last executing test programs: 8m8.689302913s ago: executing program 0 (id=1096): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0xffff, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) 8m8.536656557s ago: executing program 0 (id=1097): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x1, @broadcast}, 0x14, {0x2, 0x4e23, @local}, 'bridge_slave_1\x00'}) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a", 0x2}], 0x1}}], 0x1, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m8.384848602s ago: executing program 0 (id=1099): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x8100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, &(0x7f00000005c0)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 8m8.242922703s ago: executing program 0 (id=1100): r0 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa0300", 0x6}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67736f7570c769643dc3e90c2751deaa0f37aa03222d8b335221e66f7819a806f7cfc952ab2b1ab294eefc784172a0dfdf774fbb93e3", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r7, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) set_mempolicy(0x4, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_fuse_handle_req(r7, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x400000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r8, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="04000000002000002c0012800b00010062726964676500001c000280ff01000008001c002800000008001b00060000005192e3c98234ccba742bb31c2de6e2510b4b2dec61fe5d4cc34dd98f44e6c4791ec12c266741a197da86ab50a4e8160b839306d1ebceb92c9384e32b3daed7bac40cf6f2a01c0805180bab1ab57bc987158db690f59ad0746f3a39"], 0x4c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) 8m7.94100538s ago: executing program 0 (id=1103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a", 0x2}], 0x1}}], 0x1, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x241) 8m7.420359842s ago: executing program 0 (id=1106): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000020000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x98}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0xac926000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000340)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = getpid() setpriority(0x0, r5, 0x8000000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)='%pI4 \x00'}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x90000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000540)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0xe807, 0x7d, &(0x7f0000000100)=""/125, 0x40f00, 0x40, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000001c0)={0xffffffff, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000040)=[{0xfff, 0x0, 0x1, 0x6}]}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x208042, 0x0) 8m6.676820637s ago: executing program 32 (id=1106): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000020000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x98}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0xac926000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000340)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = getpid() setpriority(0x0, r5, 0x8000000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)='%pI4 \x00'}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x90000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000540)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0xe807, 0x7d, &(0x7f0000000100)=""/125, 0x40f00, 0x40, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000001c0)={0xffffffff, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000040)=[{0xfff, 0x0, 0x1, 0x6}]}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x208042, 0x0) 9.107718313s ago: executing program 4 (id=2972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400)=0xffffffffffffffff, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xefeffffffffffffa]}, 0x8, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, 0x8) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff8}}, {0x20, 0x2, @in6={0xa, 0x12, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 7.061168015s ago: executing program 5 (id=2989): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.124584326s ago: executing program 3 (id=2990): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x3, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) syz_pidfd_open(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f00000003c0)=@userptr={0x8000, 0x0, 0x4, 0x10000, 0x7, {r8, r9/1000+10000}, {0x3, 0x2, 0x8, 0x8, 0xff, 0x3, "6a1d3203"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x29f1, 0x0, r10}) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x17) syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002e3cee7104c05e102976f010203010000000000000000000904090a040ce762fd09050500000000000000050c02600009f80009f9835b13cfb1e9d209040b142000020302c58244f5c9e967394389e9b55d5ed77eae87d830ff9d47932d0f8a548dc6b5adfeeac04a6225f8b41351b7cb1b5dfa482f585b88890f3bc2cd760fc46f895505852a454d6aa6d4b58201ab7b53cbcae7b8c8cb29c8476e9f6c334a61ecb3cbaa48db327afe8b52da101b088a8ebcb3d5472d96801ed832fefa45ae44fe51"], &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0}) 5.980257528s ago: executing program 4 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0xfe}, {0x2, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x1}, 0x2, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 5.9187198s ago: executing program 5 (id=2992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000070000"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 4.689102745s ago: executing program 5 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.686855973s ago: executing program 4 (id=2995): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x183000, 0x12345}) 4.557040011s ago: executing program 2 (id=2997): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 4.556226038s ago: executing program 1 (id=2998): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.503660337s ago: executing program 5 (id=2999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc050000000000000000000000000001000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) timer_create(0x3, 0x0, 0x0) 4.352339815s ago: executing program 1 (id=3000): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x64}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.334156334s ago: executing program 2 (id=3001): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=""/266, 0x10a}, {&(0x7f0000002a40)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/181, 0xc9}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f0000000740)=""/196, 0xc4}], 0x8}, 0x10182) 3.878682884s ago: executing program 1 (id=3002): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.408364526s ago: executing program 2 (id=3003): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000370400000000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="c304010000000000280012800b000100697036746e6c00001800028014000300fc000000dd0000000000000000000000080004000d01"], 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) 3.320658971s ago: executing program 2 (id=3004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000070000"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 3.284795461s ago: executing program 4 (id=3005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0xfe}, {0x2, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x1}, 0x2, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.180217479s ago: executing program 2 (id=3006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000850) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 3.136564522s ago: executing program 4 (id=3007): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) 3.055518482s ago: executing program 5 (id=3008): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "1fec3497f3dbd724"}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x88}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 2.974901853s ago: executing program 4 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.971037589s ago: executing program 3 (id=3010): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.800318804s ago: executing program 1 (id=3011): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001200)='./file0/file0\x00', &(0x7f0000001240)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000480)={0x0, 0x0, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_fuse_handle_req(r1, &(0x7f0000008840)="7b903d4763079f496736ebdccf95aca07a5af9eb6976364b5b3d3bd8c42b6392f3d244d6fcc4063cfd72e2f12adf73b6ab0300eb123636938e23aeb432e4cffedd9bfc12f33f42234c832345d62a7594616c97e968c82088586fc6e9ecfd9bbbc37b3d4cdb914a25e605681aeabf797dc3597859e5b494c09d70c8949f8fe545c173c632466cfd4223ee4be29e3bfbc6f5962ea3b1044071d4f46c1c30f903193c4a1d74e9e091f49a3ca1f5289c5692930da06af35c334680a3034ca907881e4f2f680a93935c6a31dca2c8af12526e71f556cbd6e8e93c4f4f686ecb4a5b1a1a9f9c1dd993d912dbec33f1cf859b5b74550a1de236a49726b86da6a006d13be5af26b1576c5bb9b21f8f6d4a16bfbd0aa256f43594c59d39a9e7335abdaec4dbfba27811ccbb934aa113c901b9af55177e8d2e4444ee3fea5def8a787b34ca5c42e4b087358ce8d41f80a82092676c776fbdc86d63f8740395dbe0ecc2684eccb5a020e6501f2dd64a640979e8f6b0962206b6c47bfb132bc3d9a827c8f2edb4318cb15e310a3de97b7c410e81ad1fc15dfd263de4f84dedf25e4e200d782f4b23ee3beb5c8a1a57f6ffd298d82223d0b9820da41f22381890ac457a00693d564165b5659d880055b10d2a473305a4ee7e3d3953204e1b91be5fa44628e381eada216d007b69c85c832483f241938c05ed22922d4bc68c190ff497379e36fe69b3efca66dfcdf5479b0978b0400f2663b8d3092d8331210dacc30747af4db2f3f3d82ca1db2921a9dcb2c7fc1280bd4360add4663f25826551a74f22380cbcca0df1ce00728453a4d74f95f3aaf862c366b6e6ce8e031150219c72966d82e2fdb5b720cf0dac60aaee72aa769862e3a9c6a10a961d9b7a6b11222835dc7ae982dbf9037acab7f9860db503879a7e9df1b41c9fe794c498609830ae26dd808abbbd70f1667f0744d11137347896a2d99ce20d56040be4e28a1edfecd03494e59e0e065e9fee44083e81ab9605f47d2c97cf9a4b69fa5d26711e45adba2d79c717b5b183a550637109dca0fddf42efd817187dd27241ed3dbcc8a0547df55ad0d623620c72bf3f60c8bb051c348e30c90c0a1de3269a254e994ae7b27f385f5f56cbc2669d89ed62feaf7573199a1dbea749bfaf158a187971114a7d11582d9b5ddf7d86673f51006e994277d4be948011d42bd405a509aa0c117def9cc4e5de12e9180d532a48b631df8fe689562a8c8453a9ecb494aae5099222cd68255d3ede4c3fb3d752b1e61c7edb24e2e43292670f093d476909a25676972d7fbc65dbe0d565a4d4737d98b7e14051418d49f8f97885de545ff30ad9adf123f6e1e46e8f3d02f3a62439bb2dee2859d4c6e42b08a5c4cad99a0270cc1729d25ff7e1325d2380f87c733746a2ed5f532e674c3a2415dbee679d9e5163672bc10b57723afc0654682ffc5c4533bc9b392d9f192b895930062c94f858f17501801d9dcc870b72bf8380af9a7b00a6752ee685dc4ede93051687eba57f215d53bc9cfc1b0798c9b7c02b7e5374fd95953cbea4e432898072aad22dcb6a1062307a150bbdfd33019e91b4d29a5046158a2d30aceb4996e5f34591844b5562f5e6d696d7081e805d804ac8deb653c1bc591fdfe9e2a09e8b20a5f2fcd41638c3cefd5ceea0fc9f59de09b0cbbdae7aa60b8bd8781e284297bb3433d885cdba5353d7bec37047aeb19955eb00c09ef94b5868bb59c48d3531479910429fa4cc4f175d364faf660601a93f949193887d811bb16ddd95d2e67ac3688d400b97ded39c8531aff108f89406426d6fe170629b9ca357ad310e1d095c597413dfe76413a86b6dc185b83990b7cff5709d36da9c0b06749bca6356a6bd287dddd60c9945532f5b5f4cf4038f17aa67ea5cae5bc15b32ff8bd53320169b2a0119bb0f3d9de912321975bb55eb8de56a128e9425167f650946d5c90851e4c52bda21339b2dc80a66900b4114594b90cf7fe74a04d8690071b396af673f0d95d5e05727650b3a6a770c8440801c1287e544fd43af7b3aa3bcf06fb2d1ca2ee3aeba76c9c0f796a750be5631125ba50e5e7b8eb7ac493add2de950f59a579d4dea95e5c9301b18c08d1998a2da74e41eecc129bb23a873f94268e217760f3ff0a99e34eaff15af9a6ed2b976a74b1f97db0ad9c3781f24dd137aa7eb807d725ba1617abb1d54be93843c1cc14b20fc037dadcf0cd58c6c7d3151ec8d5efe5a916af7e1694e036e6afe55cd2887d79f399cb42478f9f9998297a89a710adf7e7f48063cc0168782668a71c6d139747ecb265e5eefcbd8d617b24c45fe1586f2b97a626b7f0926969d02d6cde13bc7d46475c65522da105cae8f43dee9d51a6fd37c74fe08a7589405fc8cbb2f781fff3913285454bcfa48f90f5c3f0dc0f2c6e4b5b1af0da6e0f550ae79eea3b4705ce2b5490bbcdf4b25c7533b08ec1605a13693aad0f1ac9220d0b43507d1521ba2652ca0e9a7868a3af8a970b9372efa1ad71bc0d8617ff1a5d0e8e36581715419efbb664dae910ba188128dfbfb0d6380527061d79317ccf6e2a183c1559c19d35d5b6100730776bc7aed48ca52f292b90d461c529b5cede9a2cce0b8f28f073eef23fd805fea69b5db489428b3a34b3f2c79a84c034b957fca3289b092051021ecee2a769e5bb22ada14bb7fe3da96cdf3de0545c302744343d838047e8fcc56e72a1799451b152d0a38cd392487f8f052424bd2ef672e40b80edc37e279ecc5d6bdd9235aca028b9391d2c0db4514490152cf3892f2a60d7a12841895f84dd731f74345d5242646ff968442f6f4983588bcd77ca6eaa7558b575f7c1c45629670b57af4d5c9159291844be56f1160b1784584c84eb2c0f5b2052db039534082ff1b180488dcb99461c05796364c9f37c8a932300ea627b3f14669be0d56b272decdfe1883dd51aa23ccf2785cad3967bdf3412b308f20364a9485eba4c6d7b1a5ce6fd87544d0e72c0baef82e02cef7e78e57e88074990423ae010ad0ffc2e21b36536cc5226f739245d9743110786cc34d68e694f21a46af16317ccb03d7994ba1ad121b4f6ff17595c5c6627de95ec0df0b80e7498a7f2b6005f5c1fb26328c0666c3cbe801b1d761a94d41c1f76b0ddcfa9939e14d69150457a4f950c4df7060b1be046ac8bdc0c657832d1beb07529362c34ffcbac348d563657ebdc9fdab4e11f956b74656e5ce36495237b53513e5b4839b2e5d1a8f1e3f7a5e8f1199c4a19ad88449fab9040e443b712c1a2537b0ca26aa69d20943dbaefa4aa7a981ed11b4ee0f59ccef072c4f55d413f7e905889eefc516fd215e59d4c3cb78509f945ddce8b2bac919e0ba4dbd1a9ee0aecc66a7d15766e9a0cf0f703069831cbeb34edb06798b162117b0a9fd18337f14537d0ee7839119521416072f114be3d6c8254ddced0aaf9533f7e0836f5ebde4df68f3496e083912be564eb85569bcd981be606a6b51fe66c8bf88b9980c3b52ab35536a0e6167cce361113c5352e3e35a385398f5ec0c277dd1843a7e8f1eb7be76a574c178ae0c96f8cbd613fa72d331692ca7df6429c5fb150f88ed77ad1b3ff621016185f7fe64c10618c23efc8cf3ec090e4d9db9f1ab62de1bbf72d813eb94d92dcb2b5775cc8927d934bf034b1c7bf69f4ad0afd19fc81ea4efe2dd323ec58d5bd9b6ae584666a96c9b37aa689f7f7d73b9daa98ea5a93f43d52b29c9e518252a9b72af7c1e0e6b87105b20e0cae46a2fae11fb4b6027a5a77d09bbe468e57fe9ada13e0768806fb753caa55ee2519592c4d43b3d1e078e64dd4bb2a1c909517e6b0e41f929b9e3844a460f62b34f40698d3eef651d6d4e7dbb2461a367d9a6e0df04552215c9ca59b95aef5689ffa1188d7ed4fa12bcd5434ccbbea730c21ee88a1033bb3eaf4d4f3e56296a596c88c1c3306923a25bbe2d54fc5832b23dea14f069e45526010bd08313a93a22a6baede96336cf5f0e0f48dab9aa0a69ed8643f09b06cff60306d76c835249739c52de9894e8173c240d55f51fc656df7f3e469c0493f8a7032e9d62b9e0888050bfe4121f0c94267daffca3516cbd4e530218a217f539ace5239dd2e6c5ee6a80f1aa73962cb48b6249ddb32a805891950a1598801b3e270f22ef4f278ba9f51dd48f4379904534b7d644cb4bb3abe780415aa9c1f69a97f2ca5adc2dea47fea5f20338352721b47777fd232bf5dcc95a2098cf77debf758d9eb800d7e314f243e0206bf5266cd3bec6e28c396f42d397e625a9a6d0e91019ece68e30a187cc7e9f0cf33aa567b31e33bcaefb3b08d24cb6f6cafc422879f014149710d6daf012a75565efd0ac15afbaa3ddbf66556f7510c94e512f1930714a639bbe9c0442bd857c30fcc284a07a3e85678b3b11bf1911135646a07f1008fb204f67f2f8bf0c261eaac5ca8f0db68b1b140fd51f7fa25120690a1e71552d96723a9fdd5faa586250b65b08a19c8b01e310abf9b18244adbcd6cb0cf83eb23c7d9cb7769dd3873555e64752bb0745b412d22c59c96e8378ad46f1d1d7acde23717b76b4522b64f4fb3553509c44d636a08505f7cf5f24d08e75e8b1452f20fe8758430bbfc03489cea9cbc33fe71a351cc1bbbb4bfa722d8dc2a9fd8fec42761aac32975194692aaaf9e5e3eff09e7dc93141d16b901dfd0b1a3533cf2096a27d03bd5eee5713b64435ba625f95c86dcf39f8b43eb497f2875abb11e576df0873fecc16ef55118e9d47234b41d606b4972e5a65cdc760a5108c63b70034edca7cdb90f5947d47dad444c06a43dacf354f1da89aa535aa2017888f1bf09019860f2ebe4af8c6398f3b83a0da7d806576712be4a9464d309b52ebbd2afea4a2636d6662f46d4dd5224550bfe2491d4b07329d630d551c12cdd15a793ff9be35e216ccb2b4da192d688bcd5385f8545bdac7c3e73303a62d7d96122a8cfc81687308864bf3615050cf4424a29c3ca879fdb1b2d99c9c55cb4a224fc40aea4f090a84434d65b169cf01700653ef3247c386426660dd7ed1d6c4d36cf0807ae1bbf85af71c88d010832035414156e8469794c5a9f899284978ab86bc1479d7ed34806ea61c0da78194b75e7d8127e4a43dc294ad6e0fe9873b363844180c5b5bc2ed43c8d0e1324c666d994a32ca6b1f67aa78781699c7e1333ea4d186e8e333eee3cc60f3838ab7dcff8606583c309f4abd63cf9514ba6ed702de8cb3b90befcac8112fc8e9ec04d2accb4eae42ca78e227caf8a174b3865fe8788cf13ef251186c579a905bcc614331789724084db04a50f726a1d2347c6a4ed296ebc4db25ebce1566a047dd5b087e33f11acc2887824b84b480fc76a5fd0da60f319bdbefe4f69a68297670248a21306aa27f1130031cddb19d16d335e17d4762d82a9b116a3502b81ab308e3c5d1f926bc8cc451175b7e60eeece7f5e112961ef2878608441fed09b4b85a5cd34755517f5460f22350422a62670819ae2179077b1014271b576fc744bfa353b1e6301d2707fdfad98c1e84993c724f497287ce7e01eb02c1e5ad36d705f1db9778745e34e67eaba1be1cc514313721aa645a41173eb210a7bebc30e58469cbfc744a02d8f58f11a462f76b9596b04daae3392f06af76b8435f035bed35f1fb61332d39f63419c1866789ff34359077825ab908b2149967365a7fb57199986d0ca6d272706945419b5cfafa10e7950ef65a69f11c1870cbeaf0b2e6a8ed4a4bc8435d65f17ab826f61794fd757e9383f15b7ba9aa9c3e46121ae89066772f019d6d4b9ae8d07ff7ec32f8eaeb1d5936605ce324b3b90e2dc420e1ca53503c38c5253639bb2f2fff06f6d2c6a6510d26a7f5961a5b6aa36afda7948f8f14d0d71a1f28ccf7ad57d7ae5dbecfa4c39179178452209da2e8b8f333833b0d6a4df5707fb3c92566478296878ea6d0ff4e69861d3488d80bd4b32c0f6538d2bbb3cbd908e1db68fce2efd23c6b2a3fcf0ca40234b8620e345051ffe72ac84cc7e317ba432e6bf971cedd63bcd81af4b51625390605b422d96808a553c77d82beec6d7608601244e2b4e3249a2a14c92b086f70ea32852b7c581009ad8bc3e3fcec68bbc2a91733e79153f3b5e8535a5c74a93441cf4fa3e4cbd1924db1245942e0d6b46af39fb2f84c8997094189629af49a4f6f03365fc3f66ac501989932c97962b4944efdf0dc41917848d562c6caf63a466b3468d4961e14f6a05efb3d16769847d760399a6d9aa787da5831a56249b255628100f792bfc20cb015d883ada6574b11ab0fad62f3001372937227f55f2e07079ea650ab6f8ca28491435e2b5c22b0dc6eb4dc39fef7036e39c8a0dad562ec52105cec7d24fd474103b0eae322be8b3351e06a0c2f29de1e6cc304be172d894112ad6ce47390c210f3af1fe590ae9dad65399aa0850ac6c119dcaeb9e097d1d1497851f6f25ba2e0cb0f9933f704e4bbec0b7aba8efc7201182159944a964bf4f1afc7a99fd5b3f610d6894c57d6dd617ac584bca652391b4de559e9b962316e72a5b44b5f83e416bfb223fb08004021e174a0a40592c6bffba981c7d86fbc1e856a1661a72c812a2f7d501015be7da4d126e28dbd142b8a9ed479d19967f4c2810ad6d8b4acc26f6abea8d563e620a0fd69d07689abf4059b01f6dde406b32e355ec8bb8fb821f53ce7c3632e25533e4059d57fab7583744a37946c51031747f6ca1e80a4fc9f97fec8dc71b2f081141f070a4455d25b0511a8737b5d3a43de54ef8352c4235d6259792e51b487ac3d0a3713b4670a1751b7c3af6e4f17cbd2363d456e54b1192bfaeb986285b9a0b3adb27534e6c4980e0b0bdea5d7fa389d1efb40cb0c8de49cc965e93dab04d97a5feb21958703918b10058ca07291dce2159c9fecc44ca60099cfa44657306a9280b687682f841e0e2a88de2b6b78eb73a70cf0f8b40e3f5282dfa66d2f94326536b851a7b59ae16a7e8ad9c5ba4aff4cf3740bae5e4f62ddaff71759a74ed2e762330223624bb603f9cd599d70b35623d75c2dc6e14eac8d9ecdcb6f3f999b012c263a0a4c0701f65803b1b99e749088a614f0f493a115e26f884d0a0498da78819137b8272bd6f8c9a42b262408520314169ac907628370de94561ad3a84ceeed01517753d895f1d4816e8e7fbc8e4be35ae28241098ea99416ee0c9000f43a8612774366572053f49bc66dc4710cb01099309a312d069bbef5ee0164632d8a7e88086ff4eaab5060ce23006a3546eb27cccf94254a14853b30eb1c4e0f3f411bb03d24f78b0dbfdd478984dd2902b40bd2ad7ac4d264ea1dc3bbd5304f34d87f21c77ff526105874dc73f0037b882315fd62f17c6891f24107d7319b97ab7a117731b200976bafc208e1d1bbd9bc448c167f62a6466275b61dc8619eb0d4379877013259a80ea8361f94a3dffcb7206c4288e136ce323074a813c7771b1861af89a2ad09bf2cb3b6e959e772f85b5c825769ec65e99a41b671798f0d44a94f6de58d2375fb671e71d4713a2187d6824cb6bde02f75ced2d897e59cb3d3facea4b9da8df8c47ed9e028824010a847ea05a4931b3f05ef1e1cd10d795d46862cb81bdd856c8d33174432714c3ca741817901dacd93524d05c98e1fd888177351223b81379f3d9bcb49eb9f3b3419e2757f601e91d611b708aa75a90e3e7eddaf668006933f5ce06ff5fc6993cf68ed52d4bfedd40cd9c3d9bd5d1a1ff4ddf5e80e3692e9f40ef4a2f8cda749c27779c116b164f6fea698047f664f3802266b3dfb137fafe6c5548cfe944934d989247b448970b64198fb9087dd8dc4371162eed8bee93d7c1838b0bb4e6dcd1177670bd6bb3700fd6b9cdbabce42013645dfbd8f857acb371bed930f0f0fea42636880ac9aac6f72218905ec3d44b1d3bc8802a886c00ae8306b26d58a518310445ca1e395ad6e2f0da6ed612e3386d9eb20c97b3c5dba4616fdb8c248f73182b0499b4352e5e5e7f0fd11ac9b4c44f488952e83cb782ea528432186381c9f94166256ac05bec3412de62fe138f72f3b28546888f6a484e9f664aba471e36e804b2eed48961a37c145f89e65e4fdcdf6fdf36bdadc2fe2bfb82a23a7e15d85553bc91cb5decbb83308942fd2e4e9f55902b9957153d55b820c65754c09eb2d6204da760fa98d43814baf7150b96a79830e62a39d0c0865dd51f06f6dfbcd913fc03577eb3aaf66a60d0b79b8927f0964bdf17983086e3898681b5fe48ca0fedaf28a6bd40fe821119991a3b1d871ad9a169b01f8adcd051780cac02580e123ad8bdcf4453168f6d81b61e0cfe952c89e29a60c2b8542b62d5bc15dd6bb16a67f3447a320e529c3a3e158b42a3cd704762b00b680d1755ae04e0f6fe51ed56dcbcb0be2e440aca7a374fb1cb96bd5d0738fe5070f8693b687bf06c758637807d88313590c1b11e48ad815817cb1eb41b40777e708261c87c5f45d3dd1d6303a75377e6d6cb5a9c2340cbdf4b1c7b9e59cc88cec5736156af5cfd4dd1a711f1e0f3b7838f690e5ac6d391510ebf61829ab3fb340f7153ccca061bba56dba4d3ae2716037628ae0153fa02baecc871bc26e34a943ae7e24a4759aaf034760db4281de7f072ae8ff6cdf306d9bc633c4a2254530857f53becfe665268f38fa0c4b37be92e08a68640f9e1311529db34419340f79b5b32f6ee40f11cc1c2e3db7644006357dc863863f22ca366c2c19bc4ceb5ef2d7289ab160de917567c439261968dfabac512c40e87b6a54fbac29cfa92954ceb369a54b94d80f9bd1a60aeee614cf31c99cbdf5c2c42eac68f58cea51f2f84c8f966ad658fb8791d8c974e36df1fda2ba39ed0b0378c20509d81d1b24c30b660238e5e34fea782e432cce664efcff1f38f115fa5798dbfeb51512a15a4664a3012f9a15cea3d1e5b982ce659974da2cfcd7124dfe12990021896b874437d5dc3a13916d9fcd69c3d38f2a0c71fd37515e22793657ad09ca82e7305634443a73f15b0044817945a6baa5b16027a7ffbc3f2e0c97401a96d77648a3739059996230ec93ce41608f827e4d6b4484d9698765f0629614f21a8b84afae461c21317fb885369b1ea83d2a1af9cc18973f75c9c6e611bcc3fa6f34264035e7c13004e0a35a1e315868452b7a7c8d4d7d34064913e5d19c23af39ef6bbaf8d38c0fbadc5c4fdf73221e868b83230c326985399c6c74bf2d7a39533bbb14a1795998f2b4228baf47ec528832eb28ae8be7efceed4b42e58d87c3e694e7af029ed9dde2072fbf85cc81169fa257198e197ade59bdaf1c407e9fa7b953616a6d1019a0ecc13523f49a12f26fd6d1f7b9a5fd7cb64349efbd53a1ac8b5e749b490fa9398a24a99538e42b2681e7e5f4074e6570bc72698241adb1ba8e5592b1bddb0b665b40b3556bd938a2d63b443196dd5501b9d1c4bbcda80de18c3d4e06692db3b882ad35e314070bafa11ed2e48af0c7faa139aaa084a27b4f16d8f04ebe6f3ddc6ffb491aa5e0a32820fe6d204c801e80c3e46a0cbe2dcf6b7a97c82ec1a7828caebcfc4253b6ab357b561ea8725d14924437a4bfd51f95ed55f2b89de0591dc87810c50726200b0bafbbfff53bbbe138449f054ecc97c357a783df15f857b43cbd8257f08d7965975fb73af29de9b2a90faba4ecb44890b0c30798e304df0c722ae8541af399792738911dd54dda011742a6fa222ff712d5f879afef13de6908e2b87c2ed30d3e19dacf8b4201980ca959c315be8f8f7c072537fcf7956195ca13bea104981050839f47d860165750e6925818c5a369ecd1a2f7c4b0b9da152bddf3e556286c7677a460cd7813da2beb0ae1d0af1a6cb515792306033bbf35026d9295aae5051bc0f5d17ea1aee5163c99af2a55b1e5fb390097471093dcd9b8e2f3d1feda008e5eedf9e534724580eb1313ac5fd868a8c6c10005ccef8e7e4612fdbdda5bf3c8d3176feb84b5779893923ef7d6c4e91a7b40d5fb34dcfcebe619e7f924802500098222006c62758cbb85d167298cb1299f87ca7233c62af86d856bfa8460d766163c472ba5156e65450f975d13476dd3cd62f4a6be4fa773f4cb6432aa6a1c4a9a07e4a25d7aface37f62dfb61bc5bd125aec27e8de0db76eeb088839b8b10a51ba97c518a110f40ee87c3dae28237b709d601b245712ff73ca7c77b0c5fb55c5ba874ef7e56b656cb6e26e3a2a9ca1901d518fb1788bc14b60fb3760893459337fc5f170d52a12ff275d715d75896c0a91687823b7dba4b717d4c05952fea87d27544c8deeee9de9289a7ae9ea6e7e11b9c3cff4f6125fe039949f7c167e4174ae493e590bdb7882080bc9e427cd642deac07beaaf3f354078edb589cb767123a7aadf548b4fb7daeca83f4b8514f907aa14b50c114e4023a778214badf38e7a5f5a573e490dbbc3da5292bd0a3f5c5bb09f4e40bfe3336dd56d49f83335378828961eae17931e0b793d1b3ff422d73f21ee6f99ab42f368bb94d1d89da21f230dce9b51b769385859a557537e31bc169234260566a1d826ad7dcddce7cfc5ff09bf3d7ff2073473ae3a2eaab04728b55d55863025cbfbe3884ea55b7b0e8e4f3d1605bfdaf95656d79257205970f4db96ef957ad6ee76b43b017dbade7a81960f1eee89892cda0dec99512a8ff1bbc2ac93af581b90315bb866efdd70b1d5f857b69b512298d1108e469f8122d1cfa916dea972050f3baf6b315678347989638b02aa96d8f0a30edb7b8310a82b2a012d2c2be89258eb360a29b81ceb8e0ae7e73867fc20794d0164e23e1ed2288fea8a6fb7263720f21ce3b630387c46bc8dc2bf5789a8296c7c81c4daa636d4dcfb8578596c7de6517f99f8df533244237f6141e535c1041eabc5d2076aa3b04c179fb4f1d7c456f010af195d9d50f4a32fdb04ee776c4cf62910235ef243b4fcac1e541b226a79367129f164d54c84f0c923977b5ddfd2af6b5667f4c1112810d92b54fee3cd8258416f6fcc0fd163d2bf636c08468bdafd6f3068bfa5ee59fb2ef61a33459c88a0a48a645a2725d5c77659eb9b84b380fcf84e26a11a6a1241f359e76803ece3d4320bc5a728b58c153f7f085f7e9c17fe52fcdc8edbf1a0842adc032652727da7bad3abc4e60f40a8415579ba1ac7303203c07503a28b69afb4abb73d5e1e806986a5f46e549d13ad2e33c8b8b301afb30a18bdaa5805d074a74e4e99f6c8dd69e55a474e961ca7f8849664dcd4bc25b13e27d93464683b5bdd84164e06741127b623e71db56e322aab71f6e34ad5702ada7331c657ccbd4063bf1955ae5aafaadb865a1b92377b4d15323d0222c57874bfae352158f823b412b7933126a0d34b6af028409263304b1ea7b6b6b65cf5dab1e6b6c34a418d7a74e399616ee864019aecfe459765b44904de338a354cc0fc4edea90f1a6e4e9b14dbd02bc150bf648536f3821c18f8517f096fa7330d334abbd452e5f0a9ba57ac2f0473366d12cc39646a875d4683368339ba8cbf8f4c8b945434c644d7cb1344e4f4c1d5aaf89bfa7aa04284545152076b47185ff6ef90f7cd458581265cccb3fcdd3acdb23", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x7, 0x2, 0x0, 0x400000, {0x0, 0x0, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.152719812s ago: executing program 5 (id=3012): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) pipe(0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000300)=0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000340)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(0x0, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x8044, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e2f, @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2500) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0x7) 1.08681725s ago: executing program 1 (id=3014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2d9}}}}}}, 0x0) 1.08617385s ago: executing program 2 (id=3015): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x183000, 0x12345}) 1.085682822s ago: executing program 3 (id=3016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000007000000"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 919.501524ms ago: executing program 3 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0xfe}, {0x2, 0x0, {0x0, 0x1}, {0x1, 0xf0, 0x1}, 0x2, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 606.120199ms ago: executing program 1 (id=3018): bpf$MAP_CREATE(0x0, 0x0, 0x48) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da"], 0x0, 0x0, 0x0, 0x0}) 257.053514ms ago: executing program 3 (id=3019): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x488, 0x3d0, 0x1d8, 0xffffffff, 0x3d0, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1d8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@rateest={{0x68}, {'hsr0\x00', 'batadv0\x00', 0x20, 0x1, 0xffffffff, 0x30, 0x1, 0x9, {}, {0xa98}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x13, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @port=0x4e23, @gre_key=0x9}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@mcast2, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 0s ago: executing program 3 (id=3020): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x2}}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) kernel console output (not intermixed with test programs): Pui ' to dns_resolver key: bad/missing value [ 577.078567][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 577.292707][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 577.311791][T12123] loop5: detected capacity change from 0 to 2087 [ 577.314131][ T24] [drm] Initialized udl on minor 2 [ 577.346493][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 577.370341][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 577.417146][T11901] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 577.433854][ T24] usb 4-1: USB disconnect, device number 109 [ 577.459769][T11901] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 577.493209][ T5835] Buffer I/O error on dev loop5, logical block 260, async page read [ 577.867149][ T30] audit: type=1800 audit(1768241913.261:191): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1679" name="bus" dev="ramfs" ino=45523 res=0 errno=0 [ 578.254342][ T932] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 578.414275][ T932] usb 4-1: Using ep0 maxpacket: 16 [ 578.422182][ T932] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 578.442844][ T932] usb 4-1: config 0 has no interface number 0 [ 578.453449][ T932] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 578.467685][ T932] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 578.479877][ T932] usb 4-1: config 0 interface 41 has no altsetting 0 [ 578.491706][ T932] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 578.528045][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.537943][ T932] usb 4-1: Product: syz [ 578.542803][ T932] usb 4-1: Manufacturer: syz [ 578.548938][ T932] usb 4-1: SerialNumber: syz [ 578.564832][ T932] usb 4-1: config 0 descriptor?? [ 578.572021][T12132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.613944][T12132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.744243][ T5820] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 578.835149][T12132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.894854][T12132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.922179][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.933662][ T5820] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 578.971430][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.995041][T10261] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 579.051028][ T5820] usb 3-1: config 0 descriptor?? [ 579.185672][T10261] usb 6-1: Using ep0 maxpacket: 16 [ 579.228683][T10261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.273777][T10261] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 579.298909][T10261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.317642][T10261] usb 6-1: config 0 descriptor?? [ 579.358601][ T932] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 579.497591][ T932] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 579.534265][ T5820] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 579.624506][ T5820] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0050/input/input63 [ 579.661248][ T932] usb 4-1: USB disconnect, device number 110 [ 580.112593][ T5820] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 580.760537][T12153] fuse: Bad value for 'fd' [ 581.456593][T12156] fuse: Bad value for 'user_id' [ 581.505892][T12156] fuse: Bad value for 'user_id' [ 581.591429][T11901] usb 3-1: USB disconnect, device number 103 [ 581.744761][ T5820] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 581.834338][ T5842] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 581.941113][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.008873][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.049634][ T5842] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.063359][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.101384][ T5842] usb 4-1: config 0 has no interface number 0 [ 582.130351][ T5842] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 582.144959][ T5820] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.174119][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.210809][ T5842] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 582.237196][ T5842] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.248304][ T5820] usb 5-1: config 0 descriptor?? [ 582.281718][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.369619][ T5842] usb 4-1: config 0 descriptor?? [ 582.411377][T12158] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 582.503038][ T5842] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 582.643316][T10261] usbhid 6-1:0.0: can't add hid device: -71 [ 582.686044][T10261] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 582.716884][T12162] dummy0: mtu less than device minimum [ 582.754846][ T5820] plantronics 0003:047F:FFFF.0051: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 582.755595][T10261] usb 6-1: USB disconnect, device number 39 [ 582.804269][T11901] usb 4-1: USB disconnect, device number 111 [ 582.943848][T12167] FAULT_INJECTION: forcing a failure. [ 582.943848][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.986273][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.1.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.986310][T12167] Tainted: [L]=SOFTLOCKUP [ 582.986316][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.986329][T12167] Call Trace: [ 582.986337][T12167] [ 582.986346][T12167] dump_stack_lvl+0xe8/0x150 [ 582.986379][T12167] should_fail_ex+0x414/0x560 [ 582.986413][T12167] _copy_from_user+0x2d/0xb0 [ 582.986439][T12167] ___sys_sendmsg+0x158/0x2a0 [ 582.986466][T12167] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.986494][T12167] ? kstrtouint+0x6e/0xe0 [ 582.986548][T12167] ? __fget_files+0x2a/0x420 [ 582.986572][T12167] ? __fget_files+0x3a0/0x420 [ 582.986604][T12167] __sys_sendmmsg+0x227/0x430 [ 582.986632][T12167] ? __pfx___sys_sendmmsg+0x10/0x10 [ 582.986652][T12167] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 582.986698][T12167] ? ksys_write+0x22a/0x250 [ 582.986718][T12167] ? __pfx_ksys_write+0x10/0x10 [ 582.986742][T12167] __x64_sys_sendmmsg+0xa0/0xc0 [ 582.986767][T12167] do_syscall_64+0xec/0xf80 [ 582.986788][T12167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.986805][T12167] ? trace_irq_disable+0x37/0x100 [ 582.986829][T12167] ? clear_bhb_loop+0x60/0xb0 [ 582.986851][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.986870][T12167] RIP: 0033:0x7f758d38f749 [ 582.986887][T12167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.986902][T12167] RSP: 002b:00007f758e2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 582.986924][T12167] RAX: ffffffffffffffda RBX: 00007f758d5e5fa0 RCX: 00007f758d38f749 [ 582.986938][T12167] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000003 [ 582.986949][T12167] RBP: 00007f758e2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 582.986961][T12167] R10: 0000000020004084 R11: 0000000000000246 R12: 0000000000000001 [ 582.986987][T12167] R13: 00007f758d5e6038 R14: 00007f758d5e5fa0 R15: 00007f758d70fa28 [ 582.987017][T12167] [ 583.303100][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'. [ 583.318428][T12169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 583.324217][T12168] netlink: 'syz.5.1693': attribute type 11 has an invalid length. [ 583.325575][T12169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 583.351287][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'. [ 583.358958][T10525] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.373756][T12168] netlink: 'syz.5.1693': attribute type 11 has an invalid length. [ 583.402178][T12169] vhci_hcd vhci_hcd.0: Device attached [ 583.409456][T10525] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.464619][T10525] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.477336][T10525] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.534282][T10261] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 583.565868][T12169] netlink: 'syz.4.1689': attribute type 2 has an invalid length. [ 583.575955][T12169] netlink: 'syz.4.1689': attribute type 1 has an invalid length. [ 583.585322][T12169] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1689'. [ 583.616583][T11901] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 583.684938][T11901] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 583.707851][T10261] usb 3-1: Using ep0 maxpacket: 16 [ 583.723045][T10261] usb 3-1: config 6 has an invalid interface number: 63 but max is 0 [ 583.743104][T10261] usb 3-1: config 6 has no interface number 0 [ 583.767487][T10261] usb 3-1: config 6 interface 63 has no altsetting 0 [ 583.782358][T10261] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 583.813917][T10261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.827726][T10261] usb 3-1: Product: syz [ 583.832737][T10261] usb 3-1: Manufacturer: syz [ 583.921328][T10261] usb 3-1: SerialNumber: syz [ 584.168254][T10261] ftdi_sio 3-1:6.63: FTDI USB Serial Device converter detected [ 584.217218][T10261] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 584.231935][T10261] usb 3-1: USB disconnect, device number 104 [ 584.242327][T10261] ftdi_sio 3-1:6.63: device disconnected [ 584.641688][T12172] vhci_hcd: connection reset by peer [ 584.650373][ T5820] usb 5-1: USB disconnect, device number 117 [ 584.659023][T10019] vhci_hcd vhci_hcd.4: stop threads [ 584.688934][T10019] vhci_hcd vhci_hcd.4: release socket [ 584.697849][T12187] fuse: Bad value for 'fd' [ 584.741766][T10019] vhci_hcd vhci_hcd.4: disconnect device [ 584.908371][T12191] syzkaller0: entered promiscuous mode [ 584.916776][T12191] syzkaller0: entered allmulticast mode [ 585.205595][T10261] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 585.269488][T12206] dummy0: mtu less than device minimum [ 585.365182][T10261] usb 4-1: Using ep0 maxpacket: 8 [ 585.374767][T10261] usb 4-1: config 162 has an invalid interface number: 197 but max is 0 [ 585.653493][T10261] usb 4-1: config 162 has no interface number 0 [ 585.673093][T10261] usb 4-1: config 162 interface 197 has no altsetting 0 [ 585.692202][T10261] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 585.703564][T10261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.749217][T10261] usb 4-1: Product: syz [ 585.874354][T10261] usb 4-1: Manufacturer: syz [ 585.879840][T10261] usb 4-1: SerialNumber: syz [ 586.341871][T10261] usb 4-1: USB disconnect, device number 112 [ 586.926629][T12217] fuse: Bad value for 'user_id' [ 586.935068][T12217] fuse: Bad value for 'user_id' [ 587.034279][ T46] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 587.214516][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 587.242444][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 587.274143][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.302644][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.331529][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.358508][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.389498][ T46] usb 3-1: Product: syz [ 587.405930][ T46] usb 3-1: Manufacturer: syz [ 587.419742][ T46] usb 3-1: SerialNumber: syz [ 587.765674][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.789200][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.922802][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.940614][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.024875][ T5820] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 588.249135][ T46] usb 3-1: 0:2 : does not exist [ 588.289084][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.308485][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.352111][ T5820] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.375253][ T5820] usb 4-1: config 0 has no interface number 0 [ 588.382737][ T5820] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 588.438669][ T5820] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 588.493015][ T5820] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.513262][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.569117][ T5820] usb 4-1: config 0 descriptor?? [ 588.582300][T12217] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 588.606533][ T5820] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 588.812863][ T5820] usb 4-1: USB disconnect, device number 113 [ 588.824382][T11901] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 589.321789][T12237] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 589.417246][T12239] syzkaller0: entered promiscuous mode [ 589.449491][T12239] syzkaller0: entered allmulticast mode [ 589.727870][T12242] dummy0: mtu less than device minimum [ 590.094575][ T46] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 590.314381][ T46] usb 3-1: USB disconnect, device number 105 [ 590.522636][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.593177][T12259] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1721'. [ 590.643458][T12259] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1721'. [ 590.695346][ T5820] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 590.739374][T12259] netlink: 'syz.4.1721': attribute type 3 has an invalid length. [ 590.833670][T12259] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1721'. [ 590.904626][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 590.938151][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 590.956241][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 590.999127][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.023815][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.051472][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.130680][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.392017][ T5820] usb 4-1: usb_control_msg returned -32 [ 591.407717][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 591.494771][T11901] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 591.554528][ T9] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 591.670252][T11901] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 591.688593][T11901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.700589][T11901] usb 5-1: Product: syz [ 591.706044][T11901] usb 5-1: Manufacturer: syz [ 591.714814][T11901] usb 5-1: SerialNumber: syz [ 591.724687][ T9] usb 6-1: device descriptor read/64, error -71 [ 591.730066][T11901] usb 5-1: config 0 descriptor?? [ 591.759387][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 591.771405][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 591.955562][T11901] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 592.067309][T12273] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 592.085912][ T9] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 592.094133][T11901] f81604 5-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 592.115103][T11901] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 592.294351][T11901] usb 5-1: USB disconnect, device number 118 [ 592.354304][ T9] usb 6-1: device descriptor read/64, error -71 [ 592.511065][ T9] usb usb6-port1: attempt power cycle [ 592.593684][T12277] FAULT_INJECTION: forcing a failure. [ 592.593684][T12277] name failslab, interval 1, probability 0, space 0, times 0 [ 592.618413][T12277] CPU: 0 UID: 0 PID: 12277 Comm: syz.4.1725 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.618465][T12277] Tainted: [L]=SOFTLOCKUP [ 592.618473][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.618487][T12277] Call Trace: [ 592.618496][T12277] [ 592.618505][T12277] dump_stack_lvl+0xe8/0x150 [ 592.618540][T12277] should_fail_ex+0x414/0x560 [ 592.618577][T12277] should_failslab+0xa8/0x100 [ 592.618604][T12277] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 592.618634][T12277] ? __alloc_skb+0x198/0x3a0 [ 592.618655][T12277] ? __alloc_skb+0x1dc/0x3a0 [ 592.618673][T12277] ? __local_bh_enable_ip+0xd0/0x130 [ 592.618697][T12277] ? __alloc_skb+0x198/0x3a0 [ 592.618719][T12277] __alloc_skb+0x1dc/0x3a0 [ 592.618743][T12277] netlink_sendmsg+0x5c6/0xb30 [ 592.618780][T12277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.618809][T12277] ? aa_sock_msg_perm+0xf1/0x1b0 [ 592.618834][T12277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.618852][T12277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.618877][T12277] __sock_sendmsg+0x21c/0x270 [ 592.618917][T12277] ____sys_sendmsg+0x52d/0x820 [ 592.618946][T12277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.618977][T12277] ? import_iovec+0x74/0xa0 [ 592.619005][T12277] ___sys_sendmsg+0x21f/0x2a0 [ 592.619029][T12277] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.619057][T12277] ? kstrtouint+0x6e/0xe0 [ 592.619110][T12277] ? __fget_files+0x2a/0x420 [ 592.619132][T12277] ? __fget_files+0x3a0/0x420 [ 592.619171][T12277] __sys_sendmmsg+0x227/0x430 [ 592.619206][T12277] ? __pfx___sys_sendmmsg+0x10/0x10 [ 592.619227][T12277] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 592.619273][T12277] ? ksys_write+0x22a/0x250 [ 592.619301][T12277] ? __pfx_ksys_write+0x10/0x10 [ 592.619322][T12277] __x64_sys_sendmmsg+0xa0/0xc0 [ 592.619354][T12277] do_syscall_64+0xec/0xf80 [ 592.619382][T12277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.619401][T12277] ? trace_irq_disable+0x37/0x100 [ 592.619427][T12277] ? clear_bhb_loop+0x60/0xb0 [ 592.619460][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.619486][T12277] RIP: 0033:0x7f9bc1f8f749 [ 592.619506][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.619524][T12277] RSP: 002b:00007f9bc2e79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.619548][T12277] RAX: ffffffffffffffda RBX: 00007f9bc21e5fa0 RCX: 00007f9bc1f8f749 [ 592.619563][T12277] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 592.619577][T12277] RBP: 00007f9bc2e79090 R08: 0000000000000000 R09: 0000000000000000 [ 592.619589][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.619603][T12277] R13: 00007f9bc21e6038 R14: 00007f9bc21e5fa0 R15: 00007f9bc230fa28 [ 592.619635][T12277] [ 593.205952][ T9] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 593.235625][ T9] usb 6-1: device descriptor read/8, error -71 [ 593.369714][ T10] usb 4-1: USB disconnect, device number 114 [ 593.537872][ T9] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 593.589496][ T9] usb 6-1: device descriptor read/8, error -71 [ 593.603591][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.725702][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.726513][ T9] usb usb6-port1: unable to enumerate USB device [ 593.802816][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.851669][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.931853][T12291] fuse: Bad value for 'user_id' [ 593.964824][T12291] fuse: Bad value for 'user_id' [ 594.264445][ T9] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 594.440250][T12294] dummy0: mtu less than device minimum [ 594.506742][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 594.523764][ T9] usb 4-1: config 1 has an invalid interface number: 148 but max is 0 [ 594.568313][ T9] usb 4-1: config 1 has no interface number 0 [ 594.588738][ T9] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0x4 has an invalid bInterval 127, changing to 4 [ 594.594971][T11901] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 594.653781][ T9] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 594.709113][ T9] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 594.764178][ T9] usb 4-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 594.789929][ T9] usb 4-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 594.791160][T11901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 594.824216][ T9] usb 4-1: config 1 interface 148 has no altsetting 0 [ 594.846421][T11901] usb 3-1: config 0 has no interface number 0 [ 594.991328][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=34.b1 [ 595.008646][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.025611][ T9] usb 4-1: Product: Е [ 595.032799][ T9] usb 4-1: Manufacturer: ␁ [ 595.042758][ T9] usb 4-1: SerialNumber: ࠄ [ 595.151835][T12284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 595.254302][T11901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 595.323837][T12304] FAULT_INJECTION: forcing a failure. [ 595.323837][T12304] name failslab, interval 1, probability 0, space 0, times 0 [ 595.372659][T12304] CPU: 0 UID: 0 PID: 12304 Comm: syz.5.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.372698][T12304] Tainted: [L]=SOFTLOCKUP [ 595.372706][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.372718][T12304] Call Trace: [ 595.372727][T12304] [ 595.372737][T12304] dump_stack_lvl+0xe8/0x150 [ 595.372769][T12304] should_fail_ex+0x414/0x560 [ 595.372805][T12304] should_failslab+0xa8/0x100 [ 595.372831][T12304] __kmalloc_noprof+0xdf/0x800 [ 595.372850][T12304] ? tomoyo_encode+0x28b/0x550 [ 595.372881][T12304] tomoyo_encode+0x28b/0x550 [ 595.372912][T12304] tomoyo_realpath_from_path+0x58d/0x5d0 [ 595.372939][T12304] ? tomoyo_domain+0xd8/0x130 [ 595.372970][T12304] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 595.372992][T12304] tomoyo_path_number_perm+0x1e8/0x5a0 [ 595.373016][T12304] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.373035][T12304] ? __lock_acquire+0x6b6/0x2cf0 [ 595.373071][T12304] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 595.373124][T12304] ? __fget_files+0x2a/0x420 [ 595.373152][T12304] ? __fget_files+0x2a/0x420 [ 595.373173][T12304] ? __fget_files+0x3a0/0x420 [ 595.373194][T12304] ? __fget_files+0x2a/0x420 [ 595.373221][T12304] security_file_ioctl+0xcb/0x2d0 [ 595.373245][T12304] __se_sys_ioctl+0x47/0x170 [ 595.373276][T12304] do_syscall_64+0xec/0xf80 [ 595.373300][T12304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.373317][T12304] ? trace_irq_disable+0x37/0x100 [ 595.373341][T12304] ? clear_bhb_loop+0x60/0xb0 [ 595.373364][T12304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.373382][T12304] RIP: 0033:0x7fec6f58f749 [ 595.373400][T12304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.373416][T12304] RSP: 002b:00007fec7047b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.373438][T12304] RAX: ffffffffffffffda RBX: 00007fec6f7e5fa0 RCX: 00007fec6f58f749 [ 595.373453][T12304] RDX: 0000200000000000 RSI: 0000000000005402 RDI: 0000000000000004 [ 595.373465][T12304] RBP: 00007fec7047b090 R08: 0000000000000000 R09: 0000000000000000 [ 595.373477][T12304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.373489][T12304] R13: 00007fec6f7e6038 R14: 00007fec6f7e5fa0 R15: 00007fec6f90fa28 [ 595.373521][T12304] [ 595.373620][T12304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.526523][T11901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 595.796086][T12306] syzkaller0: entered promiscuous mode [ 595.802993][T12306] syzkaller0: entered allmulticast mode [ 596.029821][T11901] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 596.112478][T11901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.168784][T11901] usb 3-1: config 0 descriptor?? [ 596.175302][T12308] netlink: 'syz.5.1734': attribute type 2 has an invalid length. [ 596.205178][T12291] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 596.269969][ T9] usb 4-1: bad CDC descriptors [ 596.306069][ T9] usb 4-1: USB disconnect, device number 115 [ 596.371681][T11901] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 596.508357][T12310] FAULT_INJECTION: forcing a failure. [ 596.508357][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 596.564723][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.4.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.564758][T12310] Tainted: [L]=SOFTLOCKUP [ 596.564765][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.564778][T12310] Call Trace: [ 596.564786][T12310] [ 596.564794][T12310] dump_stack_lvl+0xe8/0x150 [ 596.564825][T12310] should_fail_ex+0x414/0x560 [ 596.564854][T12310] should_failslab+0xa8/0x100 [ 596.564872][T12310] __kmalloc_noprof+0xdf/0x800 [ 596.564884][T12310] ? sock_kmalloc+0xd6/0x160 [ 596.564902][T12310] sock_kmalloc+0xd6/0x160 [ 596.564918][T12310] ____sys_sendmsg+0x1b5/0x820 [ 596.564936][T12310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.564954][T12310] ? import_iovec+0x74/0xa0 [ 596.564974][T12310] ___sys_sendmsg+0x21f/0x2a0 [ 596.564989][T12310] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.565005][T12310] ? kstrtouint+0x6e/0xe0 [ 596.565037][T12310] ? __fget_files+0x2a/0x420 [ 596.565051][T12310] ? __fget_files+0x3a0/0x420 [ 596.565069][T12310] __sys_sendmmsg+0x227/0x430 [ 596.565086][T12310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 596.565098][T12310] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 596.565135][T12310] ? ksys_write+0x22a/0x250 [ 596.565149][T12310] ? __pfx_ksys_write+0x10/0x10 [ 596.565163][T12310] __x64_sys_sendmmsg+0xa0/0xc0 [ 596.565178][T12310] do_syscall_64+0xec/0xf80 [ 596.565191][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.565202][T12310] ? trace_irq_disable+0x37/0x100 [ 596.565217][T12310] ? clear_bhb_loop+0x60/0xb0 [ 596.565231][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.565242][T12310] RIP: 0033:0x7f9bc1f8f749 [ 596.565255][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.565265][T12310] RSP: 002b:00007f9bc2e79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 596.565281][T12310] RAX: ffffffffffffffda RBX: 00007f9bc21e5fa0 RCX: 00007f9bc1f8f749 [ 596.565290][T12310] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000003 [ 596.565298][T12310] RBP: 00007f9bc2e79090 R08: 0000000000000000 R09: 0000000000000000 [ 596.565305][T12310] R10: 0000000004040000 R11: 0000000000000246 R12: 0000000000000001 [ 596.565313][T12310] R13: 00007f9bc21e6038 R14: 00007f9bc21e5fa0 R15: 00007f9bc230fa28 [ 596.565331][T12310] [ 596.573896][T11901] usb 3-1: USB disconnect, device number 106 [ 596.773016][T12312] futex_wake_op: syz.5.1734 tries to shift op by -1; fix this program [ 597.294282][ T5842] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 597.464405][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 597.485229][ T5842] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 597.514229][T11901] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 597.526442][ T5842] usb 5-1: config 0 has no interface number 0 [ 597.540723][ T5842] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 597.579479][ T5842] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 597.595864][ T5842] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 597.615503][ T5842] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 597.642582][ T5842] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 597.681789][ T5842] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 597.684620][T11901] usb 6-1: Using ep0 maxpacket: 8 [ 597.693588][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.731613][ T5842] usb 5-1: Product: syz [ 597.737443][ T5842] usb 5-1: Manufacturer: syz [ 597.750461][ T5842] usb 5-1: SerialNumber: syz [ 597.799697][T11901] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 597.827368][ T5842] usb 5-1: config 0 descriptor?? [ 597.843392][T12314] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 597.856903][T11901] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 597.880200][T11901] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.899891][T11901] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.932315][T11901] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.945581][T11901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.015972][T12331] syzkaller0: entered promiscuous mode [ 598.022745][T12331] syzkaller0: entered allmulticast mode [ 598.403517][ T5842] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 598.450733][ T5842] etas_es58x 5-1:0.219: could not retrieve the product info string [ 598.675266][T11901] usb 6-1: usb_control_msg returned -32 [ 598.681260][T11901] usbtmc 6-1:16.0: can't read capabilities [ 598.885624][ T5842] usb 5-1: USB disconnect, device number 119 [ 598.910609][ T5842] etas_es58x 5-1:0.219: Disconnecting syz syz [ 598.975723][T12336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.080775][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 599.093620][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 599.106167][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 599.111612][T12336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.117971][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 599.287054][T12339] fuse: Bad value for 'fd' [ 599.343640][T12340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.363365][T12340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.954654][ T5820] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 600.117359][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.128598][ T5820] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.146428][ T5820] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.156969][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.167253][ T5820] usb 5-1: Product: syz [ 600.172081][ T5820] usb 5-1: Manufacturer: syz [ 600.177684][ T5820] usb 5-1: SerialNumber: syz [ 600.188546][ T5820] usb 5-1: config 0 descriptor?? [ 600.355189][ T5820] usb 6-1: USB disconnect, device number 44 [ 600.705015][T12358] syzkaller0: entered promiscuous mode [ 600.721652][T12358] syzkaller0: entered allmulticast mode [ 602.889335][T12366] syz.5.1751 (12366): drop_caches: 2 [ 602.945765][T10261] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 602.976732][T12386] FAULT_INJECTION: forcing a failure. [ 602.976732][T12386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.000531][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.1.1760 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.000570][T12386] Tainted: [L]=SOFTLOCKUP [ 603.000579][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.000591][T12386] Call Trace: [ 603.000601][T12386] [ 603.000610][T12386] dump_stack_lvl+0xe8/0x150 [ 603.000644][T12386] should_fail_ex+0x414/0x560 [ 603.000680][T12386] _copy_from_user+0x2d/0xb0 [ 603.000707][T12386] ___sys_sendmsg+0x158/0x2a0 [ 603.000737][T12386] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.000797][T12386] ? __fget_files+0x2a/0x420 [ 603.000822][T12386] ? __fget_files+0x3a0/0x420 [ 603.000856][T12386] __x64_sys_sendmsg+0x19b/0x260 [ 603.000883][T12386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.000917][T12386] ? __pfx_ksys_write+0x10/0x10 [ 603.000948][T12386] do_syscall_64+0xec/0xf80 [ 603.000970][T12386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.000989][T12386] ? trace_irq_disable+0x37/0x100 [ 603.001014][T12386] ? clear_bhb_loop+0x60/0xb0 [ 603.001038][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.001057][T12386] RIP: 0033:0x7f758d38f749 [ 603.001077][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.001095][T12386] RSP: 002b:00007f758e2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.001130][T12386] RAX: ffffffffffffffda RBX: 00007f758d5e5fa0 RCX: 00007f758d38f749 [ 603.001145][T12386] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 603.001171][T12386] RBP: 00007f758e2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 603.001184][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.001203][T12386] R13: 00007f758d5e6038 R14: 00007f758d5e5fa0 R15: 00007f758d70fa28 [ 603.001235][T12386] [ 603.324606][T10261] usb 4-1: Using ep0 maxpacket: 8 [ 603.348445][T10261] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 603.364430][T10261] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 603.377696][T10261] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.390574][T10261] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.405257][T10261] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.416234][T10261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.732275][T10261] usb 4-1: usb_control_msg returned -32 [ 603.751042][T10261] usbtmc 4-1:16.0: can't read capabilities [ 604.122381][T12399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.549099][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 604.564879][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 604.577535][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 604.644705][T12399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.761407][ T10] usb 5-1: USB disconnect, device number 120 [ 605.214300][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 605.355395][ T10] usb 5-1: device descriptor read/64, error -71 [ 605.395539][T12406] fuse: Bad value for 'fd' [ 605.604286][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 605.777449][ T10] usb 5-1: device descriptor read/64, error -71 [ 605.796154][ T5820] usb 4-1: USB disconnect, device number 116 [ 605.904806][ T10] usb usb5-port1: attempt power cycle [ 606.264999][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 606.306083][ T10] usb 5-1: device descriptor read/8, error -71 [ 606.484706][ T5820] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 606.574443][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 606.605955][ T10] usb 5-1: device descriptor read/8, error -71 [ 606.728457][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 606.740477][ T10] usb usb5-port1: unable to enumerate USB device [ 606.762883][ T5820] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.805922][ T5820] usb 6-1: config 179 has no interface number 0 [ 606.828980][ T5820] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 606.894858][ T5820] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 606.921455][ T5820] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 606.980120][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.012368][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.014914][ T5820] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 607.094224][ T5820] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 607.113276][ T5820] usb 6-1: config 179 interface 65 has no altsetting 0 [ 607.165363][ T5820] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 607.188413][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.228305][T12424] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 607.229392][T12437] fuse: Bad value for 'fd' [ 607.290012][ T5820] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input64 [ 607.395033][ T5183] input input64: unable to receive magic message: -110 [ 607.434953][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 607.457708][ T5183] input input64: unable to receive magic message: -32 [ 607.494712][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 607.510378][ T5183] input input64: unable to receive magic message: -32 [ 607.555111][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 607.659867][ T5183] input input64: unable to receive magic message: -32 [ 607.689290][ T5183] input input64: unable to receive magic message: -32 [ 607.732656][ T5820] usb 6-1: USB disconnect, device number 45 [ 607.732727][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 607.754027][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 608.150275][T12457] xt_CT: No such helper "netbios-ns" [ 624.599582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.609405][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.040089][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.047500][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.487275][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.493852][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.936965][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 792.964086][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 795.697879][T12537] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 795.704456][T12537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 795.808262][T12537] vhci_hcd vhci_hcd.0: Device attached [ 795.948216][T12538] vhci_hcd: connection closed [ 795.949258][ T12] vhci_hcd vhci_hcd.4: stop threads [ 795.974027][ T12] vhci_hcd vhci_hcd.4: release socket [ 795.994072][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 796.014298][T11901] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 796.153353][T12544] tipc: Enabling of bearer rejected, failed to enable media [ 796.304874][T12547] MPI: mpi too large (128392 bits) [ 796.459983][T12548] netlink: 'syz.2.1813': attribute type 12 has an invalid length. [ 799.138484][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'. [ 799.152967][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 799.164579][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 799.176589][T12602] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 799.252047][T12605] tipc: Enabling of bearer rejected, failed to enable media [ 799.885961][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 800.257547][T12623] netlink: 'syz.2.1838': attribute type 2 has an invalid length. [ 800.288544][T12623] : entered promiscuous mode [ 800.308571][T10261] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 801.216291][T11901] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 801.252406][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 801.339632][T12638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.406760][T11901] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 801.427132][T12638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.444241][T11901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.489094][T12638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.500055][T12638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.509627][T11901] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 801.536504][T11901] usb 4-1: config 1 has no interface number 1 [ 801.565235][T11901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 801.615580][T11901] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.665520][T11901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.693872][T11901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.707027][T11901] usb 4-1: Product: syz [ 801.717840][T11901] usb 4-1: Manufacturer: syz [ 801.745827][T11901] usb 4-1: SerialNumber: syz [ 802.036555][T11901] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 802.047979][T11901] usb 4-1: MIDIStreaming interface descriptor not found [ 802.148801][T11901] usb 4-1: USB disconnect, device number 117 [ 802.207671][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1850'. [ 802.247131][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1851'. [ 802.337075][T12657] udevd[12657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.751060][T12666] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1853' sets config #-1 [ 803.091515][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1855'. [ 803.623295][T12681] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 803.629876][T12681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 803.640789][T12681] vhci_hcd vhci_hcd.0: Device attached [ 803.671331][ T30] audit: type=1400 audit(1768242139.091:192): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12649 comm="syz.1.1849" [ 803.892148][T12682] vhci_hcd: connection closed [ 803.906287][ T12] vhci_hcd vhci_hcd.1: stop threads [ 804.031267][ T12] vhci_hcd vhci_hcd.1: release socket [ 804.054108][ T46] usb 36-1: SetAddress Request (2) to port 0 [ 804.062424][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 804.070779][ T46] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 804.094109][ T46] usb 36-1: enqueue for inactive port 0 [ 804.515659][ T46] usb usb36-port1: attempt power cycle [ 805.157093][ T46] usb usb36-port1: unable to enumerate USB device [ 805.513005][T12734] tipc: Enabling of bearer rejected, failed to enable media [ 806.442985][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1889'. [ 806.521718][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 806.523289][T12756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 806.605765][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 806.645741][T12756] netlink: 'syz.1.1889': attribute type 10 has an invalid length. [ 806.682220][T12758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.711322][T12758] bond5: (slave bond0): Enslaving as an active interface with an up link [ 806.947405][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'. [ 807.144491][T12772] tipc: Enabling of bearer rejected, failed to enable media [ 807.449466][ T30] audit: type=1326 audit(1768242142.871:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12783 comm="syz.3.1899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780918f749 code=0x0 [ 808.419408][T12806] tipc: Enabling of bearer rejected, failed to enable media [ 808.919747][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.944083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.253876][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 809.835352][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 810.030664][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 810.069342][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.108192][ T9] usb 6-1: Product: syz [ 810.122442][ T9] usb 6-1: Manufacturer: syz [ 810.140455][ T9] usb 6-1: SerialNumber: syz [ 810.163759][ T9] usb 6-1: config 0 descriptor?? [ 810.403266][ T9] usb 6-1: USB disconnect, device number 46 [ 813.046713][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1937'. [ 813.342374][ T30] audit: type=1326 audit(1768242148.691:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.408676][ T30] audit: type=1326 audit(1768242148.691:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.476758][ T30] audit: type=1326 audit(1768242148.691:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.499619][ T30] audit: type=1326 audit(1768242148.691:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.522078][ T30] audit: type=1326 audit(1768242148.691:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.544367][ T30] audit: type=1326 audit(1768242148.691:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.567094][ T30] audit: type=1326 audit(1768242148.701:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.631270][ T30] audit: type=1326 audit(1768242148.701:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.674405][ T30] audit: type=1326 audit(1768242148.701:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 813.754173][ T30] audit: type=1326 audit(1768242148.701:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f58f749 code=0x7ffc0000 [ 816.243870][T12929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1955'. [ 817.275100][T12945] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1960'. [ 817.998933][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.009920][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.343435][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 818.814661][T12972] netlink: 'syz.1.1972': attribute type 13 has an invalid length. [ 819.347825][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1970'. [ 819.704396][T12993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 819.710972][T12993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.798713][T12993] vhci_hcd vhci_hcd.0: Device attached [ 819.830898][T12996] vhci_hcd: connection closed [ 819.836009][T13000] ptrace attach of "./syz-executor exec"[5854] was attempted by "   /dev/kvm   [ 819.909404][ T5973] vhci_hcd vhci_hcd.4: stop threads [ 820.096456][ T5973] vhci_hcd vhci_hcd.4: release socket [ 820.107060][ T5973] vhci_hcd vhci_hcd.4: disconnect device [ 822.689032][T13050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2000'. [ 822.719613][T12895] Set syz1 is full, maxelem 65536 reached [ 823.202281][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.224638][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.564360][ T9] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 823.729806][ T9] usb 3-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 823.741363][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.754031][ T9] usb 3-1: Product: syz [ 823.760271][ T9] usb 3-1: Manufacturer: syz [ 823.768077][ T9] usb 3-1: SerialNumber: syz [ 823.781934][ T9] usb 3-1: config 0 descriptor?? [ 824.048890][ T9] kaweth 3-1:0.0: Firmware present in device. [ 824.057283][ T9] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 824.067442][ T9] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 824.150560][ T9] usb 3-1: USB disconnect, device number 108 [ 825.641897][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2022'. [ 825.697680][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 825.722159][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 825.747875][T13116] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 827.425391][T13141] program syz.4.2026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 828.311463][ T9] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 828.348828][ T9] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 830.399364][T13197] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 830.686076][T13202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2051'. [ 831.917256][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2065'. [ 831.960998][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2065'. [ 832.444160][T13252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2073'. [ 833.674304][ T5918] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 833.784756][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 833.834867][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 833.842679][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 833.880986][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 833.900718][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.921375][ T5918] usb 3-1: Product: syz [ 833.926237][ T5918] usb 3-1: Manufacturer: syz [ 833.937149][ T5918] usb 3-1: SerialNumber: syz [ 833.963249][ T5918] usb 3-1: config 0 descriptor?? [ 833.974717][ T5918] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 833.992522][ T5918] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 834.046930][T13279] hsr_slave_1 (unregistering): left promiscuous mode [ 834.546712][T13285] lo: Caught tx_queue_len zero misconfig [ 834.688262][ T5918] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 835.312854][ T5918] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 835.335311][ T5918] em28xx 3-1:0.0: board has no eeprom [ 835.419823][ T5918] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 835.429466][ T5918] em28xx 3-1:0.0: dvb set to bulk mode. [ 835.446320][T10261] em28xx 3-1:0.0: Binding DVB extension [ 835.472533][ T5918] usb 3-1: USB disconnect, device number 109 [ 835.500870][ T5918] em28xx 3-1:0.0: Disconnecting em28xx [ 835.599419][T10261] em28xx 3-1:0.0: Registering input extension [ 835.629297][ T5918] em28xx 3-1:0.0: Closing input extension [ 835.667452][ T5918] em28xx 3-1:0.0: Freeing device [ 835.833297][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2092'. [ 835.929138][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 836.806680][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 837.151183][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 837.580842][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 837.662870][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 837.744481][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 837.797516][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 837.834187][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 837.877633][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 838.469988][T13353] batman_adv: batadv0: Interface deactivated: dummy0 [ 839.221451][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.278544][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.611382][T13266] Set syz1 is full, maxelem 65536 reached [ 839.882820][ T6039] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.923298][ T6039] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.192983][ T6039] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.235597][T13388] netlink: 'syz.5.2121': attribute type 12 has an invalid length. [ 840.257359][ T6039] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.269036][T13390] netlink: zone id is out of range [ 840.298900][T13390] netlink: zone id is out of range [ 841.498972][T13449] __nla_validate_parse: 148 callbacks suppressed [ 841.498995][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 841.619855][T13453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 842.816380][T13453] netlink: 'syz.5.2138': attribute type 3 has an invalid length. [ 844.050110][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2170'. [ 844.096560][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 844.115494][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 844.195276][T13537] team_slave_0: entered promiscuous mode [ 844.201349][T13537] team_slave_1: entered promiscuous mode [ 844.216527][T13537] macsec1: entered promiscuous mode [ 844.232203][T13537] team0: entered promiscuous mode [ 844.247987][T13537] macsec1: entered allmulticast mode [ 844.259485][T13537] team0: entered allmulticast mode [ 844.271205][T13537] team_slave_0: entered allmulticast mode [ 844.280915][T13537] team_slave_1: entered allmulticast mode [ 844.510198][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'. [ 844.745340][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 844.950333][T13581] netlink: 'syz.2.2189': attribute type 3 has an invalid length. [ 845.043047][T13585] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 845.544789][T13604] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 845.551456][T13604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 845.653282][T13604] vhci_hcd vhci_hcd.0: Device attached [ 845.680377][T13607] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 845.687035][T13607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 845.717941][T13594] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 845.724519][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 845.744444][T13607] vhci_hcd vhci_hcd.0: Device attached [ 845.772750][T13596] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 845.779414][T13596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 845.825550][T13600] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 845.832217][T13600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 845.863803][T13594] vhci_hcd vhci_hcd.0: Device attached [ 845.878791][T13596] vhci_hcd vhci_hcd.0: Device attached [ 845.892345][T13600] vhci_hcd vhci_hcd.0: Device attached [ 845.898546][ T10] usb 35-4: new low-speed USB device number 2 using vhci_hcd [ 845.914129][T13604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 845.920777][T13604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 845.952866][T13607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 845.994728][T13594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 846.006799][T13604] vhci_hcd vhci_hcd.0: Device attached [ 846.042467][T13594] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 846.049121][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 846.079117][T13626] tipc: Enabled bearer , priority 0 [ 846.087688][T13626] syzkaller0: entered promiscuous mode [ 846.093677][T13626] syzkaller0: entered allmulticast mode [ 846.121360][T13626] tipc: Resetting bearer [ 846.133391][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.156956][T13596] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(30) [ 846.163602][T13596] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 846.172785][T13623] tipc: Resetting bearer [ 846.182332][T13594] vhci_hcd vhci_hcd.0: Device attached [ 846.202631][T13596] vhci_hcd vhci_hcd.0: Device attached [ 846.212303][T13623] tipc: Disabling bearer [ 846.245068][T13627] vhci_hcd: connection closed [ 846.245309][T13615] vhci_hcd: connection closed [ 846.251491][T13608] vhci_hcd: connection closed [ 846.256538][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.267152][T13605] vhci_hcd: connection reset by peer [ 846.272790][T13602] vhci_hcd: connection closed [ 846.273001][T13598] vhci_hcd: connection closed [ 846.275133][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.280309][T13595] vhci_hcd: connection closed [ 846.282901][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.304736][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.309975][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.331409][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.338659][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.344953][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.350594][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.359374][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.365266][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.371004][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.384684][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.391440][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.401828][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.409936][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.415523][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.421221][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.429357][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.441906][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.451051][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 846.552746][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 846.562462][T13647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.617732][T13647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.771453][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 846.888822][T13635] vhci_hcd: connection closed [ 846.889061][T11248] vhci_hcd vhci_hcd.1: stop threads [ 846.914420][T11248] vhci_hcd vhci_hcd.1: release socket [ 846.944049][T11248] vhci_hcd vhci_hcd.1: disconnect device [ 847.005677][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 847.679185][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 847.685769][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 847.722202][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.748419][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 847.755074][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.793411][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.807286][T13695] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 847.813929][T13695] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 847.823499][T13695] vhci_hcd vhci_hcd.0: Device attached [ 847.832427][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 847.839070][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.849044][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.856675][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 847.863302][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.871486][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.880870][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 847.887512][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 847.895756][ T6169] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 847.902784][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.913719][T13685] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 847.925092][T13685] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 847.935677][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 847.942314][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.950544][T13685] vhci_hcd vhci_hcd.0: Device attached [ 847.957411][ T6169] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 847.970361][T13685] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(29) [ 847.976987][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 847.985540][T13685] vhci_hcd vhci_hcd.0: Device attached [ 848.010932][T13710] vhci_hcd: connection closed [ 848.013153][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.028416][T13701] vhci_hcd: connection closed [ 848.028631][T13697] vhci_hcd: connection closed [ 848.034150][T13704] vhci_hcd: connection closed [ 848.039078][T13699] vhci_hcd: connection closed [ 848.041202][T13707] vhci_hcd: connection closed [ 848.043808][T13690] vhci_hcd: connection closed [ 848.059570][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.081845][T13687] vhci_hcd: connection reset by peer [ 848.094177][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.100638][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.110305][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.116993][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.130633][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.143259][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.157314][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.177581][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.189410][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.202773][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.220297][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.233084][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.246709][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.262153][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.275472][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.289967][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.304383][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.318609][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.331831][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.348805][T11248] vhci_hcd vhci_hcd.2: stop threads [ 848.362215][T11248] vhci_hcd vhci_hcd.2: release socket [ 848.377306][T11248] vhci_hcd vhci_hcd.2: disconnect device [ 848.748620][T13723] bridge_slave_0: left allmulticast mode [ 848.768448][T13723] bridge_slave_0: left promiscuous mode [ 848.781556][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.798178][T13726] netlink: 'syz.5.2236': attribute type 10 has an invalid length. [ 848.816078][T13723] bridge_slave_1: left allmulticast mode [ 848.821993][T13723] bridge_slave_1: left promiscuous mode [ 848.831442][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.850942][T13723] bond0: (slave bond_slave_0): Releasing backup interface [ 848.882276][T13723] bond0: (slave bond_slave_1): Releasing backup interface [ 848.907274][T13723] team0: Port device team_slave_0 removed [ 848.929058][T13723] team0: Port device team_slave_1 removed [ 848.939054][T13723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.964596][T13726] bond0: (slave wlan1): Opening slave failed [ 849.147498][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 849.290103][T13742] tipc: Enabled bearer , priority 0 [ 849.307407][T13742] syzkaller0: entered promiscuous mode [ 849.323079][T13742] syzkaller0: entered allmulticast mode [ 849.385113][T13741] tipc: Resetting bearer [ 849.446487][T13744] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2243'. [ 849.458636][T13741] tipc: Disabling bearer [ 849.768835][T13752] syzkaller0: entered promiscuous mode [ 849.777134][T13752] syzkaller0: entered allmulticast mode [ 849.800844][T13752] tipc: Started in network mode [ 849.810240][T13752] tipc: Node identity f2acd79e9e73, cluster identity 4711 [ 849.818094][T13752] tipc: Enabled bearer , priority 0 [ 849.887352][T13751] tipc: Resetting bearer [ 849.904628][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 849.915293][T13751] tipc: Disabling bearer [ 849.922510][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 849.998654][T13765] team_slave_0: entered promiscuous mode [ 850.004447][T13765] team_slave_1: entered promiscuous mode [ 850.016968][T13765] macsec1: entered promiscuous mode [ 850.022818][T13765] team0: entered promiscuous mode [ 850.030124][T13765] macsec1: entered allmulticast mode [ 850.035931][T13765] team0: entered allmulticast mode [ 850.041291][T13765] team_slave_0: entered allmulticast mode [ 850.047618][T13765] team_slave_1: entered allmulticast mode [ 850.740777][T13802] netlink: 'syz.4.2267': attribute type 12 has an invalid length. [ 850.749102][T13802] netlink: 'syz.4.2267': attribute type 29 has an invalid length. [ 850.758872][T13802] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2267'. [ 850.986725][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 851.473098][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2282'. [ 851.478078][T13836] tipc: Enabling of bearer rejected, media not registered [ 851.495641][T13836] netlink: 'syz.5.2281': attribute type 13 has an invalid length. [ 852.258264][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 852.290969][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 852.310569][ T3540] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.333914][ T3540] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.355360][ T9] usb usb36-port1: attempt power cycle [ 852.358108][ T3540] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.392198][ T3540] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.417378][T13857] netlink: 'syz.5.2289': attribute type 2 has an invalid length. [ 852.459967][ T3540] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.487536][T13857] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2289'. [ 852.507495][ T3540] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.524702][ T3540] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.544446][ T3540] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.627405][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 852.892727][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 852.946477][ T9] usb usb36-port1: unable to enumerate USB device [ 852.979747][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 852.991154][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'. [ 853.064452][ T6169] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 853.159144][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 853.169969][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 853.242830][T13895] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 853.255938][T13895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 853.273009][T13897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 853.672065][T13917] tipc: Enabled bearer , priority 0 [ 854.036467][T13917] tipc: Resetting bearer [ 854.135478][T13915] tipc: Disabling bearer [ 854.579929][ T5820] usb usb38-port1: attempt power cycle [ 855.010766][T13958] tipc: Enabled bearer , priority 0 [ 855.032032][T13958] syzkaller0: entered promiscuous mode [ 855.046087][T13958] syzkaller0: entered allmulticast mode [ 855.098982][T13958] tipc: Resetting bearer [ 855.119147][T13957] tipc: Resetting bearer [ 855.146596][T13957] tipc: Disabling bearer [ 855.175548][ T5820] usb usb38-port1: unable to enumerate USB device [ 855.254528][T13969] tipc: Enabled bearer , priority 0 [ 855.262079][T13969] syzkaller0: entered promiscuous mode [ 855.268400][T13969] syzkaller0: entered allmulticast mode [ 855.301757][T13969] tipc: Resetting bearer [ 855.314311][T13968] tipc: Resetting bearer [ 855.349430][T13968] tipc: Disabling bearer [ 855.691081][T13992] 0: reclassify loop, rule prio 0, protocol 700 [ 855.933583][T14003] tipc: Enabled bearer , priority 0 [ 855.942009][T14003] syzkaller0: entered promiscuous mode [ 855.948340][T14003] syzkaller0: entered allmulticast mode [ 856.079555][T14003] tipc: Resetting bearer [ 856.114249][T14001] tipc: Resetting bearer [ 856.176412][T14001] tipc: Disabling bearer [ 856.886668][T14045] tipc: Enabled bearer , priority 0 [ 856.894488][T14045] syzkaller0: entered promiscuous mode [ 856.900053][T14045] syzkaller0: entered allmulticast mode [ 856.918829][T14044] tipc: Resetting bearer [ 856.955845][T14044] tipc: Disabling bearer [ 857.561680][T14071] __nla_validate_parse: 3 callbacks suppressed [ 857.561701][T14071] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2379'. [ 858.633101][T14100] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2396'. [ 858.780784][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 858.786862][T14104] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 858.857846][T14104] dummy0: entered promiscuous mode [ 858.876312][T14111] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 858.884420][T14104] dummy0: entered allmulticast mode [ 858.920047][T14104] team0: Port device dummy0 added [ 859.008588][T14111] dummy0: left allmulticast mode [ 859.053508][T14111] team0: Port device dummy0 removed [ 859.303449][ T3540] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.356210][ T3540] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.375587][ T3540] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.394464][ T3540] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.800571][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 859.814935][T14154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2418'. [ 859.828560][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2418'. [ 859.845736][T14154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2418'. [ 859.859577][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2418'. [ 860.037959][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 860.084194][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.182276][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.685250][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 860.859218][T14196] syzkaller0: entered promiscuous mode [ 860.865101][T14196] syzkaller0: entered allmulticast mode [ 861.161970][T14206] tipc: Enabled bearer , priority 0 [ 861.169590][T14206] syzkaller0: entered promiscuous mode [ 861.175607][T14206] syzkaller0: entered allmulticast mode [ 861.194580][T14206] tipc: Resetting bearer [ 861.208392][T14205] tipc: Resetting bearer [ 861.255844][T14205] tipc: Disabling bearer [ 861.568435][T14223] ptrace attach of "./syz-executor exec"[5857] was attempted by "   /dev/kvm   [ 861.607443][T14223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 861.765394][T14229] syzkaller0: entered promiscuous mode [ 861.774032][T14229] syzkaller0: entered allmulticast mode [ 861.792874][T14231] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 862.430293][T14246] netlink: 'syz.5.2457': attribute type 72 has an invalid length. [ 862.518509][T14249] tipc: Enabled bearer , priority 0 [ 862.542405][T14249] syzkaller0: entered promiscuous mode [ 862.553308][T14249] syzkaller0: entered allmulticast mode [ 862.585917][T14249] tipc: Resetting bearer [ 862.614603][T14247] tipc: Resetting bearer [ 862.651302][T14247] tipc: Disabling bearer [ 862.690754][T14258] __nla_validate_parse: 1 callbacks suppressed [ 862.690773][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 862.695562][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 865.313790][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 865.436945][T14305] vlan2: entered promiscuous mode [ 865.442043][T14305] syz_tun: entered promiscuous mode [ 865.615687][T14308] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 865.628563][T14308] bond7 (unregistering): Released all slaves [ 865.929632][T14324] syzkaller0: entered promiscuous mode [ 865.956037][T14324] syzkaller0: entered allmulticast mode [ 866.216100][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 866.234543][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 866.378545][T14352] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2501'. [ 866.396997][T14352] openvswitch: netlink: Flow key attr not present in new flow. [ 866.539261][T14358] netlink: 'syz.4.2503': attribute type 12 has an invalid length. [ 866.553825][T14358] netlink: 'syz.4.2503': attribute type 29 has an invalid length. [ 866.566798][T14358] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2503'. [ 866.698432][T14366] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 866.781374][T14370] tipc: Enabled bearer , priority 0 [ 866.807234][T14370] syzkaller0: entered promiscuous mode [ 866.812757][T14370] syzkaller0: entered allmulticast mode [ 866.922739][T14370] tipc: Resetting bearer [ 866.944528][T14367] tipc: Resetting bearer [ 867.033035][T14367] tipc: Disabling bearer [ 867.185856][T14392] netlink: 'syz.2.2518': attribute type 12 has an invalid length. [ 867.193885][T14392] netlink: 'syz.2.2518': attribute type 29 has an invalid length. [ 867.201882][T14392] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2518'. [ 869.870367][T14424] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 869.894830][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2543'. [ 870.055218][T14455] tipc: Enabled bearer , priority 0 [ 870.075714][T14455] syzkaller0: entered promiscuous mode [ 870.081229][T14455] syzkaller0: entered allmulticast mode [ 870.125345][T14455] sch_fq: defrate 1 ignored. [ 870.167683][T14455] tipc: Resetting bearer [ 870.174871][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 870.194378][T14454] tipc: Resetting bearer [ 870.273463][T14454] tipc: Disabling bearer [ 870.374309][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.380660][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.457051][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2556'. [ 870.566680][T14457] wg1: entered promiscuous mode [ 870.571700][T14457] wg1: entered allmulticast mode [ 870.623285][T14485] syzkaller0: entered promiscuous mode [ 870.634021][T14485] syzkaller0: entered allmulticast mode [ 870.811235][T14494] tipc: Enabled bearer , priority 0 [ 870.821649][T14494] syzkaller0: entered promiscuous mode [ 870.834046][T14494] syzkaller0: entered allmulticast mode [ 870.876431][T14498] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2562'. [ 870.898873][T14497] vlan0: entered allmulticast mode [ 870.904788][T14497] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 870.925518][T14500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2564'. [ 870.977900][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 870.991471][T14493] tipc: Resetting bearer [ 871.067111][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2567'. [ 871.131055][T14493] tipc: Disabling bearer [ 871.378007][T14524] vlan2: entered promiscuous mode [ 871.384723][T14524] syz_tun: entered promiscuous mode [ 871.444195][T14527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2576'. [ 871.860627][T14531] ptrace attach of "./syz-executor exec"[5857] was attempted by "   /dev/kvm   [ 871.910883][T14533] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2578'. [ 872.236333][T14540] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2581'. [ 872.373714][T14546] tipc: Enabled bearer , priority 0 [ 872.394963][T14546] syzkaller0: entered promiscuous mode [ 872.408360][T14546] syzkaller0: entered allmulticast mode [ 872.457370][T14545] tipc: Resetting bearer [ 872.498815][T14545] tipc: Disabling bearer [ 873.092909][T14562] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 873.205207][T14562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 873.212379][T14566] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 873.272072][T14564] bond7: entered promiscuous mode [ 873.356416][T14562] batman_adv: batadv0: Removing interface: dummy0 [ 873.397407][T14562] bond7: (slave dummy0): making interface the new active one [ 873.420499][T14562] dummy0: entered promiscuous mode [ 873.436004][T14562] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 873.555340][T14580] tipc: Enabled bearer , priority 0 [ 873.575863][T14580] syzkaller0: entered promiscuous mode [ 873.581382][T14580] syzkaller0: entered allmulticast mode [ 873.630516][T14579] tipc: Resetting bearer [ 873.709314][T14579] tipc: Disabling bearer [ 873.956937][T14594] ptrace attach of "./syz-executor exec"[5855] was attempted by "   /dev/kvm   [ 873.961796][T14594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 874.620953][T14618] tipc: Enabled bearer , priority 0 [ 874.711509][T14622] syzkaller0: entered promiscuous mode [ 874.812056][T14622] syzkaller0: entered allmulticast mode [ 874.933827][T10783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.951914][T14616] tipc: Resetting bearer [ 874.992213][T14616] tipc: Disabling bearer [ 875.696185][T14651] __nla_validate_parse: 5 callbacks suppressed [ 875.696206][T14651] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2627'. [ 876.276724][T14681] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2640'. [ 876.350389][T14683] tipc: Enabling of bearer rejected, failed to enable media [ 876.568287][T14690] tipc: Enabled bearer , priority 0 [ 876.581127][T14690] tipc: Resetting bearer [ 876.652883][T14688] tipc: Disabling bearer [ 876.837246][T14700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2648'. [ 876.865522][T14700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2648'. [ 877.497934][T14730] tipc: Enabled bearer , priority 0 [ 877.509713][T14730] tipc: Resetting bearer [ 877.538085][T14728] tipc: Disabling bearer [ 877.781105][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 877.861916][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.871013][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.977837][T14749] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2668'. [ 878.127345][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2670'. [ 878.418024][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 878.504271][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 878.517262][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 878.577685][T14771] tipc: Enabled bearer , priority 0 [ 878.592881][T14771] syzkaller0: entered promiscuous mode [ 878.607660][T14771] syzkaller0: entered allmulticast mode [ 878.644948][T14771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 878.729799][T14771] tipc: Resetting bearer [ 878.813490][T14771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 878.826690][T14771] batman_adv: batadv0: Adding interface: gretap1 [ 878.833108][T14771] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.861014][T14771] batman_adv: batadv0: Interface activated: gretap1 [ 878.888081][T14770] tipc: Resetting bearer [ 879.038793][T14770] tipc: Disabling bearer [ 879.297697][T14807] fuse: Invalid rootmode [ 879.642624][T14824] IPv4: Oversized IP packet from 172.20.20.11 [ 879.716501][T14826] syzkaller0: entered promiscuous mode [ 879.729052][T14826] syzkaller0: entered allmulticast mode [ 879.943541][T14835] syzkaller0: entered promiscuous mode [ 879.962455][T14835] syzkaller0: entered allmulticast mode [ 879.981015][T14839] fuse: Invalid rootmode [ 880.681757][T14867] fuse: Bad value for 'rootmode' [ 880.822838][T14873] __nla_validate_parse: 6 callbacks suppressed [ 880.822860][T14873] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2721'. [ 880.893766][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 880.954968][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 881.074313][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 881.220609][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2728'. [ 881.232031][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 881.253986][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.278923][ T9] usb 5-1: config 0 descriptor?? [ 881.397873][T14897] fuse: Bad value for 'rootmode' [ 881.511565][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 881.615200][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2737'. [ 881.715178][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 881.749762][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 881.758379][ T9] [drm] Initialized udl on minor 2 [ 881.765669][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 881.775615][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 881.783475][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 881.799759][ T9] usb 5-1: USB disconnect, device number 125 [ 881.806307][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 881.840784][T14919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2741'. [ 881.916726][T14923] fuse: Bad value for 'rootmode' [ 881.977710][T14925] dummy0: mtu less than device minimum [ 882.289749][T14933] 8021q: VLANs not supported on ip6gre0 [ 882.401216][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'. [ 882.455896][T14941] syzkaller0: entered promiscuous mode [ 882.461421][T14941] syzkaller0: entered allmulticast mode [ 882.487534][T14943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2753'. [ 882.555574][T14945] fuse: Unknown parameter 'use00000000000000000000' [ 882.622951][T14951] dummy0: mtu less than device minimum [ 882.910127][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2766'. [ 883.115436][T14984] syzkaller0: entered promiscuous mode [ 883.121269][T14984] syzkaller0: entered allmulticast mode [ 883.537852][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2778'. [ 883.964309][T15010] syzkaller0: entered promiscuous mode [ 883.970115][T15010] syzkaller0: entered allmulticast mode [ 884.241942][T15018] program syz.2.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.745736][T15030] ptrace attach of "./syz-executor exec"[5857] was attempted by "   /dev/kvm   [ 885.214977][T15046] syzkaller0: entered promiscuous mode [ 885.488120][T15046] syzkaller0: entered allmulticast mode [ 885.747239][T15061] dummy0: mtu less than device minimum [ 886.445688][T15088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 886.455522][T15088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 886.463375][T15088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 886.471817][T15088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 886.480532][T15088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 886.965214][ T9] usb 2-1: USB disconnect, device number 95 [ 887.415643][T12451] bond0: (slave syz_tun): Releasing backup interface [ 887.533237][T15091] chnl_net:caif_netlink_parms(): no params data found [ 887.757717][T15091] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.765677][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.772959][T15091] bridge_slave_0: entered allmulticast mode [ 887.782213][T15091] bridge_slave_0: entered promiscuous mode [ 887.791335][T15091] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.798886][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.806232][T15091] bridge_slave_1: entered allmulticast mode [ 887.813405][T15091] bridge_slave_1: entered promiscuous mode [ 887.865711][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.879463][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.939613][T15091] team0: Port device team_slave_0 added [ 887.944185][ T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 887.948822][T15091] team0: Port device team_slave_1 added [ 888.002529][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.009635][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.036096][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.051759][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.059427][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.104461][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 888.112406][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 888.113949][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.131348][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.147894][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.163136][ T24] usb 4-1: Product: syz [ 888.169803][ T24] usb 4-1: Manufacturer: syz [ 888.179113][ T24] usb 4-1: SerialNumber: syz [ 888.190991][ T24] usb 4-1: config 0 descriptor?? [ 888.223598][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 888.243432][ T24] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 888.278921][T15091] hsr_slave_0: entered promiscuous mode [ 888.290157][T15091] hsr_slave_1: entered promiscuous mode [ 888.297843][T15091] debugfs: 'hsr0' already exists in 'hsr' [ 888.304919][T15091] Cannot create hsr debugfs directory [ 888.514321][T15088] Bluetooth: hci5: command tx timeout [ 888.633041][T15091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.657848][T15091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 888.809414][T15091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.820153][T15091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 888.829490][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 888.949981][T15091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.967829][T15091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 889.091139][T15091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.103605][T15091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 889.249073][ T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 889.269863][ T24] em28xx 4-1:0.0: board has no eeprom [ 889.308440][T15091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.369501][T15091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.410721][T15091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 889.422664][T15091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 889.524610][T15091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.557852][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.564041][ T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 889.576814][ T24] em28xx 4-1:0.0: dvb set to bulk mode. [ 889.588080][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.595272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.608788][ T6169] em28xx 4-1:0.0: Binding DVB extension [ 889.660574][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.667825][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.701733][ T24] usb 4-1: USB disconnect, device number 118 [ 889.710424][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 889.811783][ T6169] em28xx 4-1:0.0: Registering input extension [ 889.826249][ T24] em28xx 4-1:0.0: Closing input extension [ 889.879938][ T24] em28xx 4-1:0.0: Freeing device [ 889.910801][T15091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.993431][T15091] veth0_vlan: entered promiscuous mode [ 890.012103][T15091] veth1_vlan: entered promiscuous mode [ 890.052060][T15091] veth0_macvtap: entered promiscuous mode [ 890.063799][T15091] veth1_macvtap: entered promiscuous mode [ 890.145266][T15091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.189472][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.218153][ T1038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.263308][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.344637][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.353850][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.508891][T15203] __nla_validate_parse: 2 callbacks suppressed [ 890.508909][T15203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2857'. [ 890.594237][T15088] Bluetooth: hci5: command tx timeout [ 890.609261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.613354][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 890.649208][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 890.673953][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.726458][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 890.741227][T15209] netlink: 'syz.2.2857': attribute type 10 has an invalid length. [ 890.752615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.779840][T15209] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 890.800776][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.814345][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 890.830936][ T24] usb 5-1: config 6 has an invalid interface number: 63 but max is 0 [ 890.874065][ T24] usb 5-1: config 6 has no interface number 0 [ 890.880211][ T24] usb 5-1: config 6 interface 63 has no altsetting 0 [ 890.909871][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 890.924110][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.937823][ T24] usb 5-1: Product: syz [ 890.942029][ T24] usb 5-1: Manufacturer: syz [ 890.963777][ T24] usb 5-1: SerialNumber: syz [ 891.198874][ T24] ftdi_sio 5-1:6.63: FTDI USB Serial Device converter detected [ 891.250622][ T24] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 891.290653][ T24] usb 5-1: USB disconnect, device number 126 [ 891.336795][ T24] ftdi_sio 5-1:6.63: device disconnected [ 891.623346][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.635502][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.664935][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.673244][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.681650][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.723252][T15231] IPVS: length: 153 != 24 [ 892.490133][T15232] chnl_net:caif_netlink_parms(): no params data found [ 892.527674][T15248] dummy0: mtu less than device minimum [ 892.677746][ T5833] Bluetooth: hci5: command tx timeout [ 892.810967][T15261] xfrm0: entered promiscuous mode [ 892.835631][T15261] xfrm0: entered allmulticast mode [ 892.863278][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.895935][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.903277][T15232] bridge_slave_0: entered allmulticast mode [ 892.935400][T15232] bridge_slave_0: entered promiscuous mode [ 892.944864][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.952797][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.962828][T15232] bridge_slave_1: entered allmulticast mode [ 892.972395][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 892.985886][T15232] bridge_slave_1: entered promiscuous mode [ 893.102895][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.126841][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.180948][T15232] team0: Port device team_slave_0 added [ 893.186862][ T5958] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 893.200739][T15232] team0: Port device team_slave_1 added [ 893.275921][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.355916][ T5958] usb 4-1: not running at top speed; connect to a high speed hub [ 893.384283][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.418475][ T5958] usb 4-1: config 1 has an invalid interface number: 148 but max is 0 [ 893.427240][ T5958] usb 4-1: config 1 has no interface number 0 [ 893.433338][ T5958] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0x4 has an invalid bInterval 127, changing to 4 [ 893.444749][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.455596][ T5958] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 893.498461][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.506071][ T5958] usb 4-1: config 1 interface 148 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 893.517900][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.554749][ T5958] usb 4-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 893.566043][ T5958] usb 4-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 893.577146][T15282] xt_CT: No such helper "netbios-ns" [ 893.604097][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.637959][ T5958] usb 4-1: config 1 interface 148 has no altsetting 0 [ 893.659092][ T5958] usb 4-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=34.b1 [ 893.687864][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.719539][ T5833] Bluetooth: hci2: command tx timeout [ 893.743234][ T5958] usb 4-1: Product: Е [ 893.758192][ T5958] usb 4-1: Manufacturer: ␁ [ 893.771130][ T5958] usb 4-1: SerialNumber: ࠄ [ 893.793593][T15232] hsr_slave_0: entered promiscuous mode [ 893.813130][T15261] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 893.836339][T15232] hsr_slave_1: entered promiscuous mode [ 893.852479][T15232] debugfs: 'hsr0' already exists in 'hsr' [ 893.864409][T15290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2886'. [ 893.880355][T15232] Cannot create hsr debugfs directory [ 893.927417][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 893.936512][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 893.956474][T15290] netlink: 'syz.4.2886': attribute type 10 has an invalid length. [ 893.979425][T15290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 894.097642][T15261] syzkaller0: entered promiscuous mode [ 894.103205][T15261] syzkaller0: entered allmulticast mode [ 894.258954][ T5958] usb 4-1: bad CDC descriptors [ 894.301146][ T5958] usb 4-1: USB disconnect, device number 119 [ 894.713443][T15307] xt_CT: No such helper "netbios-ns" [ 894.754667][ T5833] Bluetooth: hci5: command tx timeout [ 894.786367][T15311] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2894'. [ 895.038298][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2897'. [ 895.134583][ T5958] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 895.231255][T15232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.263135][T15232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.294209][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 895.311666][ T5958] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 895.313397][T15232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.352104][ T5958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.389343][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.389766][T15232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.439160][ T5958] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 895.456079][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.466577][T15327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2901'. [ 895.476665][ T5958] usb 2-1: Product: syz [ 895.480903][ T5958] usb 2-1: Manufacturer: syz [ 895.503211][ T5958] usb 2-1: SerialNumber: syz [ 895.660479][T15232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.713950][T15232] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.719246][T15340] xt_CT: No such helper "netbios-ns" [ 895.742789][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.757604][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.776341][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.783535][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.794663][ T5833] Bluetooth: hci2: command tx timeout [ 895.949264][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.956480][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.182923][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.491093][T15232] veth0_vlan: entered promiscuous mode [ 896.507789][T15232] veth1_vlan: entered promiscuous mode [ 896.599876][T15232] veth0_macvtap: entered promiscuous mode [ 896.621691][T15232] veth1_macvtap: entered promiscuous mode [ 896.750666][T15232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.790217][T15232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.846900][ T1094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.874104][ T5836] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 896.897240][ T1094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.948781][ T1094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.967754][ T1094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.044426][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 897.061927][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 897.087459][ T5836] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 897.120730][ T5836] usb 5-1: config 0 has no interface number 0 [ 897.143088][ T5836] usb 5-1: config 0 interface 238 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 897.167083][ T5836] usb 5-1: config 0 interface 238 has no altsetting 0 [ 897.190839][ T5836] usb 5-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 897.205900][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.211007][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.223014][ T5836] usb 5-1: Product: syz [ 897.225000][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.227801][ T5836] usb 5-1: Manufacturer: syz [ 897.279249][ T5836] usb 5-1: SerialNumber: syz [ 897.307676][ T5836] usb 5-1: config 0 descriptor?? [ 897.320470][T15362] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 897.337912][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.397933][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.565269][ T5836] ti_usb_3410_5052 5-1:0.238: TI USB 3410 1 port adapter converter detected [ 897.602837][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 897.617857][ T5836] ti_usb_3410_5052 5-1:0.238: missing endpoints [ 897.640443][T15375] netlink: 'syz.2.2863': attribute type 11 has an invalid length. [ 897.676257][ T5836] usb 5-1: USB disconnect, device number 127 [ 897.727298][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 897.727337][ T1094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.752282][ T1094] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.762778][T15375] netlink: 'syz.2.2863': attribute type 11 has an invalid length. [ 897.777265][ T1094] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.799777][ T1094] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.874135][ T5833] Bluetooth: hci2: command tx timeout [ 897.975532][ T5958] usb 2-1: 0:2 : does not exist [ 897.989385][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2921'. [ 898.006347][ T5958] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 898.071079][ T5958] usb 2-1: USB disconnect, device number 96 [ 898.841222][T15421] Set syz1 is full, maxelem 65536 reached [ 899.294375][ T5836] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 899.475439][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 899.490792][ T5836] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 899.533976][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.560134][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.574510][ T5958] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 899.591767][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.620297][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.637500][ T5836] usb 3-1: Product: syz [ 899.641707][ T5836] usb 3-1: Manufacturer: syz [ 899.656099][ T5836] usb 3-1: SerialNumber: syz [ 899.716620][ T5958] usb 4-1: device descriptor read/64, error -71 [ 899.729536][T15441] 8021q: VLANs not supported on ip6gre0 [ 899.885654][T15423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.894812][T15423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.954340][ T5833] Bluetooth: hci2: command tx timeout [ 899.967878][ T5958] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 900.122267][ T5958] usb 4-1: device descriptor read/64, error -71 [ 900.244591][ T5958] usb usb4-port1: attempt power cycle [ 900.584072][ T5958] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 900.615584][ T5958] usb 4-1: device descriptor read/8, error -71 [ 900.854048][ T5958] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 900.874716][ T5958] usb 4-1: device descriptor read/8, error -71 [ 900.987553][ T5958] usb usb4-port1: unable to enumerate USB device [ 901.627986][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 901.649939][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 901.743366][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 901.753537][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 901.919427][ T5836] usb 3-1: 0:2 : does not exist [ 901.945551][ T5836] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 901.986838][ T5836] usb 3-1: USB disconnect, device number 110 [ 902.044947][T14875] udevd[14875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.092240][T15473] 8021q: VLANs not supported on ip6gre0 [ 902.190050][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2957'. [ 902.591942][T15495] program syz.1.2960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.124057][ T5958] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 904.279359][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 904.292758][ T5958] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 904.302119][ T5958] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.320068][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.374583][ T5958] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.383640][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.391791][ T5958] usb 2-1: Product: syz [ 904.403557][ T5958] usb 2-1: Manufacturer: syz [ 904.414608][ T5958] usb 2-1: SerialNumber: syz [ 904.659091][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.673705][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.461746][T15513] tipc: Started in network mode [ 905.495234][T15513] tipc: Node identity b64fc6309e3d, cluster identity 4711 [ 905.522404][T15513] tipc: Enabled bearer , priority 0 [ 905.544491][T15516] syzkaller0: entered promiscuous mode [ 905.570439][T15516] syzkaller0: entered allmulticast mode [ 905.587901][T15522] 8021q: VLANs not supported on ip6gre0 [ 905.658744][T15524] syzkaller0: entered promiscuous mode [ 905.669936][T15524] syzkaller0: entered allmulticast mode [ 905.690594][T15519] tipc: Resetting bearer [ 905.717496][T15519] tipc: Disabling bearer [ 905.772225][T15530] tipc: Enabling of bearer rejected, failed to enable media [ 905.910332][T15534] xfrm0: entered promiscuous mode [ 905.925336][T15534] xfrm0: entered allmulticast mode [ 905.994242][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 906.134319][ T9] usb 5-1: device descriptor read/64, error -71 [ 906.194476][ T932] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 906.293552][T15547] program syz.3.2979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.367435][ T932] usb 3-1: not running at top speed; connect to a high speed hub [ 906.377205][ T932] usb 3-1: config 1 has an invalid interface number: 148 but max is 0 [ 906.386005][ T932] usb 3-1: config 1 has no interface number 0 [ 906.392391][ T932] usb 3-1: config 1 interface 148 altsetting 14 endpoint 0x4 has an invalid bInterval 127, changing to 4 [ 906.403992][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 906.412171][ T932] usb 3-1: config 1 interface 148 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 906.436161][ T932] usb 3-1: config 1 interface 148 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 906.449278][ T932] usb 3-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 906.460845][ T932] usb 3-1: config 1 interface 148 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 906.473094][ T932] usb 3-1: config 1 interface 148 has no altsetting 0 [ 906.491883][ T932] usb 3-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=34.b1 [ 906.502083][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.511748][ T932] usb 3-1: Product: Е [ 906.517474][ T932] usb 3-1: Manufacturer: ␁ [ 906.522541][ T932] usb 3-1: SerialNumber: ࠄ [ 906.542932][T15534] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 906.604835][ T9] usb 5-1: device descriptor read/64, error -71 [ 906.764636][ T9] usb usb5-port1: attempt power cycle [ 906.792847][T15534] syzkaller0: entered promiscuous mode [ 906.798486][T15534] syzkaller0: entered allmulticast mode [ 906.931100][ T5958] usb 2-1: 0:2 : does not exist [ 907.065664][ T932] usb 3-1: bad CDC descriptors [ 907.071144][ T5958] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 907.114056][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 907.134838][ T9] usb 5-1: device descriptor read/8, error -71 [ 907.140301][ T932] usb 3-1: USB disconnect, device number 111 [ 907.199781][ T5958] usb 2-1: USB disconnect, device number 97 [ 907.384400][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 907.405894][ T9] usb 5-1: device descriptor read/8, error -71 [ 907.525297][ T9] usb usb5-port1: unable to enumerate USB device [ 907.659390][T15569] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2986'. [ 907.804816][T15568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2988'. [ 908.708396][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 908.865591][ T6169] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 909.030030][ T6169] usb 4-1: device descriptor read/64, error -71 [ 909.275126][ T6169] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 909.417169][ T6169] usb 4-1: device descriptor read/64, error -71 [ 909.534447][ T6169] usb usb4-port1: attempt power cycle [ 909.894274][ T6169] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 909.931046][ T6169] usb 4-1: device descriptor read/8, error -71 [ 910.064653][T15585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2994'. [ 910.174250][ T6169] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 910.193871][T15591] 8021q: VLANs not supported on ip6gre0 [ 910.257419][T15592] ptrace attach of "./syz-executor exec"[5857] was attempted by "   /dev/kvm"[15592] [ 910.296072][ T6169] usb 4-1: device descriptor read/8, error -71 [ 910.366095][T15592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 910.414748][ T6169] usb usb4-port1: unable to enumerate USB device [ 910.478672][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 910.487794][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'. [ 910.496680][T15603] netlink: 'syz.1.3000': attribute type 11 has an invalid length. [ 910.518678][T10828] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.528163][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 910.537106][T10828] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.546422][T10828] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.565195][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'. [ 910.575478][T10828] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.591250][T15603] netlink: 'syz.1.3000': attribute type 11 has an invalid length. [ 911.270223][T15609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3003'. [ 911.469676][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 912.041319][T15629] netlink: 'syz.1.3011': attribute type 1 has an invalid length. [ 913.480723][T15625] 8021q: VLANs not supported on ip6gre0 [ 913.897464][T15646] program syz.5.3012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.021991][T15644] ptrace attach of "./syz-executor exec"[15232] was attempted by "   /dev/kvm"[15644] [ 914.091960][T15649] __nla_validate_parse: 1 callbacks suppressed [ 914.091981][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 914.130897][T15088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 914.151223][T15088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 914.164602][T15644] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 914.182524][T15088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 914.197737][T15088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 914.208444][T15088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 914.504185][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 914.734946][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 914.747442][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 914.774064][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.783518][ T9] usb 2-1: Product: syz [ 914.793252][ T9] usb 2-1: Manufacturer: syz [ 914.799262][ T9] usb 2-1: SerialNumber: syz [ 914.826224][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 914.832518][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 915.067718][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 915.075980][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 915.215804][T10783] ================================================================== [ 915.223930][T10783] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 915.231920][T10783] Read of size 8 at addr ffff88807a220108 by task kworker/u8:25/10783 [ 915.240070][T10783] [ 915.242415][T10783] CPU: 0 UID: 0 PID: 10783 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.242434][T10783] Tainted: [L]=SOFTLOCKUP [ 915.242440][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.242448][T10783] Workqueue: netns cleanup_net [ 915.242465][T10783] Call Trace: [ 915.242472][T10783] [ 915.242478][T10783] dump_stack_lvl+0xe8/0x150 [ 915.242494][T10783] print_report+0xca/0x240 [ 915.242506][T10783] ? nf_hook_entry_head+0x1f1/0x2c0 [ 915.242522][T10783] kasan_report+0x118/0x150 [ 915.242536][T10783] ? nf_hook_entry_head+0x1f1/0x2c0 [ 915.242552][T10783] nf_hook_entry_head+0x1f1/0x2c0 [ 915.242567][T10783] __nf_unregister_net_hook+0x74/0x6f0 [ 915.242584][T10783] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 915.242601][T10783] __nft_release_hook+0x180/0x350 [ 915.242613][T10783] nf_tables_pre_exit_net+0xa7/0x110 [ 915.242625][T10783] ops_undo_list+0x187/0x990 [ 915.242638][T10783] ? __pfx_ops_undo_list+0x10/0x10 [ 915.242651][T10783] ? do_raw_spin_unlock+0x122/0x240 [ 915.242668][T10783] cleanup_net+0x4d8/0x7a0 [ 915.242680][T10783] ? __pfx_cleanup_net+0x10/0x10 [ 915.242692][T10783] ? process_scheduled_works+0x9ef/0x1770 [ 915.242704][T10783] ? process_scheduled_works+0x9ef/0x1770 [ 915.242715][T10783] process_scheduled_works+0xad1/0x1770 [ 915.242732][T10783] ? __pfx_process_scheduled_works+0x10/0x10 [ 915.242743][T10783] ? do_raw_spin_lock+0x121/0x290 [ 915.242760][T10783] worker_thread+0x8a0/0xda0 [ 915.242777][T10783] kthread+0x711/0x8a0 [ 915.242791][T10783] ? __pfx_worker_thread+0x10/0x10 [ 915.242802][T10783] ? __pfx_kthread+0x10/0x10 [ 915.242815][T10783] ? _raw_spin_unlock_irq+0x23/0x50 [ 915.242827][T10783] ? __pfx_kthread+0x10/0x10 [ 915.242847][T10783] ret_from_fork+0x510/0xa50 [ 915.242859][T10783] ? __pfx_ret_from_fork+0x10/0x10 [ 915.242868][T10783] ? __switch_to+0xc9e/0x1480 [ 915.242884][T10783] ? __pfx_kthread+0x10/0x10 [ 915.242896][T10783] ret_from_fork_asm+0x1a/0x30 [ 915.242915][T10783] [ 915.242920][T10783] [ 915.419414][T15654] chnl_net:caif_netlink_parms(): no params data found [ 915.419912][T10783] Allocated by task 15533: [ 915.450401][T10783] kasan_save_track+0x3e/0x80 [ 915.455076][T10783] __kasan_slab_alloc+0x6c/0x80 [ 915.459920][T10783] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 915.465807][T10783] kmalloc_reserve+0xbd/0x290 [ 915.470479][T10783] __alloc_skb+0x204/0x3a0 [ 915.474885][T10783] inet6_rt_notify+0x170/0x470 [ 915.479641][T10783] fib6_del+0x1061/0x1560 [ 915.483959][T10783] fib6_clean_node+0x29f/0x5c0 [ 915.488722][T10783] fib6_walk_continue+0x67b/0x910 [ 915.493733][T10783] fib6_walk+0x149/0x290 [ 915.497961][T10783] __fib6_clean_all+0x234/0x380 [ 915.502799][T10783] rt6_disable_ip+0x120/0x720 [ 915.507470][T10783] addrconf_ifdown+0x14d/0x1870 [ 915.512309][T10783] addrconf_notify+0x1bc/0x1050 [ 915.517151][T10783] notifier_call_chain+0x19d/0x3a0 [ 915.522251][T10783] netif_close_many+0x29c/0x410 [ 915.527092][T10783] unregister_netdevice_many_notify+0xb50/0x2340 [ 915.533414][T10783] unregister_netdevice_queue+0x317/0x350 [ 915.539124][T10783] __tun_detach+0x6d9/0x15d0 [ 915.543705][T10783] tun_chr_close+0x10a/0x1c0 [ 915.548278][T10783] __fput+0x44c/0xa70 [ 915.552248][T10783] task_work_run+0x1d4/0x260 [ 915.556835][T10783] exit_to_user_mode_loop+0xef/0x4e0 [ 915.562107][T10783] do_syscall_64+0x2c1/0xf80 [ 915.566693][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.572573][T10783] [ 915.574886][T10783] Freed by task 15533: [ 915.578937][T10783] kasan_save_track+0x3e/0x80 [ 915.583599][T10783] kasan_save_free_info+0x46/0x50 [ 915.588631][T10783] __kasan_slab_free+0x5c/0x80 [ 915.593381][T10783] kmem_cache_free+0x197/0x620 [ 915.598132][T10783] skb_release_data+0x62d/0x7c0 [ 915.602988][T10783] consume_skb+0x9e/0xf0 [ 915.607215][T10783] netlink_broadcast_filtered+0xec7/0x1000 [ 915.613011][T10783] nlmsg_notify+0xf0/0x1a0 [ 915.617413][T10783] fib6_del+0x1061/0x1560 [ 915.621748][T10783] fib6_clean_node+0x29f/0x5c0 [ 915.626499][T10783] fib6_walk_continue+0x67b/0x910 [ 915.631514][T10783] fib6_walk+0x149/0x290 [ 915.635749][T10783] __fib6_clean_all+0x234/0x380 [ 915.640672][T10783] rt6_disable_ip+0x120/0x720 [ 915.645337][T10783] addrconf_ifdown+0x14d/0x1870 [ 915.650176][T10783] addrconf_notify+0x1bc/0x1050 [ 915.655013][T10783] notifier_call_chain+0x19d/0x3a0 [ 915.660109][T10783] netif_close_many+0x29c/0x410 [ 915.664946][T10783] unregister_netdevice_many_notify+0xb50/0x2340 [ 915.671265][T10783] unregister_netdevice_queue+0x317/0x350 [ 915.676997][T10783] __tun_detach+0x6d9/0x15d0 [ 915.681577][T10783] tun_chr_close+0x10a/0x1c0 [ 915.686171][T10783] __fput+0x44c/0xa70 [ 915.690139][T10783] task_work_run+0x1d4/0x260 [ 915.694715][T10783] exit_to_user_mode_loop+0xef/0x4e0 [ 915.699986][T10783] do_syscall_64+0x2c1/0xf80 [ 915.704569][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.710448][T10783] [ 915.712761][T10783] The buggy address belongs to the object at ffff88807a220000 [ 915.712761][T10783] which belongs to the cache skbuff_small_head of size 704 [ 915.727321][T10783] The buggy address is located 264 bytes inside of [ 915.727321][T10783] freed 704-byte region [ffff88807a220000, ffff88807a2202c0) [ 915.741106][T10783] [ 915.743424][T10783] The buggy address belongs to the physical page: [ 915.749819][T10783] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a220 [ 915.758569][T10783] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 915.767053][T10783] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 915.774584][T10783] page_type: f5(slab) [ 915.778550][T10783] raw: 00fff00000000040 ffff88801d687140 ffffea0001f77d00 dead000000000002 [ 915.787115][T10783] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 915.795683][T10783] head: 00fff00000000040 ffff88801d687140 ffffea0001f77d00 dead000000000002 [ 915.804336][T10783] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 915.812991][T10783] head: 00fff00000000002 ffffea0001e88801 00000000ffffffff 00000000ffffffff [ 915.821647][T10783] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 915.830297][T10783] page dumped because: kasan: bad access detected [ 915.836694][T10783] page_owner tracks the page as allocated [ 915.842392][T10783] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 810252732467, free_ts 810066297722 [ 915.862692][T10783] post_alloc_hook+0x234/0x290 [ 915.867446][T10783] get_page_from_freelist+0x24e0/0x2580 [ 915.872978][T10783] __alloc_frozen_pages_noprof+0x181/0x370 [ 915.878785][T10783] alloc_pages_mpol+0x232/0x4a0 [ 915.883622][T10783] allocate_slab+0x86/0x3b0 [ 915.888110][T10783] ___slab_alloc+0xe53/0x1820 [ 915.892776][T10783] __slab_alloc+0x65/0x100 [ 915.897176][T10783] kmem_cache_alloc_node_noprof+0x4ce/0x720 [ 915.903057][T10783] kmalloc_reserve+0xbd/0x290 [ 915.907720][T10783] __alloc_skb+0x204/0x3a0 [ 915.912122][T10783] tcp_stream_alloc_skb+0x3d/0x350 [ 915.917221][T10783] tcp_write_xmit+0xd87/0x6980 [ 915.921972][T10783] __tcp_push_pending_frames+0x97/0x380 [ 915.927500][T10783] tcp_rcv_established+0xfe6/0x2580 [ 915.932683][T10783] tcp_v4_do_rcv+0xa90/0x1430 [ 915.937365][T10783] tcp_v4_rcv+0x2675/0x2f20 [ 915.941864][T10783] page last free pid 12836 tgid 12836 stack trace: [ 915.948370][T10783] __free_frozen_pages+0xbc8/0xd30 [ 915.953478][T10783] device_release+0x9e/0x1d0 [ 915.958070][T10783] kobject_put+0x228/0x570 [ 915.962479][T10783] netdev_run_todo+0xd2c/0xea0 [ 915.967231][T10783] tun_chr_close+0x13c/0x1c0 [ 915.971814][T10783] __fput+0x44c/0xa70 [ 915.975788][T10783] task_work_run+0x1d4/0x260 [ 915.980369][T10783] exit_to_user_mode_loop+0xef/0x4e0 [ 915.985644][T10783] do_syscall_64+0x2c1/0xf80 [ 915.990228][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.996130][T10783] [ 915.998448][T10783] Memory state around the buggy address: [ 916.004064][T10783] ffff88807a220000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.012113][T10783] ffff88807a220080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.020165][T10783] >ffff88807a220100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.028211][T10783] ^ [ 916.032526][T10783] ffff88807a220180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.040583][T10783] ffff88807a220200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.048630][T10783] ================================================================== [ 916.084494][T10783] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 916.091731][T10783] CPU: 1 UID: 0 PID: 10783 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.102929][T10783] Tainted: [L]=SOFTLOCKUP [ 916.107249][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.117308][T10783] Workqueue: netns cleanup_net [ 916.122090][T10783] Call Trace: [ 916.125379][T10783] [ 916.128313][T10783] vpanic+0x1e0/0x670 [ 916.132300][T10783] panic+0xb9/0xc0 [ 916.136029][T10783] ? __pfx_panic+0x10/0x10 [ 916.140450][T10783] ? preempt_schedule_thunk+0x16/0x30 [ 916.145824][T10783] ? preempt_schedule_thunk+0x16/0x30 [ 916.151194][T10783] ? nf_hook_entry_head+0x1f1/0x2c0 [ 916.156395][T10783] check_panic_on_warn+0x89/0xb0 [ 916.161338][T10783] ? nf_hook_entry_head+0x1f1/0x2c0 [ 916.166538][T10783] end_report+0x6f/0x140 [ 916.170784][T10783] kasan_report+0x129/0x150 [ 916.175291][T10783] ? nf_hook_entry_head+0x1f1/0x2c0 [ 916.180499][T10783] nf_hook_entry_head+0x1f1/0x2c0 [ 916.185531][T10783] __nf_unregister_net_hook+0x74/0x6f0 [ 916.190997][T10783] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 916.197329][T10783] __nft_release_hook+0x180/0x350 [ 916.202360][T10783] nf_tables_pre_exit_net+0xa7/0x110 [ 916.207646][T10783] ops_undo_list+0x187/0x990 [ 916.212243][T10783] ? __pfx_ops_undo_list+0x10/0x10 [ 916.217357][T10783] ? do_raw_spin_unlock+0x122/0x240 [ 916.222561][T10783] cleanup_net+0x4d8/0x7a0 [ 916.226976][T10783] ? __pfx_cleanup_net+0x10/0x10 [ 916.231929][T10783] ? process_scheduled_works+0x9ef/0x1770 [ 916.237668][T10783] ? process_scheduled_works+0x9ef/0x1770 [ 916.243404][T10783] process_scheduled_works+0xad1/0x1770 [ 916.248971][T10783] ? __pfx_process_scheduled_works+0x10/0x10 [ 916.254958][T10783] ? do_raw_spin_lock+0x121/0x290 [ 916.260000][T10783] worker_thread+0x8a0/0xda0 [ 916.264604][T10783] kthread+0x711/0x8a0 [ 916.268688][T10783] ? __pfx_worker_thread+0x10/0x10 [ 916.273812][T10783] ? __pfx_kthread+0x10/0x10 [ 916.278411][T10783] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.283615][T10783] ? __pfx_kthread+0x10/0x10 [ 916.288207][T10783] ret_from_fork+0x510/0xa50 [ 916.292803][T10783] ? __pfx_ret_from_fork+0x10/0x10 [ 916.297912][T10783] ? __switch_to+0xc9e/0x1480 [ 916.302596][T10783] ? __pfx_kthread+0x10/0x10 [ 916.307191][T10783] ret_from_fork_asm+0x1a/0x30 [ 916.311968][T10783] [ 916.315323][T10783] Kernel Offset: disabled [ 916.319641][T10783] Rebooting in 86400 seconds..