ 2247.602227][ T2729] bridge_slave_0: left promiscuous mode [ 2247.609199][ T2729] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.703892][ T2729] bridge0 (unregistering): left allmulticast mode [ 2247.959826][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.983822][ T2597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.992611][ T2597] bridge_slave_0: entered allmulticast mode [ 2248.021847][ T2597] bridge_slave_0: entered promiscuous mode [ 2248.053383][ T2490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2248.097987][ T2597] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.116624][ T2597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.136902][ T2597] bridge_slave_1: entered allmulticast mode [ 2248.145626][ T2597] bridge_slave_1: entered promiscuous mode [ 2248.160198][ T2490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2248.186564][ T2760] vlan3: entered promiscuous mode [ 2248.193017][ T2760] bridge0: entered promiscuous mode [ 2248.199876][ T2760] vlan3: entered allmulticast mode [ 2248.204328][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2248.205737][ T2760] bridge0: entered allmulticast mode [ 2248.212289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2248.445954][ T2490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2248.511644][ T2490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2248.590300][ T2759] syzkaller0: entered promiscuous mode [ 2248.596371][ T2759] syzkaller0: entered allmulticast mode [ 2248.616813][ T2767] bridge_slave_0: left allmulticast mode [ 2248.632504][ T2767] bridge_slave_0: left promiscuous mode [ 2248.677055][ T2767] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.727189][ T2767] bridge_slave_1: left allmulticast mode [ 2248.735654][ T2767] bridge_slave_1: left promiscuous mode [ 2248.744421][ T2767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.801064][ T2767] veth0_to_bond: left allmulticast mode [ 2248.832906][ T2767] veth0_to_bond: left promiscuous mode [ 2248.859333][ T2767] bridge1: port 1(veth0_to_bond) entered disabled state [ 2248.937137][ T2767] bond0: (slave bond_slave_0): Releasing backup interface [ 2249.055486][ T2767] bond0: (slave bond_slave_1): Releasing backup interface [ 2249.069915][ T2767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2249.091576][ T2767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2249.107308][ T2767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2249.233874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2249.241116][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2250.284117][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2250.291447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2251.323841][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2251.332230][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2252.354713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2252.361977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2253.398006][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2253.587259][ T2597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2253.599171][ T2795] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 2253.632631][ T2597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2253.690778][T17734] IPVS: stop unused estimator thread 0... [ 2253.735856][ T2805] netlink: 'syz.2.8732': attribute type 1 has an invalid length. [ 2253.830719][ T2805] bond2: entered promiscuous mode [ 2253.836547][ T2805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2253.859175][ T2597] team0: Port device team_slave_0 added [ 2253.884444][ T2805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8732'. [ 2253.945269][ T2597] team0: Port device team_slave_1 added [ 2253.954886][ T2805] bond2: entered allmulticast mode [ 2254.010367][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 2254.023988][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 2254.034486][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 2254.159708][ T2805] bond2: (slave bridge0): making interface the new active one [ 2254.179809][ T2805] bridge0: entered promiscuous mode [ 2254.201710][ T2805] bridge0: entered allmulticast mode [ 2254.209849][ T2805] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 2254.433847][ C0] net_ratelimit: 1 callbacks suppressed [ 2254.433871][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2254.446791][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2254.965419][T17734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.042791][ T2597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2255.055471][ T2597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2255.086740][ T2597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2255.483771][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2255.491008][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2255.613273][ T2848] syzkaller0: entered promiscuous mode [ 2255.620409][ T2848] syzkaller0: entered allmulticast mode [ 2255.640817][ T2597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2255.648318][ T2597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2255.703979][ T2597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2255.771435][T17734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.523908][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2256.531534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.553867][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.561172][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2258.594084][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2258.601553][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2259.612827][ T2888] openvswitch: netlink: Key type 4358 is out of range max 32 [ 2259.633944][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2259.641275][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2260.693800][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2260.701589][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.570426][T17734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.676871][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8752'. [ 2261.701388][T17734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.723796][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.726319][ T2597] hsr_slave_0: entered promiscuous mode [ 2261.732772][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.743310][ T2597] hsr_slave_1: entered promiscuous mode [ 2262.108426][ T2490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2262.125931][T17734] bond5: left allmulticast mode [ 2262.131117][T17734] bond5: left promiscuous mode [ 2262.140829][T17734] bridge0: port 2(bond5) entered disabled state [ 2262.157691][T17734] bond4: left allmulticast mode [ 2262.167070][T17734] bond4: left promiscuous mode [ 2262.175113][T17734] bridge0: port 1(bond4) entered disabled state [ 2262.753822][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2262.761183][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2262.794371][T24758] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2262.972827][ T2906] netlink: 'syz.2.8756': attribute type 11 has an invalid length. [ 2263.014116][T24758] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2263.025772][T24758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.057925][T24758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.068528][T24758] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2263.115921][T24758] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2263.126546][T24758] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2263.135111][T24758] usb 4-1: Manufacturer: syz [ 2263.167397][T24758] usb 4-1: config 0 descriptor?? [ 2263.225417][T17734] gretap0 (unregistering): left promiscuous mode [ 2263.592885][T17734] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 2263.603315][T17734] bridge1 (unregistering): left promiscuous mode [ 2263.612617][T17734] bridge1 (unregistering): left allmulticast mode [ 2263.638148][T24758] appleir 0003:05AC:8243.00AA: unknown main item tag 0x0 [ 2263.650304][T24758] appleir 0003:05AC:8243.00AA: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2263.687441][T17734] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 2263.698889][T17734] bridge0 (unregistering): left promiscuous mode [ 2263.711882][T17734] bridge0 (unregistering): left allmulticast mode [ 2263.794176][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.113429][ T2913] FAULT_INJECTION: forcing a failure. [ 2264.113429][ T2913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.164083][ T2913] CPU: 1 UID: 0 PID: 2913 Comm: syz.0.8757 Tainted: G L syzkaller #0 PREEMPT(full) [ 2264.164120][ T2913] Tainted: [L]=SOFTLOCKUP [ 2264.164128][ T2913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2264.164142][ T2913] Call Trace: [ 2264.164151][ T2913] [ 2264.164162][ T2913] dump_stack_lvl+0xe8/0x150 [ 2264.164198][ T2913] should_fail_ex+0x414/0x560 [ 2264.164238][ T2913] _copy_from_iter+0x1cd/0x1630 [ 2264.164274][ T2913] ? __pfx__copy_from_iter+0x10/0x10 [ 2264.164299][ T2913] ? __build_skb_around+0x22d/0x3c0 [ 2264.164325][ T2913] ? __alloc_skb+0x198/0x3a0 [ 2264.164348][ T2913] ? netlink_sendmsg+0x642/0xb30 [ 2264.164375][ T2913] ? skb_put+0x11b/0x210 [ 2264.164402][ T2913] netlink_sendmsg+0x6b2/0xb30 [ 2264.164440][ T2913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2264.164471][ T2913] ? __import_iovec+0x5d4/0x7f0 [ 2264.164495][ T2913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2264.164526][ T2913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2264.164548][ T2913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2264.164593][ T2913] __sock_sendmsg+0x21c/0x270 [ 2264.164623][ T2913] ____sys_sendmsg+0x505/0x820 [ 2264.164648][ T2913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2264.164673][ T2913] ? kstrtouint+0x6e/0xe0 [ 2264.164705][ T2913] ___sys_sendmsg+0x21f/0x2a0 [ 2264.164729][ T2913] ? __pfx____sys_sendmsg+0x10/0x10 [ 2264.164749][ T2913] ? get_pid_task+0x20/0x1f0 [ 2264.164771][ T2913] ? get_pid_task+0x20/0x1f0 [ 2264.164791][ T2913] ? get_pid_task+0x20/0x1f0 [ 2264.164837][ T2913] ? __fget_files+0x2a/0x420 [ 2264.164858][ T2913] ? __fget_files+0x3a0/0x420 [ 2264.164888][ T2913] __sys_sendmsg+0x164/0x220 [ 2264.164911][ T2913] ? __pfx___sys_sendmsg+0x10/0x10 [ 2264.164939][ T2913] ? __pfx_ksys_write+0x10/0x10 [ 2264.164957][ T2913] ? rcu_is_watching+0x15/0xb0 [ 2264.164986][ T2913] __do_fast_syscall_32+0x1dc/0x570 [ 2264.165007][ T2913] ? lockdep_hardirqs_on+0x7b/0x110 [ 2264.165023][ T2913] ? do_fast_syscall_32+0x34/0x80 [ 2264.165042][ T2913] ? irqentry_exit+0x10f/0x670 [ 2264.165062][ T2913] do_fast_syscall_32+0x34/0x80 [ 2264.165082][ T2913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2264.165104][ T2913] RIP: 0023:0xf70cd539 [ 2264.165121][ T2913] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2264.165136][ T2913] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2264.165156][ T2913] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 2264.165168][ T2913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2264.165179][ T2913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2264.165189][ T2913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2264.165199][ T2913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2264.165224][ T2913] [ 2264.833794][ C0] net_ratelimit: 1 callbacks suppressed [ 2264.833816][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.846927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.086781][T24752] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 2265.242871][T17734] bond0 (unregistering): left promiscuous mode [ 2265.250752][T17734] bond_slave_0: left promiscuous mode [ 2265.257964][T17734] bond_slave_1: left promiscuous mode [ 2265.308497][T17734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2265.337885][T17734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2265.355680][T17734] bond0 (unregistering): Released all slaves [ 2265.874144][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.882022][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.912048][T17734] bond1 (unregistering): Released all slaves [ 2266.167636][T24758] usb 4-1: USB disconnect, device number 15 [ 2266.871754][T17734] bond2 (unregistering): Released all slaves [ 2266.913874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2266.921016][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.311385][ T2932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8761'. [ 2267.406541][T17734] bond3 (unregistering): Released all slaves [ 2267.566979][T17734] bond4 (unregistering): Released all slaves [ 2267.588836][T17734] bond5 (unregistering): Released all slaves [ 2267.740255][ T2936] bridge4: port 1(veth0_to_bond) entered blocking state [ 2267.749107][ T2936] bridge4: port 1(veth0_to_bond) entered disabled state [ 2267.845611][ T2936] veth0_to_bond: entered allmulticast mode [ 2267.870409][ T2936] veth0_to_bond: entered promiscuous mode [ 2267.954870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.962191][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.257774][ T2490] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.721767][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.728973][ T2186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2268.793423][ T2597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2268.909747][ T2597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2268.960959][ T2597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2268.994065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2269.001282][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2269.194082][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.201339][ T2186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.213496][ T2597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2269.352809][T17734] hsr_slave_0: left promiscuous mode [ 2269.375007][T17734] hsr_slave_1: left promiscuous mode [ 2269.391686][T17734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2269.409979][T17734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.426041][T17734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2269.442445][T17734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.505190][T17734] veth1_macvtap: left promiscuous mode [ 2269.512539][T17734] veth0_macvtap: left promiscuous mode [ 2270.033963][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.041192][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.998582][T24758] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2271.076059][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.083244][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.180919][T24758] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2271.194779][T24758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.206558][T24758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2271.235091][T24758] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2271.267848][T24758] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2271.279733][T24758] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2271.288122][T24758] usb 4-1: Manufacturer: syz [ 2271.312294][T24758] usb 4-1: config 0 descriptor?? [ 2271.746101][T24758] appleir 0003:05AC:8243.00AB: unknown main item tag 0x0 [ 2271.779392][T24758] appleir 0003:05AC:8243.00AB: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2272.113770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.120976][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.300006][ T2490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2272.460702][ T2597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2272.486675][T17734] IPVS: stop unused estimator thread 0... [ 2272.630006][ T2597] 8021q: adding VLAN 0 to HW filter on device team0 [ 2272.697253][ T2992] dummy0: entered promiscuous mode [ 2272.716614][ T2992] dummy0: left promiscuous mode [ 2272.853131][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.860910][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2273.103781][ T2623] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 2273.153732][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2273.161131][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2273.202632][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.209881][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.292000][ T2490] veth0_vlan: entered promiscuous mode [ 2273.390557][ T2490] veth1_vlan: entered promiscuous mode [ 2273.481855][ T2597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2273.521059][ T2597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2273.829624][ T2597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2273.915007][ T2490] veth0_macvtap: entered promiscuous mode [ 2273.984128][ T2490] veth1_macvtap: entered promiscuous mode [ 2274.100120][ T2490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2274.130924][ T2490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2274.193798][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.200946][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.348470][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.379473][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.486484][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.508098][ T2597] veth0_vlan: entered promiscuous mode [ 2274.585047][T24741] usb 4-1: USB disconnect, device number 16 [ 2274.603605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.655457][T23336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.683845][T23336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.729396][T23336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.775718][T23336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.948809][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8774'. [ 2275.026036][ T2597] veth1_vlan: entered promiscuous mode [ 2275.142848][ T2597] veth0_macvtap: entered promiscuous mode [ 2275.184273][ T2597] veth1_macvtap: entered promiscuous mode [ 2275.233776][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.241064][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.251138][ T2597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2275.295404][ T2597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2275.347953][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.358248][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.401065][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.417906][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.585269][T23336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.623735][T23336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.641625][T24741] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2275.724384][T21767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.733865][T21767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.936914][T24741] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2275.957201][T24741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.972355][T24741] usb 5-1: Product: syz [ 2275.977038][T24741] usb 5-1: Manufacturer: syz [ 2275.981959][T24741] usb 5-1: SerialNumber: syz [ 2276.027254][T24741] usb 5-1: config 0 descriptor?? [ 2276.067768][T24741] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2276.085258][ T3045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8779'. [ 2276.273987][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.281580][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.602054][ T3013] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2276.699781][T24741] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 2276.717656][T24741] sq905c 5-1:0.0: Get version command failed [ 2276.746510][T24741] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 2276.773165][ T3062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.804274][ T3013] usb 4-1: Using ep0 maxpacket: 32 [ 2276.828833][ T3062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2276.845193][ T5814] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2276.861536][ T3013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2276.884353][ T3013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2276.997369][ T3013] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2277.017045][ T3062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8778'. [ 2277.039662][ T5814] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2277.185903][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.313773][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2277.321148][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2277.403211][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.510754][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2277.573672][ T3013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2277.626621][T24758] usb 5-1: USB disconnect, device number 91 [ 2277.650087][ T5814] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2277.710174][ T5814] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2277.754373][ T5814] usb 1-1: Manufacturer: syz [ 2277.759138][ T3013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2277.826092][ T5814] usb 1-1: config 0 descriptor?? [ 2277.856911][ T3013] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2277.885735][ T3013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.930066][ T3013] usb 4-1: Product: syz [ 2277.964245][ T3013] usb 4-1: Manufacturer: syz [ 2277.979831][ T3013] usb 4-1: SerialNumber: syz [ 2278.018685][ T3013] usb 4-1: config 0 descriptor?? [ 2278.053442][ T3050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2278.075901][ T3013] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input107 [ 2278.095985][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2278.319591][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2278.353981][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.361199][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.374105][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2278.637054][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2278.727533][ T5814] appleir 0003:05AC:8243.00AC: unknown main item tag 0x0 [ 2278.800795][ T5814] appleir 0003:05AC:8243.00AC: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2278.801607][T32248] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2279.393840][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.401127][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.418763][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2279.542186][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2279.677481][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2279.774563][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2280.016544][ T3071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8782'. [ 2280.268739][T32399] usb 1-1: reset high-speed USB device number 58 using dummy_hcd [ 2280.433838][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.441033][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.791885][T24758] usb 4-1: USB disconnect, device number 17 [ 2281.092122][ T3100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8789'. [ 2281.127486][ T3101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 2281.473804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2281.480943][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2282.085318][ T3013] usb 1-1: USB disconnect, device number 58 [ 2282.513758][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2282.521637][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2282.533758][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2282.713753][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 2282.724428][ T5814] usb 6-1: config 8 has an invalid interface number: 128 but max is 1 [ 2282.733988][ T5814] usb 6-1: config 8 has an invalid interface number: 8 but max is 1 [ 2282.752991][ T5814] usb 6-1: config 8 has no interface number 0 [ 2282.822563][ T5814] usb 6-1: config 8 has no interface number 1 [ 2282.840328][ T5814] usb 6-1: config 8 interface 128 has no altsetting 0 [ 2282.865037][ T5814] usb 6-1: config 8 interface 8 has no altsetting 0 [ 2282.893213][ T5814] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=e3.69 [ 2283.055996][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.101924][ T5814] usb 6-1: Product: syz [ 2283.111657][ T3152] netlink: 268 bytes leftover after parsing attributes in process `syz.0.8799'. [ 2283.121183][ T3152] netlink: 268 bytes leftover after parsing attributes in process `syz.0.8799'. [ 2283.181861][ T5814] usb 6-1: Manufacturer: syz [ 2283.200085][ T5814] usb 6-1: SerialNumber: syz [ 2283.531234][ T5814] usb 6-1: USB disconnect, device number 2 [ 2283.553802][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.560917][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.634069][T32399] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2283.869192][T32399] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2284.060483][T32399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.121269][T32399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.155548][T32399] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2284.215124][T32399] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2284.233265][T32399] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2284.253456][T32399] usb 4-1: Manufacturer: syz [ 2284.280405][T32399] usb 4-1: config 0 descriptor?? [ 2284.305081][ T3162] syzkaller0: entered promiscuous mode [ 2284.310726][ T3162] syzkaller0: entered allmulticast mode [ 2284.395638][ T3162] tipc: Started in network mode [ 2284.408855][ T3162] tipc: Node identity 6ac7c84560d9, cluster identity 4711 [ 2284.427108][ T3162] tipc: Enabled bearer , priority 0 [ 2284.476833][ T3161] tipc: Resetting bearer [ 2284.543176][ T3161] tipc: Disabling bearer [ 2284.593777][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.601027][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.727222][T32399] appleir 0003:05AC:8243.00AD: unknown main item tag 0x0 [ 2284.775934][T32399] appleir 0003:05AC:8243.00AD: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2284.829277][ T3164] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 2285.139462][ T3176] netlink: 15976 bytes leftover after parsing attributes in process `syz.5.8804'. [ 2285.208710][ T3168] delete_channel: no stack [ 2285.267756][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8806'. [ 2285.282413][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8806'. [ 2285.292417][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8806'. [ 2285.633765][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2285.641195][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.173705][T24752] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 2286.675821][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.684785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2287.024226][ T3196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2287.713991][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2287.721412][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2287.730069][T24752] usb 4-1: device descriptor read/64, error -71 [ 2287.749672][ T3209] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2287.985391][T24752] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 2288.205268][T24752] usb 4-1: device firmware changed [ 2288.227995][T24758] usb 4-1: USB disconnect, device number 18 [ 2288.309352][ T3213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8813'. [ 2288.346093][T10084] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 2288.393679][T10084] bond0: active interface up! [ 2288.484115][T10084] bond7: (slave macvlan31): link status definitely up, 10000 Mbps full duplex [ 2288.523662][T24758] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2288.532905][T10084] bond7: active interface up! [ 2288.679162][ T3217] FAULT_INJECTION: forcing a failure. [ 2288.679162][ T3217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2288.693934][ T3217] CPU: 1 UID: 0 PID: 3217 Comm: syz.5.8814 Tainted: G L syzkaller #0 PREEMPT(full) [ 2288.693968][ T3217] Tainted: [L]=SOFTLOCKUP [ 2288.693978][ T3217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2288.693992][ T3217] Call Trace: [ 2288.694001][ T3217] [ 2288.694011][ T3217] dump_stack_lvl+0xe8/0x150 [ 2288.694046][ T3217] should_fail_ex+0x414/0x560 [ 2288.694085][ T3217] prepare_alloc_pages+0x22b/0x650 [ 2288.694119][ T3217] __alloc_frozen_pages_noprof+0x123/0x370 [ 2288.694149][ T3217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2288.694181][ T3217] ? __pfx__copy_from_iter+0x10/0x10 [ 2288.694206][ T3217] ? policy_nodemask+0x27c/0x720 [ 2288.694233][ T3217] ? aa_file_perm+0x44c/0x1530 [ 2288.694268][ T3217] alloc_pages_mpol+0x232/0x4a0 [ 2288.694300][ T3217] alloc_pages_noprof+0xa9/0x190 [ 2288.694329][ T3217] anon_pipe_write+0xbf0/0x1460 [ 2288.694355][ T3217] ? __pfx_aa_file_perm+0x10/0x10 [ 2288.694409][ T3217] ? __pfx_anon_pipe_write+0x10/0x10 [ 2288.694432][ T3217] ? common_file_perm+0x1b5/0x220 [ 2288.694479][ T3217] ? bpf_lsm_file_permission+0x9/0x20 [ 2288.694503][ T3217] ? security_file_permission+0x75/0x290 [ 2288.694528][ T3217] ? rw_verify_area+0x255/0x4d0 [ 2288.694560][ T3217] ? import_ubuf+0xfb/0x1d0 [ 2288.694587][ T3217] aio_write+0x535/0x7a0 [ 2288.694615][ T3217] ? __pfx_aio_write+0x10/0x10 [ 2288.694649][ T3217] ? __might_fault+0xb0/0x130 [ 2288.694702][ T3217] io_submit_one+0x775/0x1430 [ 2288.694753][ T3217] ? __pfx_io_submit_one+0x10/0x10 [ 2288.694788][ T3217] ? __might_fault+0xb0/0x130 [ 2288.694838][ T3217] ? __might_fault+0xb0/0x130 [ 2288.694873][ T3217] __ia32_compat_sys_io_submit+0x1c7/0x360 [ 2288.694908][ T3217] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 2288.694939][ T3217] ? ksys_write+0x22a/0x250 [ 2288.694979][ T3217] __do_fast_syscall_32+0x1dc/0x570 [ 2288.695005][ T3217] ? lockdep_hardirqs_on+0x7b/0x110 [ 2288.695026][ T3217] ? do_fast_syscall_32+0x34/0x80 [ 2288.695050][ T3217] ? irqentry_exit+0x10f/0x670 [ 2288.695076][ T3217] do_fast_syscall_32+0x34/0x80 [ 2288.695101][ T3217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2288.695129][ T3217] RIP: 0023:0xf709d539 [ 2288.695147][ T3217] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2288.695168][ T3217] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 2288.695191][ T3217] RAX: ffffffffffffffda RBX: 00000000f545c000 RCX: 000000000000f000 [ 2288.695208][ T3217] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.695223][ T3217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.695236][ T3217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2288.695250][ T3217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.695283][ T3217] [ 2288.754456][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2289.002078][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2289.014552][T24758] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2289.023690][T24758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.033910][T24758] usb 4-1: Product: syz [ 2289.038200][T24758] usb 4-1: Manufacturer: syz [ 2289.043129][T24758] usb 4-1: SerialNumber: syz [ 2289.078558][ T3221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8815'. [ 2289.112847][ T3221] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2289.127317][T24758] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2289.172594][T24752] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2289.239856][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2289.246570][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.477840][ T3204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8811'. [ 2289.487381][ T3204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8811'. [ 2289.497238][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8811'. [ 2289.793746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2289.914226][T15280] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2289.929753][ T3236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8819'. [ 2290.018080][T24758] usb 4-1: USB disconnect, device number 19 [ 2290.104087][T15280] usb 1-1: Using ep0 maxpacket: 32 [ 2290.115547][T15280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.128246][T15280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.152616][T15280] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2290.176227][T15280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.189775][T15280] usb 1-1: config 0 descriptor?? [ 2290.275666][T24752] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2290.305053][T24752] ath9k_htc: Failed to initialize the device [ 2290.323025][T24758] usb 4-1: ath9k_htc: USB layer deinitialized [ 2290.422224][T15280] usbhid 1-1:0.0: can't add hid device: -71 [ 2290.431680][T15280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2290.516513][T15280] usb 1-1: USB disconnect, device number 59 [ 2290.833770][ C0] net_ratelimit: 1 callbacks suppressed [ 2290.833792][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2290.848310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.092335][ T3249] bridge0: port 3(bond1) entered blocking state [ 2291.108196][ T3249] bridge0: port 3(bond1) entered disabled state [ 2291.134117][ T3249] bond1: entered allmulticast mode [ 2291.217213][ T3249] bond1: entered promiscuous mode [ 2291.646503][ T3259] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8825'. [ 2291.659457][ T3256] netlink: 'syz.5.8825': attribute type 5 has an invalid length. [ 2291.697134][ T3256] ip6erspan0: entered promiscuous mode [ 2291.873744][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.881024][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2292.215679][ T3275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8834'. [ 2292.252318][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8834'. [ 2292.913852][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2292.920993][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.953787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.960958][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2294.827463][ T30] audit: type=1326 audit(1767711527.736:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2294.871869][ T30] audit: type=1326 audit(1767711527.736:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2294.910200][ T3319] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 2294.945312][ T30] audit: type=1326 audit(1767711527.736:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2294.993786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2295.018885][ T30] audit: type=1326 audit(1767711527.736:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.276092][ T3325] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.8843'. [ 2295.313340][ T30] audit: type=1326 audit(1767711527.736:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.371115][ T30] audit: type=1326 audit(1767711527.736:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.449620][ T30] audit: type=1326 audit(1767711527.736:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.509925][ T30] audit: type=1326 audit(1767711527.746:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.584522][ T30] audit: type=1326 audit(1767711527.746:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2295.649849][ T30] audit: type=1326 audit(1767711527.746:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3316 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2296.033764][ C0] net_ratelimit: 1 callbacks suppressed [ 2296.033788][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2296.046609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2296.083929][T24752] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2296.225675][T24752] usb 1-1: device descriptor read/64, error -71 [ 2296.507053][T24752] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2296.586218][ T3350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8846'. [ 2296.627512][ T3347] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2296.634127][ T3347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2296.642072][ T3350] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8846'. [ 2296.658614][ T3350] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 2296.663857][T24752] usb 1-1: device descriptor read/64, error -71 [ 2296.667366][ T3350] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 2296.682184][ T3350] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 2296.719080][ T3347] vhci_hcd vhci_hcd.0: Device attached [ 2296.831115][T24752] usb usb1-port1: attempt power cycle [ 2297.040781][T24741] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 2297.073766][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2297.080950][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2297.193658][T24752] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2297.214449][T24752] usb 1-1: device descriptor read/8, error -71 [ 2297.463994][T24752] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2297.495294][T24752] usb 1-1: device descriptor read/8, error -71 [ 2297.614308][T24752] usb usb1-port1: unable to enumerate USB device [ 2298.113860][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2298.122682][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.163863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.171016][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.193850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.201132][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2301.233990][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2301.241043][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2302.273820][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2302.280997][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2303.314674][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2303.321794][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.353829][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.360935][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2305.403832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2305.410924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2306.433932][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2306.441643][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2307.474135][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2307.481341][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.514093][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.521131][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2309.563874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2309.571087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2310.593809][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2310.601095][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.634012][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.641234][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2312.673844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2312.680992][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2313.713851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2313.720956][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2314.753861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2314.760984][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2315.803854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2315.810960][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2316.833883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2316.841917][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.873813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.881108][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2318.913861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2318.921754][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2319.953950][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2319.961055][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2320.993924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2321.000983][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2322.033937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2322.041171][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2323.073839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2323.081051][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.113859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.121041][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2325.153855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2325.160978][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2326.193868][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2326.201008][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.233826][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.240916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2328.274402][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2328.281502][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2329.313763][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2329.320811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2330.353931][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2330.361086][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2331.393862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2331.400994][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2332.433928][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2332.441728][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.473801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.481230][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2334.513858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2334.521079][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2335.553872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2335.560977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2336.594291][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2336.601361][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2337.633859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2337.641040][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2338.673862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2338.681065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2339.713897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2339.722356][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2340.753937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2340.762289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2341.793886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2341.801083][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2342.833910][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2342.841201][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2343.873856][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2343.881274][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2344.914028][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2344.921231][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2345.953794][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2345.960819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2346.993828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2347.000918][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2348.033858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2348.040955][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2349.073755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2349.080872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2350.113745][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2350.120737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2350.677950][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.685329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.153807][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2351.160864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2352.193761][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2352.200792][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2352.754194][T30761] Bluetooth: hci1: command 0x0406 tx timeout [ 2353.233957][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2353.241164][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2354.283837][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2354.290870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2355.313789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2355.320993][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2356.353779][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2356.360812][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2357.393766][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2357.400830][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2357.873711][T30761] Bluetooth: hci3: command 0x0406 tx timeout [ 2358.433801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2358.440799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2359.473841][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2359.480874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2360.513751][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2360.520883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2361.553870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2361.560931][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2362.593819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2362.601001][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2363.633854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2363.640919][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2364.673775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2364.680810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2365.713869][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2365.720939][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2366.753795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2366.760820][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2367.793893][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2367.800955][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2368.833685][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2368.840690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2369.873819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2369.880849][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2370.913825][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2370.920863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2371.953751][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2371.960760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2372.993833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2373.000885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2374.033738][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2374.040762][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2375.073784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2375.080864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2376.113813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2376.120954][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2377.153800][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2377.160815][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2378.203835][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2378.210908][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2379.233724][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2379.240723][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2380.273839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2380.280882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2381.313801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2381.320797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2382.353764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2382.360783][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2383.393711][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2383.400722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2384.433839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2384.440899][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2385.473732][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2385.480732][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2386.516058][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2386.523064][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2387.553771][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2387.560756][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2388.593896][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2388.600980][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2389.633695][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2389.640689][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2390.673819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2390.680842][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2391.713853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2391.720875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2392.753864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2392.760904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2393.793777][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2393.800794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2394.833755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2394.840851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2395.873739][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2395.880770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2396.913774][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2396.920820][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2397.963799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2397.970852][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2398.993935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2399.000952][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2400.033865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2400.040923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2401.073834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2401.080899][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2402.113769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2402.120915][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2403.153885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2403.160964][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2404.193850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2404.200888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2405.233762][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2405.240828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2406.274272][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2406.281286][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2407.313797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2407.320943][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2408.353891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2408.360946][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2409.393759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2409.400983][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2410.433981][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2410.441030][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2411.473953][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2411.481012][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2412.118450][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2412.125005][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.513797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2412.521026][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2413.553788][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2413.560874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2414.593776][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2414.600834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2415.633714][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2415.640781][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2416.673708][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2416.680731][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2417.723742][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2417.730787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2418.763776][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2418.770824][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2419.794104][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2419.801126][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2420.833769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2420.840863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2421.873798][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2421.880948][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2422.923905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2422.930959][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2423.963761][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2423.970786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2424.993767][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2425.000793][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2426.043767][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2426.050804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2427.073722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2427.080758][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2428.113759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2428.121005][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2429.163791][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2429.170843][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2430.193916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2430.200979][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2431.234063][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2431.241135][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2432.273702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2432.280737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2433.313734][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2433.320760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2434.353784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2434.360845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2435.393775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2435.400903][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2436.433760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2436.441001][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2437.483786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2437.490850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2438.513768][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2438.520845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2439.554147][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2439.561189][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2440.594229][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2440.601256][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2441.633760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2441.640826][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2442.673740][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2442.680813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2443.713778][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2443.720813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2444.753927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2444.761148][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2445.803749][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2445.810789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2446.833759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2446.841011][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2447.873723][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2447.880863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2448.913660][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2448.920786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2449.953720][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2449.960847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2450.993775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2451.000859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2452.033791][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2452.040834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2452.434366][ T31] INFO: task kworker/1:5:24741 blocked for more than 143 seconds. [ 2452.442260][ T31] Tainted: G L syzkaller #0 [ 2452.449545][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2452.458643][ T31] task:kworker/1:5 state:D stack:21496 pid:24741 tgid:24741 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 2452.470877][ T31] Workqueue: usb_hub_wq hub_event [ 2452.476065][ T31] Call Trace: [ 2452.479415][ T31] [ 2452.482354][ T31] __schedule+0x149b/0x4fd0 [ 2452.486963][ T31] ? try_to_wake_up+0x7f5/0x12b0 [ 2452.491938][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2452.498587][ T31] ? __pfx___schedule+0x10/0x10 [ 2452.503667][ T31] ? schedule+0x91/0x360 [ 2452.507957][ T31] schedule+0x165/0x360 [ 2452.512163][ T31] usb_kill_urb+0x1be/0x2d0 [ 2452.516836][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2452.521894][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2452.528305][ T31] usb_start_wait_urb+0x1e3/0x4f0 [ 2452.533382][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2452.539141][ T31] usb_control_msg+0x232/0x3e0 [ 2452.544012][ T31] hub_port_init+0xb1d/0x28e0 [ 2452.548877][ T31] hub_event+0x2573/0x4ef0 [ 2452.553338][ T31] ? __perf_event_task_sched_in+0xec/0x17e0 [ 2452.559392][ T31] ? __pfx_hub_event+0x10/0x10 [ 2452.564572][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2452.570372][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2452.576258][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2452.582121][ T31] process_scheduled_works+0xad1/0x1770 [ 2452.587805][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2452.593890][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2452.600290][ T31] worker_thread+0x8a0/0xda0 [ 2452.605067][ T31] ? __kthread_parkme+0x7b/0x200 [ 2452.610070][ T31] kthread+0x711/0x8a0 [ 2452.614325][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2452.619487][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.624146][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2452.629360][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.634053][ T31] ret_from_fork+0x510/0xa50 [ 2452.638686][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2452.643932][ T31] ? __switch_to+0xc9e/0x1480 [ 2452.648669][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.653314][ T31] ret_from_fork_asm+0x1a/0x30 [ 2452.658374][ T31] [ 2452.661541][ T31] [ 2452.661541][ T31] Showing all locks held in the system: [ 2452.669460][ T31] 1 lock held by khungtaskd/31: [ 2452.675105][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2452.685200][ T31] 2 locks held by getty/5591: [ 2452.689927][ T31] #0: ffff8880346130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2452.699930][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2452.711617][ T31] 4 locks held by kworker/u8:20/10079: [ 2452.717254][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2452.727295][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2452.736367][ T31] #2: ffff88809a708788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 2452.746567][ T31] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 2452.756997][ T31] 5 locks held by kworker/1:5/24741: [ 2452.762343][ T31] #0: ffff88823be24148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2452.773968][ T31] #1: ffffc9000c377bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2452.786174][ T31] #2: ffff88802999c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2452.795239][ T31] #3: ffff88802999f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2452.807076][ T31] #4: ffff888024d84768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2452.817367][ T31] [ 2452.819714][ T31] ============================================= [ 2452.819714][ T31] [ 2452.828818][ T31] NMI backtrace for cpu 1 [ 2452.828840][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2452.828862][ T31] Tainted: [L]=SOFTLOCKUP [ 2452.828867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2452.828878][ T31] Call Trace: [ 2452.828884][ T31] [ 2452.828891][ T31] dump_stack_lvl+0xe8/0x150 [ 2452.828916][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2452.828939][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2452.828966][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2452.828991][ T31] sys_info+0x135/0x170 [ 2452.829009][ T31] watchdog+0xf95/0xfe0 [ 2452.829034][ T31] ? watchdog+0x20a/0xfe0 [ 2452.829060][ T31] kthread+0x711/0x8a0 [ 2452.829083][ T31] ? __pfx_watchdog+0x10/0x10 [ 2452.829104][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.829126][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2452.829150][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.829170][ T31] ret_from_fork+0x510/0xa50 [ 2452.829188][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2452.829201][ T31] ? __switch_to+0xc9e/0x1480 [ 2452.829226][ T31] ? __pfx_kthread+0x10/0x10 [ 2452.829246][ T31] ret_from_fork_asm+0x1a/0x30 [ 2452.829279][ T31] [ 2452.829285][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2452.956535][ C0] NMI backtrace for cpu 0 [ 2452.956555][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2452.956580][ C0] Tainted: [L]=SOFTLOCKUP [ 2452.956587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2452.956599][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2452.956623][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b1 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2452.956640][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 2452.956656][ C0] RAX: 0000000001ecfc4d RBX: ffffffff819713ee RCX: 0000000080000001 [ 2452.956670][ C0] RDX: 0000000000000001 RSI: ffffffff8d792242 RDI: ffffffff8bc083e0 [ 2452.956684][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2452.956698][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822570 [ 2452.956712][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2452.956725][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2452.956740][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2452.956753][ C0] CR2: 0000555c50e30168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2452.956769][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2452.956780][ C0] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2452.956792][ C0] Call Trace: [ 2452.956801][ C0] [ 2452.956808][ C0] default_idle+0x13/0x20 [ 2452.956831][ C0] default_idle_call+0x73/0xb0 [ 2452.956854][ C0] do_idle+0x1be/0x4d0 [ 2452.956874][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 2452.956895][ C0] ? __pfx_do_idle+0x10/0x10 [ 2452.956919][ C0] cpu_startup_entry+0x44/0x60 [ 2452.956939][ C0] rest_init+0x2de/0x300 [ 2452.956964][ C0] start_kernel+0x381/0x3d0 [ 2452.956984][ C0] x86_64_start_reservations+0x24/0x30 [ 2452.957009][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2452.957033][ C0] common_startup_64+0x13e/0x147 [ 2452.957066][ C0] [ 2453.084092][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2453.084385][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2453.092669][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2453.092732][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2453.092808][ T31] Tainted: [L]=SOFTLOCKUP [ 2453.092838][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2453.092872][ T31] Call Trace: [ 2453.092901][ T31] [ 2453.092934][ T31] vpanic+0x1e0/0x670 [ 2453.093028][ T31] panic+0xb9/0xc0 [ 2453.093100][ T31] ? __pfx_panic+0x10/0x10 [ 2453.093184][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2453.093249][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2453.093343][ T31] watchdog+0xfdf/0xfe0 [ 2453.093439][ T31] ? watchdog+0x20a/0xfe0 [ 2453.093539][ T31] kthread+0x711/0x8a0 [ 2453.093622][ T31] ? __pfx_watchdog+0x10/0x10 [ 2453.093697][ T31] ? __pfx_kthread+0x10/0x10 [ 2453.093807][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2453.093907][ T31] ? __pfx_kthread+0x10/0x10 [ 2453.093984][ T31] ret_from_fork+0x510/0xa50 [ 2453.094049][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2453.094089][ T31] ? __switch_to+0xc9e/0x1480 [ 2453.094182][ T31] ? __pfx_kthread+0x10/0x10 [ 2453.094257][ T31] ret_from_fork_asm+0x1a/0x30 [ 2453.094374][ T31] [ 2453.100796][ T31] Kernel Offset: disabled